Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/EEL9YVYNE7YsGCDcqWASb5n9C94.roa
File:                     EEL9YVYNE7YsGCDcqWASb5n9C94.roa (raw, json)
Hash identifier:          gyrO0YPDIXrRbYNqqDNi+tYbFTF+8GNgmyw1YHrpi1c=
Subject key identifier:   10:42:FD:61:56:0D:13:B6:2C:18:20:DC:A9:60:12:6F:99:FD:0B:DE
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       30
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/EEL9YVYNE7YsGCDcqWASb5n9C94.roa
Signing time:             Fri 29 Sep 2023 06:36:57 +0000
ROA not before:           Fri 29 Sep 2023 06:36:57 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        219.109.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:57 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1042FD61560D13B62C1820DCA960126F99FD0BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:68:a1:0e:2a:e0:c6:4f:89:9a:28:e9:2b:
                    e3:6c:1d:c1:2f:7d:53:13:0e:76:db:7a:d8:ab:fa:
                    73:a0:b9:cc:43:1a:1a:50:17:c8:47:b9:f4:22:16:
                    be:6a:e3:81:55:55:5e:3f:ef:f6:f0:a3:8c:d8:c8:
                    c0:a9:61:c3:1f:3c:62:91:43:2b:40:9b:47:64:bb:
                    65:cb:f1:d2:da:83:ca:75:79:6c:f8:29:18:c9:70:
                    09:8c:6b:0c:5b:c6:06:94:b7:a8:9e:b0:2e:b0:7f:
                    df:9c:5c:80:65:cf:0c:6d:af:75:95:8c:a2:33:94:
                    68:d8:d9:bf:12:50:dd:f8:39:c2:09:5f:d6:e7:c3:
                    c0:73:e4:0f:97:f9:ea:05:48:c1:42:85:1c:4b:b4:
                    9e:f0:e5:71:d9:9b:08:77:ae:00:4a:ff:31:31:37:
                    a4:29:89:54:18:bb:9a:da:f6:47:6f:8f:78:87:b1:
                    21:d2:22:a7:db:e7:53:d4:22:67:08:b1:bc:b5:86:
                    44:1b:d8:4f:2c:48:62:cb:ae:9b:8f:ee:b1:23:64:
                    5b:27:6c:f7:41:90:f1:d0:fe:77:7c:31:4b:88:48:
                    5d:42:d8:fd:2d:c0:14:38:d6:64:74:4e:24:78:13:
                    f6:ce:a7:26:53:a4:c9:2e:bf:85:2c:26:36:2e:c1:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:FD:61:56:0D:13:B6:2C:18:20:DC:A9:60:12:6F:99:FD:0B:DE
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/EEL9YVYNE7YsGCDcqWASb5n9C94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:15:0a:6c:1c:4d:c7:a6:19:f7:dd:93:f0:3e:07:88:32:76:
         8b:ac:07:16:73:bd:de:44:b3:0f:a9:41:09:dc:ed:2e:a9:d0:
         f6:7c:69:b2:73:54:14:33:c4:7e:d4:88:67:bd:3e:4e:80:bf:
         24:64:cc:19:0c:56:ec:fd:23:92:69:0b:97:1e:3b:d5:fd:6d:
         89:8e:94:7b:5d:94:24:a0:43:53:f2:4f:4a:cc:96:5f:29:52:
         b1:0b:67:54:57:8a:11:fb:bd:fe:84:eb:ad:d3:3e:9c:35:01:
         30:bd:6b:01:62:83:6e:6b:f2:43:6c:ec:fc:06:f2:35:82:f7:
         38:6a:0e:74:4b:fb:43:2b:83:5e:e8:59:14:85:2e:0d:bb:6b:
         22:6f:f3:54:d8:a8:e2:64:e5:af:57:23:e0:a1:b7:dc:9b:4b:
         67:3e:d9:87:87:60:bf:5d:e6:fb:31:df:51:18:2c:39:31:3c:
         26:e1:70:a0:94:34:88:e0:bb:28:45:14:90:36:8d:72:49:65:
         59:9a:6a:f8:76:7e:1e:54:63:d9:6b:c5:da:b3:20:9f:cd:95:
         6b:c4:16:d6:ee:bf:41:00:d2:5f:d1:34:ea:83:b6:9a:38:58:
         1f:6b:1f:94:9f:dd:a3:d1:23:1b:ac:f8:be:41:16:e6:5c:94:
         55:ad:e4:0d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2
MzY1N1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMTA0MkZENjE1NjBEMTNC
NjJDMTgyMERDQTk2MDEyNkY5OUZEMEJERTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALyQaKEOKuDGT4maKOkr42wdwS99UxMOdtt62Kv6c6C5zEMaGlAX
yEe59CIWvmrjgVVVXj/v9vCjjNjIwKlhwx88YpFDK0CbR2S7Zcvx0tqDynV5bPgp
GMlwCYxrDFvGBpS3qJ6wLrB/35xcgGXPDG2vdZWMojOUaNjZvxJQ3fg5wglf1ufD
wHPkD5f56gVIwUKFHEu0nvDlcdmbCHeuAEr/MTE3pCmJVBi7mtr2R2+PeIexIdIi
p9vnU9QiZwixvLWGRBvYTyxIYsuum4/usSNkWyds90GQ8dD+d3wxS4hIXULY/S3A
FDjWZHROJHgT9s6nJlOkyS6/hSwmNi7BpMsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQQQv1hVg0TtiwYINypYBJvmf0L3jAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvRUVMOVlWWU5FN1lzR0NEY3FXQVNiNW45Qzk0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNttQDANBgkqhkiG9w0BAQsFAAOCAQEAWRUKbBxNx6YZ992T8D4HiDJ2i6wH
FnO93kSzD6lBCdztLqnQ9nxpsnNUFDPEftSIZ70+ToC/JGTMGQxW7P0jkmkLlx47
1f1tiY6Ue12UJKBDU/JPSsyWXylSsQtnVFeKEfu9/oTrrdM+nDUBML1rAWKDbmvy
Q2zs/AbyNYL3OGoOdEv7QyuDXuhZFIUuDbtrIm/zVNio4mTlr1cj4KG33JtLZz7Z
h4dgv13m+zHfURgsOTE8JuFwoJQ0iOC7KEUUkDaNckllWZpq+HZ+HlRj2WvF2rMg
n82Va8QW1u6/QQDSX9E06oO2mjhYH2sflJ/do9EjG6z4vkEW5lyUVa3kDQ==
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org