Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/H8plK6AJ22XAh6mByO-C1w4sjwE.roa
File:                     H8plK6AJ22XAh6mByO-C1w4sjwE.roa (raw, json)
Hash identifier:          42k4TT9cz5e6snSxYETMJQMcwQiyK5OkYRgQUMskHcM=
Subject key identifier:   1F:CA:65:2B:A0:09:DB:65:C0:87:A9:81:C8:EF:82:D7:0E:2C:8F:01
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       08
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/H8plK6AJ22XAh6mByO-C1w4sjwE.roa
Signing time:             Tue 22 Aug 2023 02:03:58 +0000
ROA not before:           Tue 22 Aug 2023 02:03:58 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        220.219.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Tue 22 Aug 2023 07:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 02:03:58 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=1FCA652BA009DB65C087A981C8EF82D70E2C8F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:c7:11:5f:2d:68:65:a6:62:0b:95:27:6e:
                    19:d8:1f:9a:62:f5:66:77:3c:14:cf:76:0e:15:75:
                    1b:6e:11:bd:20:9a:3e:23:96:e2:3a:ea:c1:c6:eb:
                    f1:30:ec:fb:9f:f9:39:d7:b8:c5:ea:f0:3f:91:4c:
                    96:5e:a1:71:75:a2:6a:c6:ca:45:1c:22:7d:5d:fc:
                    b6:df:2a:60:54:0e:b9:66:23:df:bf:58:8b:0c:67:
                    a1:93:28:6f:ba:17:f5:47:67:fd:95:34:40:ee:18:
                    d6:77:24:91:79:18:21:2c:4a:6d:ed:42:ff:72:b9:
                    3b:d5:20:90:93:4b:37:70:15:8c:6a:fe:6d:67:ef:
                    0e:02:01:a7:05:60:63:0c:73:54:c0:a2:9d:39:8a:
                    1b:df:13:d8:2a:93:45:13:8b:c1:27:66:ae:8d:fb:
                    7e:2a:2f:ac:83:a2:d3:4e:e4:2e:d3:9a:23:6a:d1:
                    04:cc:9e:6b:58:c6:24:54:03:e9:d2:63:c0:3d:ea:
                    ec:8e:b2:1a:28:7b:ab:0f:29:91:d5:2b:79:97:cf:
                    5d:70:d8:89:69:4a:98:76:e0:c6:ff:5a:ae:61:9d:
                    e2:2c:fd:05:c9:44:88:a5:95:7f:d9:c2:5a:91:4f:
                    fd:e5:16:b9:d3:dd:82:15:47:71:83:4b:15:c4:47:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CA:65:2B:A0:09:DB:65:C0:87:A9:81:C8:EF:82:D7:0E:2C:8F:01
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/H8plK6AJ22XAh6mByO-C1w4sjwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:e4:49:f6:6e:5e:a3:7a:de:77:d6:ba:d5:c1:b7:00:5e:
         67:64:91:88:17:c1:43:31:d1:3c:c7:d0:74:aa:d8:86:ae:df:
         2a:e3:b5:8f:2e:ab:44:bd:b7:48:00:d9:8f:00:39:87:8d:90:
         f3:6a:35:2a:76:3e:45:7e:b1:34:84:4c:6a:33:13:1d:f4:08:
         8a:f4:e1:7c:31:2a:18:21:3c:5c:b9:1f:dc:3b:62:5c:a1:cc:
         d2:62:85:18:94:df:c0:a8:7a:c6:fa:f2:8f:1d:2f:5d:ac:79:
         9b:36:4e:f9:86:44:7a:f1:2e:e8:d0:78:78:52:d0:3c:6d:be:
         f8:04:9e:1a:c3:5e:5f:12:38:42:36:b1:e8:6a:8d:5c:83:d4:
         02:d9:48:23:91:86:05:47:a7:c6:25:39:63:12:92:ea:3a:9c:
         6a:4c:af:0a:72:27:78:62:54:88:1b:46:0d:80:24:6d:fa:df:
         ff:3b:9c:19:c4:87:2f:64:06:2b:26:12:23:c5:0c:28:8c:96:
         34:5a:b7:ff:12:c4:f1:80:07:a0:e3:94:29:f6:bf:80:4c:d2:
         98:3a:14:f0:cd:5d:dc:72:f5:3b:47:4d:a5:ad:af:e2:48:a5:
         b1:d8:74:e4:19:f7:b1:e4:19:57:dd:ae:50:35:1a:ff:3b:1a:
         44:f3:6a:a3
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTIzMDgyMjAy
MDM1OFoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoMUZDQTY1MkJBMDA5REI2
NUMwODdBOTgxQzhFRjgyRDcwRTJDOEYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALrZxxFfLWhlpmILlSduGdgfmmL1Znc8FM92DhV1G24RvSCaPiOW
4jrqwcbr8TDs+5/5Ode4xerwP5FMll6hcXWiasbKRRwifV38tt8qYFQOuWYj379Y
iwxnoZMob7oX9Udn/ZU0QO4Y1nckkXkYISxKbe1C/3K5O9UgkJNLN3AVjGr+bWfv
DgIBpwVgYwxzVMCinTmKG98T2CqTRROLwSdmro37fiovrIOi007kLtOaI2rRBMye
a1jGJFQD6dJjwD3q7I6yGih7qw8pkdUreZfPXXDYiWlKmHbgxv9armGd4iz9BclE
iKWVf9nCWpFP/eUWudPdghVHcYNLFcRHcTkCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBQfymUroAnbZcCHqYHI74LXDiyPATAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYvSDhwbEs2QUoyMlhBaDZtQnlPLUMxdzRzandFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDANzbMA0GCSqGSIb3DQEBCwUAA4IBAQBau+RJ9m5eo3red9a61cG3AF5nZJGI
F8FDMdE8x9B0qtiGrt8q47WPLqtEvbdIANmPADmHjZDzajUqdj5FfrE0hExqMxMd
9AiK9OF8MSoYITxcuR/cO2JcoczSYoUYlN/AqHrG+vKPHS9drHmbNk75hkR68S7o
0Hh4UtA8bb74BJ4aw15fEjhCNrHoao1cg9QC2UgjkYYFR6fGJTljEpLqOpxqTK8K
cid4YlSIG0YNgCRt+t//O5wZxIcvZAYrJhIjxQwojJY0Wrf/EsTxgAeg45Qp9r+A
TNKYOhTwzV3ccvU7R02lra/iSKWx2HTkGfex5BlX3a5QNRr/OxpE82qj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org