Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bkLG0JN8ek8z1UdlTKyA1I1ChdM.roa
File:                     bkLG0JN8ek8z1UdlTKyA1I1ChdM.roa (raw, json)
Hash identifier:          vKBr7/NVgrlVbM+N+gyOqnW4geCj5rIP0HkbOg6RFdg=
Subject key identifier:   6E:42:C6:D0:93:7C:7A:4F:33:D5:47:65:4C:AC:80:D4:8D:42:85:D3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0187
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bkLG0JN8ek8z1UdlTKyA1I1ChdM.roa
Signing time:             Fri 07 Jul 2023 04:12:32 +0000
ROA not before:           Fri 07 Jul 2023 04:12:32 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.5.248.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:32 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6E42C6D0937C7A4F33D547654CAC80D48D4285D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:3c:09:d7:fd:b3:7a:c6:55:82:bb:6d:26:
                    96:f3:b4:dd:84:bf:d0:22:fa:e5:58:9f:03:20:d1:
                    ea:04:c1:cb:96:60:3f:85:0f:9c:68:3c:3a:ec:5f:
                    49:15:0d:3f:1e:cc:84:fe:04:13:b8:59:dd:95:57:
                    89:f9:de:b1:93:4c:20:df:f8:ae:d7:f9:a5:31:14:
                    4a:a1:fa:4f:95:79:91:61:18:88:d0:42:76:ce:57:
                    f2:e5:3d:7e:e1:84:bf:3d:4e:d3:14:be:d1:a8:18:
                    26:81:d9:1e:d5:ab:5a:5e:ca:95:40:3e:1f:46:fe:
                    fe:26:6d:b0:b5:71:dd:95:15:4d:be:84:6b:63:06:
                    96:fd:7f:79:77:36:9f:96:af:ec:33:e1:fa:2e:0f:
                    b2:12:53:d9:46:18:0e:0e:c6:37:4a:ee:93:e8:3d:
                    82:02:8a:bc:8a:ee:ac:7f:a5:67:c1:90:2f:9c:3b:
                    f7:70:94:93:82:0a:c0:56:64:e8:76:aa:dc:a2:c0:
                    71:ff:84:71:94:27:83:48:35:a2:b7:b8:0d:ae:ff:
                    35:7e:5b:f3:4e:a8:79:8e:e0:0e:c6:51:f8:b3:55:
                    99:04:7d:28:1f:18:97:26:54:67:c2:16:76:e1:f2:
                    0a:32:58:76:89:95:dd:1e:eb:d6:99:47:38:b2:e5:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:42:C6:D0:93:7C:7A:4F:33:D5:47:65:4C:AC:80:D4:8D:42:85:D3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bkLG0JN8ek8z1UdlTKyA1I1ChdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:d3:00:49:af:23:61:96:d5:67:eb:84:a4:c3:7d:dd:e1:
         52:27:c8:83:3a:e0:fd:e2:57:6f:7d:6b:c7:c5:21:d7:e8:d3:
         04:36:0f:07:19:00:16:f6:26:c1:b7:0c:18:56:ba:c4:ef:91:
         64:2c:03:6e:84:22:1b:08:18:97:a3:6d:62:8d:a0:b4:7f:b7:
         44:da:8b:ef:de:43:31:f4:8c:4e:4c:9e:d6:bd:aa:8f:b7:19:
         e6:7d:94:7e:c5:df:d8:dc:05:10:77:16:e8:7a:54:fa:44:7c:
         bb:f4:88:e3:7c:50:fc:95:8a:6d:12:74:25:51:2f:6e:08:4d:
         fe:aa:dd:0e:86:80:ba:ad:d5:2f:72:62:ef:6a:27:69:a1:f4:
         b4:7d:26:39:c6:37:80:70:72:ae:60:b6:7b:7b:87:ad:06:63:
         0e:75:c7:32:a4:8f:a4:62:f1:69:2a:46:98:f5:b8:90:b8:4c:
         42:53:a0:b4:c2:ed:9d:39:3d:37:20:27:86:de:df:0e:a7:58:
         70:21:b8:c5:69:71:bc:83:3c:06:41:ba:49:c4:ee:6d:b3:3a:
         ef:ba:fd:5b:12:41:95:63:dc:ed:45:89:aa:53:9a:18:73:37:
         85:00:be:21:29:5d:7f:a9:da:aa:da:42:33:0d:bf:32:f1:7e:
         92:df:b8:3c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyMzJaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDZFNDJDNkQwOTM3QzdB
NEYzM0Q1NDc2NTRDQUM4MEQ0OEQ0Mjg1RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3ojwJ1/2zesZVgrttJpbztN2Ev9Ai+uVYnwMg0eoEwcuWYD+F
D5xoPDrsX0kVDT8ezIT+BBO4Wd2VV4n53rGTTCDf+K7X+aUxFEqh+k+VeZFhGIjQ
QnbOV/LlPX7hhL89TtMUvtGoGCaB2R7Vq1peypVAPh9G/v4mbbC1cd2VFU2+hGtj
Bpb9f3l3Np+Wr+wz4fouD7ISU9lGGA4OxjdK7pPoPYICiryK7qx/pWfBkC+cO/dw
lJOCCsBWZOh2qtyiwHH/hHGUJ4NINaK3uA2u/zV+W/NOqHmO4A7GUfizVZkEfSgf
GJcmVGfCFnbh8goyWHaJld0e69aZRziy5RCHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUbkLG0JN8ek8z1UdlTKyA1I1ChdMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2JrTEcwSk44ZWs4ejFVZGxUS3lBMUkxQ2hkTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM9BfgwDQYJKoZIhvcNAQELBQADggEBAJVb0wBJryNhltVn64Skw33d4VIn
yIM64P3iV299a8fFIdfo0wQ2DwcZABb2JsG3DBhWusTvkWQsA26EIhsIGJejbWKN
oLR/t0Tai+/eQzH0jE5Mnta9qo+3GeZ9lH7F39jcBRB3Fuh6VPpEfLv0iON8UPyV
im0SdCVRL24ITf6q3Q6GgLqt1S9yYu9qJ2mh9LR9JjnGN4Bwcq5gtnt7h60GYw51
xzKkj6Ri8WkqRpj1uJC4TEJToLTC7Z05PTcgJ4be3w6nWHAhuMVpcbyDPAZBuknE
7m2zOu+6/VsSQZVj3O1FiapTmhhzN4UAviEpXX+p2qraQjMNvzLxfpLfuDw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org