Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/swd1yTQPvFCs5ZrRyqzbVedzmSM.roa
File:                     swd1yTQPvFCs5ZrRyqzbVedzmSM.roa (raw, json)
Hash identifier:          hSR/Ro01zA6RKG2fLSQndqFTACLK1E6ct6g/osQ88q0=
Subject key identifier:   B3:07:75:C9:34:0F:BC:50:AC:E5:9A:D1:CA:AC:DB:55:E7:73:99:23
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       FB
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/swd1yTQPvFCs5ZrRyqzbVedzmSM.roa
Signing time:             Tue 25 Jul 2023 03:13:36 +0000
ROA not before:           Tue 25 Jul 2023 03:13:36 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        133.114.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jul 25 03:13:36 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B30775C9340FBC50ACE59AD1CAACDB55E7739923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:a1:ca:c0:5c:0c:f0:3e:af:48:ec:b3:76:
                    f4:a3:34:54:0e:a2:eb:12:a5:98:c8:26:d9:72:0a:
                    e6:fd:d9:e4:ab:fb:0d:32:c2:7b:a1:2a:ba:81:50:
                    08:1b:59:98:f7:9f:85:3f:e0:34:4b:41:a2:75:00:
                    ca:fd:c3:e8:bb:d4:28:5b:5b:9d:f9:cc:97:da:b3:
                    44:16:4f:e3:d5:a5:5a:63:8f:f7:87:e7:1a:30:e6:
                    72:ff:d8:ab:7f:70:6a:6f:ba:bf:4c:2a:8f:0a:ff:
                    23:1a:2f:99:a2:ed:f6:90:ed:68:8b:ef:c0:54:de:
                    73:fc:8a:a3:16:25:bd:b5:f9:3f:52:8e:c9:ac:df:
                    c8:5b:a6:28:6c:b0:0c:ad:be:bd:05:0b:4f:a1:c1:
                    1c:a6:ed:db:0e:09:e7:27:eb:5d:32:30:72:d3:fd:
                    a6:28:6a:28:c2:4f:69:fc:62:0d:90:9e:60:72:28:
                    ff:03:c0:55:cb:5d:3e:e2:f2:9a:e0:18:85:9f:2d:
                    67:c1:e7:3f:ae:1c:0b:11:42:dd:a9:70:a6:93:c9:
                    fe:36:c1:39:db:13:b7:fd:e8:bd:db:58:3a:cb:26:
                    14:d3:d3:02:e2:14:c7:7e:b1:2d:39:d3:34:f0:9d:
                    ee:99:f5:0e:ab:15:15:dc:dc:1a:b9:23:d4:1a:39:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:07:75:C9:34:0F:BC:50:AC:E5:9A:D1:CA:AC:DB:55:E7:73:99:23
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/swd1yTQPvFCs5ZrRyqzbVedzmSM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.114.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:c1:81:78:82:63:6a:c4:54:62:27:aa:fd:5f:b0:2a:53:a0:
         4a:78:ec:b5:9a:31:2f:00:b6:c9:4a:09:20:80:fd:93:97:62:
         dc:80:ee:60:78:14:0b:1d:b2:d8:91:ef:dd:a6:16:c7:f7:c7:
         2a:78:89:48:d8:a0:3a:21:0b:47:b8:46:1d:d5:e5:2b:97:24:
         af:b9:a6:8d:c3:86:a9:32:bf:ea:83:af:fc:44:be:c7:9f:0b:
         c7:bb:ef:01:76:14:d3:62:ac:71:03:48:bf:13:40:b0:d9:89:
         e4:7f:91:ad:c2:16:b1:07:fb:82:e1:de:2f:b1:5d:e8:d2:50:
         eb:a4:6b:15:da:aa:b9:e8:4c:9f:44:6a:b4:cb:05:93:9d:7f:
         d4:d9:2a:f6:ec:7f:fe:1d:12:c6:52:dc:0d:23:be:41:25:eb:
         99:c8:14:22:56:99:6d:70:5d:b8:48:64:cc:cc:9b:bd:db:30:
         bf:f7:7a:a8:a2:77:42:ac:5e:5b:c7:2c:2d:36:10:fa:bc:dc:
         07:94:6a:0e:66:01:82:3d:72:03:46:28:e0:1f:12:cc:dc:b9:
         6a:7c:27:26:d3:fe:a8:20:5b:eb:38:f6:f5:09:41:92:ad:e2:
         7a:25:ab:8a:b6:1f:23:04:a5:cf:e6:40:7f:ed:6f:e5:ba:c5:
         f9:89:7e:8b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzA3MjUw
MzEzMzZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEIzMDc3NUM5MzQwRkJD
NTBBQ0U1OUFEMUNBQUNEQjU1RTc3Mzk5MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0vqHKwFwM8D6vSOyzdvSjNFQOousSpZjIJtlyCub92eSr+w0y
wnuhKrqBUAgbWZj3n4U/4DRLQaJ1AMr9w+i71ChbW535zJfas0QWT+PVpVpjj/eH
5xow5nL/2Kt/cGpvur9MKo8K/yMaL5mi7faQ7WiL78BU3nP8iqMWJb21+T9Sjsms
38hbpihssAytvr0FC0+hwRym7dsOCecn610yMHLT/aYoaijCT2n8Yg2QnmByKP8D
wFXLXT7i8prgGIWfLWfB5z+uHAsRQt2pcKaTyf42wTnbE7f96L3bWDrLJhTT0wLi
FMd+sS050zTwne6Z9Q6rFRXc3Bq5I9QaOS4hAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUswd1yTQPvFCs5ZrRyqzbVedzmSMwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9zd2QxeVRRUHZGQ3M1WnJSeXF6YlZlZHptU00ucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAhXIwDQYJKoZIhvcNAQELBQADggEBALrBgXiCY2rEVGInqv1fsCpToEp47LWa
MS8AtslKCSCA/ZOXYtyA7mB4FAsdstiR792mFsf3xyp4iUjYoDohC0e4Rh3V5SuX
JK+5po3Dhqkyv+qDr/xEvsefC8e77wF2FNNirHEDSL8TQLDZieR/ka3CFrEH+4Lh
3i+xXejSUOukaxXaqrnoTJ9EarTLBZOdf9TZKvbsf/4dEsZS3A0jvkEl65nIFCJW
mW1wXbhIZMzMm73bML/3eqiid0KsXlvHLC02EPq83AeUag5mAYI9cgNGKOAfEszc
uWp8JybT/qggW+s49vUJQZKt4nolq4q2HyMEpc/mQH/tb+W6xfmJfos=
-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:42 2024 by rpki-client on console-ams.rpki-client.org