Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/FE5OKnrwqPPrvJ6uHZbQAj3ZTuU.roa
File:                     FE5OKnrwqPPrvJ6uHZbQAj3ZTuU.roa (raw, json)
Hash identifier:          M/eOykMG96/HjrNq7CXaKxG/2riAMwo8VpOT1AgCrIs=
Subject key identifier:   14:4E:4E:2A:7A:F0:A8:F3:EB:BC:9E:AE:1D:96:D0:02:3D:D9:4E:E5
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       03
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/FE5OKnrwqPPrvJ6uHZbQAj3ZTuU.roa
Signing time:             Thu 13 Oct 2022 06:46:08 +0000
ROA not before:           Thu 13 Oct 2022 06:46:08 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        61.114.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:46:08 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=144E4E2A7AF0A8F3EBBC9EAE1D96D0023DD94EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:0c:0a:64:74:fb:ec:65:90:83:72:20:ac:
                    3b:d7:ed:7e:20:07:35:d8:a8:f8:11:d3:ff:10:2a:
                    10:93:b4:4b:40:f8:a0:78:f3:de:45:1f:f2:a2:ed:
                    39:2b:f0:ab:9b:4c:5e:3c:1f:ab:9b:e5:d3:04:cf:
                    28:f7:20:1f:02:d3:46:c6:76:3f:eb:40:29:56:2f:
                    11:e9:d8:6e:77:83:52:fa:2a:93:9e:68:b1:07:1a:
                    9d:3f:27:45:b0:ac:dc:7b:8c:24:9c:c3:ed:91:4b:
                    5b:d0:71:90:f5:07:cb:e5:d8:7f:f3:c8:6a:35:8f:
                    a7:6f:54:36:9f:24:39:29:b5:a0:95:82:38:4f:95:
                    94:b4:27:b4:b7:ab:98:7c:45:e2:eb:3a:14:8e:8a:
                    7c:e9:5f:f1:5c:0e:a7:97:ae:29:04:de:4e:a5:76:
                    69:3a:eb:ec:f8:ad:68:e9:ab:9b:47:cc:19:bc:67:
                    be:bf:18:ba:fa:5f:e3:73:5f:71:c1:16:d2:5f:03:
                    8a:18:de:c9:db:74:f6:ef:f0:93:29:d3:2d:95:e0:
                    b1:c6:8e:3b:36:96:05:c5:e5:da:2f:fc:29:d5:7a:
                    dc:97:44:25:b8:8b:06:84:99:2f:05:b3:34:f7:db:
                    c5:e9:5f:90:a4:9d:59:cd:5a:43:5b:49:75:94:80:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4E:4E:2A:7A:F0:A8:F3:EB:BC:9E:AE:1D:96:D0:02:3D:D9:4E:E5
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/FE5OKnrwqPPrvJ6uHZbQAj3ZTuU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:55:17:9f:ab:ff:a5:96:c9:8d:94:b3:8d:bb:9d:5f:2f:
         b1:fe:f4:b9:79:1e:5b:8d:58:ef:62:ee:b0:5b:fa:16:c4:48:
         7f:87:22:27:06:9e:0c:76:eb:ac:f0:79:75:6c:2a:f1:60:b4:
         c0:44:a4:02:1e:d3:7e:00:a1:d2:b7:f4:6a:ad:89:f0:60:a6:
         b5:b9:7f:01:41:5f:30:02:6c:74:d6:6b:e7:b2:40:4e:04:f3:
         fa:fa:9d:48:82:9a:11:5f:e4:2d:ed:89:58:89:90:f9:ae:3c:
         08:a0:60:c8:9a:33:f7:de:af:75:0a:16:d1:9e:4f:bb:9d:16:
         0a:b4:ad:b3:4c:98:3a:36:fa:a1:5a:ca:8a:ab:20:00:f6:e0:
         c4:e2:8b:4f:b7:7a:b7:79:02:a3:ee:29:1a:9d:c9:d0:4d:41:
         cd:e8:d3:55:7a:e4:fd:49:d4:a4:fc:0a:74:c8:26:41:04:3b:
         69:f6:4e:e0:a6:57:14:20:9c:2e:04:98:3b:72:fb:7a:23:ff:
         35:27:a1:32:0a:5a:6b:96:16:0b:57:85:77:56:fb:5e:dc:7f:
         09:94:46:5a:a6:ad:09:5a:38:0e:a0:17:29:bf:43:3d:08:a6:
         84:35:e1:62:1f:37:2c:68:c1:c1:56:cb:a5:f3:f2:7e:98:8b:
         1e:b2:b9:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIyMTAxMzA2
NDYwOFoXDTIzMTAxMzA2MzczMlowMzExMC8GA1UEAxMoMTQ0RTRFMkE3QUYwQThG
M0VCQkM5RUFFMUQ5NkQwMDIzREQ5NEVFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7FDApkdPvsZZCDciCsO9ftfiAHNdio+BHT/xAqEJO0S0D4oHjz
3kUf8qLtOSvwq5tMXjwfq5vl0wTPKPcgHwLTRsZ2P+tAKVYvEenYbneDUvoqk55o
sQcanT8nRbCs3HuMJJzD7ZFLW9BxkPUHy+XYf/PIajWPp29UNp8kOSm1oJWCOE+V
lLQntLermHxF4us6FI6KfOlf8VwOp5euKQTeTqV2aTrr7PitaOmrm0fMGbxnvr8Y
uvpf43NfccEW0l8Dihjeydt09u/wkynTLZXgscaOOzaWBcXl2i/8KdV63JdEJbiL
BoSZLwWzNPfbxelfkKSdWc1aQ1tJdZSAgfUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQUTk4qevCo8+u8nq4dltACPdlO5TAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvRkU1T0tucndxUFBydko2dUhaYlFBajNaVHVVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD1yYDANBgkqhkiG9w0BAQsFAAOCAQEAJKFVF5+r/6WWyY2Us427nV8vsf70
uXkeW41Y72LusFv6FsRIf4ciJwaeDHbrrPB5dWwq8WC0wESkAh7TfgCh0rf0aq2J
8GCmtbl/AUFfMAJsdNZr57JATgTz+vqdSIKaEV/kLe2JWImQ+a48CKBgyJoz996v
dQoW0Z5Pu50WCrSts0yYOjb6oVrKiqsgAPbgxOKLT7d6t3kCo+4pGp3J0E1BzejT
VXrk/UnUpPwKdMgmQQQ7afZO4KZXFCCcLgSYO3L7eiP/NSehMgpaa5YWC1eFd1b7
Xtx/CZRGWqatCVo4DqAXKb9DPQimhDXhYh83LGjBwVbLpfPyfpiLHrK5Jg==
-----END CERTIFICATE-----
Generated at Fri Sep 29 06:57:01 2023 by rpki-client on console-fra.rpki-client.org