Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/b8s2Ttwd_zlpxYWL732epdv7gyY.roa
File:                     b8s2Ttwd_zlpxYWL732epdv7gyY.roa (raw, json)
Hash identifier:          IS1s/2ZCfP+DkdIT1Oa0pBnU1DRWl9ijgcUzWzSteLU=
Subject key identifier:   6F:CB:36:4E:DC:1D:FF:39:69:C5:85:8B:EF:7D:9E:A5:DB:FB:83:26
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01A1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/b8s2Ttwd_zlpxYWL732epdv7gyY.roa
Signing time:             Fri 07 Jul 2023 04:14:30 +0000
ROA not before:           Fri 07 Jul 2023 04:14:30 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.157.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:30 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6FCB364EDC1DFF3969C5858BEF7D9EA5DBFB8326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:43:14:ca:82:e5:3d:8f:4b:2b:e1:f6:b9:
                    dd:9a:9b:52:fe:02:a7:84:d5:b8:16:a4:27:74:01:
                    37:56:b3:7e:2b:7b:e1:9d:66:01:68:4b:b4:66:ff:
                    c0:30:3e:55:37:b7:8b:48:21:08:14:f2:b3:7c:29:
                    c0:bf:03:23:11:d2:98:3a:a0:83:4e:6d:a0:3f:28:
                    a9:ca:af:1b:b4:65:d3:98:ef:ea:9e:ae:cd:91:26:
                    5a:ab:3a:df:4c:40:dd:9c:78:fc:19:53:27:3c:7d:
                    ae:31:53:50:e8:ac:69:2e:b0:d4:b3:07:ca:4b:96:
                    01:6e:b9:50:39:ef:87:f0:ab:1f:32:4a:d7:88:df:
                    97:bd:cf:ce:9a:ab:33:17:76:aa:d4:42:18:b4:33:
                    68:85:b8:eb:96:b6:ef:9f:c8:47:f9:d8:87:b3:60:
                    c3:6f:a9:ec:b6:f1:7a:2a:4f:94:aa:60:e9:c0:da:
                    cb:c7:97:00:39:77:5e:e4:ed:db:37:bd:2d:75:16:
                    f4:70:c1:42:12:a2:d0:e0:ad:f4:0e:63:d4:23:84:
                    f4:dc:5d:41:88:f7:37:7e:f2:ee:50:04:e6:87:22:
                    63:15:ac:40:6f:75:8c:6e:35:3d:8c:30:04:f8:73:
                    8d:7f:1f:5f:36:de:62:57:46:3c:9b:0d:60:97:d1:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:36:4E:DC:1D:FF:39:69:C5:85:8B:EF:7D:9E:A5:DB:FB:83:26
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/b8s2Ttwd_zlpxYWL732epdv7gyY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.157.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         53:33:0c:1c:3a:6a:c7:88:bd:d9:4b:f9:1d:7a:2b:d3:76:ea:
         ce:12:1d:98:00:01:33:0a:ba:9c:52:d6:2c:59:b4:ba:93:72:
         94:21:35:73:4c:1d:0f:b6:46:c8:b9:17:ac:80:d3:41:6e:b4:
         5e:b5:cd:f9:ce:85:7e:e6:17:c4:26:f6:36:3e:a0:18:09:0b:
         47:63:f3:f0:03:5c:84:01:3c:1f:de:c2:b8:51:2c:67:ee:08:
         f8:37:50:12:ed:b3:cc:61:77:62:45:b3:a9:03:a0:05:ee:e1:
         a8:56:d0:fd:1e:1d:f7:41:a9:38:ce:d2:b5:4a:91:ed:1f:ad:
         bc:0f:55:a6:e2:dc:42:de:e5:34:a5:89:58:ca:19:2a:89:e3:
         c2:04:0a:31:23:3d:60:45:a2:7d:b4:fb:80:dc:d0:ae:c2:1c:
         5e:e1:db:6e:c6:77:f4:1c:55:6e:67:c5:22:d3:e3:d0:8c:ce:
         11:85:a9:e1:86:90:9e:c2:b3:ab:49:59:3a:1e:b3:f7:3f:c0:
         f0:ec:e8:11:bb:fa:a5:fa:84:66:d4:cd:9c:23:cf:e0:75:94:
         8f:37:ed:73:0c:6c:50:51:f6:f0:26:6f:c3:17:56:d9:d5:f3:
         94:f6:a3:bc:8f:bb:0d:e4:86:75:4e:59:49:d9:ea:5b:e6:56:
         51:ff:ed:be
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzBaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDZGQ0IzNjRFREMxREZG
Mzk2OUM1ODU4QkVGN0Q5RUE1REJGQjgzMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnxUMUyoLlPY9LK+H2ud2am1L+AqeE1bgWpCd0ATdWs34re+Gd
ZgFoS7Rm/8AwPlU3t4tIIQgU8rN8KcC/AyMR0pg6oINObaA/KKnKrxu0ZdOY7+qe
rs2RJlqrOt9MQN2cePwZUyc8fa4xU1DorGkusNSzB8pLlgFuuVA574fwqx8ySteI
35e9z86aqzMXdqrUQhi0M2iFuOuWtu+fyEf52IezYMNvqey28XoqT5SqYOnA2svH
lwA5d17k7ds3vS11FvRwwUISotDgrfQOY9QjhPTcXUGI9zd+8u5QBOaHImMVrEBv
dYxuNT2MMAT4c41/H1823mJXRjybDWCX0bLTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUb8s2Ttwd/zlpxYWL732epdv7gyYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2I4czJUdHdkX3pscHhZV0w3MzJlcGR2N2d5WS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc7nQAwDQYJKoZIhvcNAQELBQADggEBAFMzDBw6aseIvdlL+R16K9N26s4S
HZgAATMKupxS1ixZtLqTcpQhNXNMHQ+2Rsi5F6yA00FutF61zfnOhX7mF8Qm9jY+
oBgJC0dj8/ADXIQBPB/ewrhRLGfuCPg3UBLts8xhd2JFs6kDoAXu4ahW0P0eHfdB
qTjO0rVKke0frbwPVabi3ELe5TSliVjKGSqJ48IECjEjPWBFon20+4Dc0K7CHF7h
227Gd/QcVW5nxSLT49CMzhGFqeGGkJ7Cs6tJWToes/c/wPDs6BG7+qX6hGbUzZwj
z+B1lI837XMMbFBR9vAmb8MXVtnV85T2o7yPuw3khnVOWUnZ6lvmVlH/7b4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org