Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa
File:                     oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa (raw, json)
Hash identifier:          e+2BaBiDKQZei2mb8XDvfGhTYzOftirEh7YhSIebahc=
Subject key identifier:   A0:7A:BE:04:D2:E0:D1:97:E2:B9:B1:FC:32:81:6B:20:13:BB:34:16
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       31
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa
Signing time:             Fri 29 Sep 2023 06:36:57 +0000
ROA not before:           Fri 29 Sep 2023 06:36:57 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        202.169.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:57 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A07ABE04D2E0D197E2B9B1FC32816B2013BB3416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:34:9e:f8:b5:0a:40:77:e1:32:54:93:d7:
                    54:61:91:d0:60:f0:3b:93:96:1b:20:12:d6:4c:85:
                    7a:64:80:00:7d:73:db:a8:1d:a5:b0:ef:00:f0:96:
                    0b:f7:60:83:53:b6:40:a0:d8:2c:59:23:4e:d4:ce:
                    e0:60:8e:3c:6c:a0:3e:af:63:15:11:ef:9c:67:be:
                    18:c6:12:6d:8c:8d:3d:74:7c:b7:35:76:b1:8c:16:
                    b7:00:0b:1f:1c:45:be:e6:be:49:3d:99:7d:b7:8a:
                    13:6b:33:61:69:eb:75:45:f5:fb:ab:42:0f:db:2c:
                    e7:7a:c4:65:e3:3e:50:6f:04:8e:62:fa:c4:bd:10:
                    e6:bf:9b:40:fc:ec:b9:94:ee:17:73:27:9b:64:74:
                    fa:33:5e:ab:15:28:37:26:c6:f7:f2:96:3b:91:6b:
                    f1:72:61:c8:53:c8:6e:f9:65:41:d1:23:5a:b3:5f:
                    28:7c:66:e6:b1:ad:dd:02:ad:f2:26:d8:28:ab:9b:
                    97:28:47:8e:01:30:5d:bf:8f:cd:93:6a:69:77:8b:
                    08:9d:92:79:08:30:ef:bb:cb:bc:31:1f:11:5e:70:
                    2b:4e:33:d5:59:29:45:a1:73:b6:c9:80:b7:60:3f:
                    c5:ed:43:11:ac:d6:64:87:54:6f:35:78:46:6d:a9:
                    a0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7A:BE:04:D2:E0:D1:97:E2:B9:B1:FC:32:81:6B:20:13:BB:34:16
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/oHq-BNLg0ZfiubH8MoFrIBO7NBY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:0b:56:65:45:23:41:db:12:d2:83:f3:7f:ba:47:d6:e0:
         6f:fc:15:48:be:25:d0:64:99:ff:0c:8b:a9:88:37:ba:f5:6a:
         41:1e:82:53:50:89:2f:b0:ba:ab:c2:52:f3:9d:50:32:b7:5b:
         b3:8f:72:cc:af:48:4c:70:d0:10:59:f2:40:f6:82:f3:b6:c5:
         11:68:b4:4b:43:8b:e9:1f:b9:8a:9b:f0:36:55:2e:45:40:fe:
         7f:0c:05:89:d2:f5:fa:9e:86:b6:e7:a0:aa:c3:80:8b:c2:87:
         13:cf:97:31:81:04:18:b8:2e:2e:39:b2:c5:40:9b:7e:a8:ba:
         6b:d0:60:83:1f:df:b6:cc:4b:b2:cb:8e:dc:d5:62:d1:fe:c6:
         a2:0d:40:89:e2:96:1e:ee:4a:ca:33:f7:43:81:30:8b:c6:9a:
         4c:41:c8:ee:8d:dc:4b:82:36:d6:88:9a:67:2e:a4:36:a3:31:
         64:9e:4e:02:0f:4b:ce:be:4a:0a:fe:e1:21:82:f6:ed:1b:0d:
         3f:40:0a:eb:a1:2d:d9:bb:e8:7f:e6:10:22:95:16:0d:c3:77:
         41:36:ed:59:00:c5:3d:95:30:29:e6:49:4e:3f:f9:0d:1c:1b:
         84:63:dd:ce:06:2f:2a:c8:24:50:07:e7:c4:24:18:52:9e:c3:
         7f:01:3d:9c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2
MzY1N1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQTA3QUJFMDREMkUwRDE5
N0UyQjlCMUZDMzI4MTZCMjAxM0JCMzQxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALRYNJ74tQpAd+EyVJPXVGGR0GDwO5OWGyAS1kyFemSAAH1z26gd
pbDvAPCWC/dgg1O2QKDYLFkjTtTO4GCOPGygPq9jFRHvnGe+GMYSbYyNPXR8tzV2
sYwWtwALHxxFvua+ST2ZfbeKE2szYWnrdUX1+6tCD9ss53rEZeM+UG8EjmL6xL0Q
5r+bQPzsuZTuF3Mnm2R0+jNeqxUoNybG9/KWO5Fr8XJhyFPIbvllQdEjWrNfKHxm
5rGt3QKt8ibYKKublyhHjgEwXb+PzZNqaXeLCJ2SeQgw77vLvDEfEV5wK04z1Vkp
RaFztsmAt2A/xe1DEazWZIdUbzV4Rm2poPMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSger4E0uDRl+K5sfwygWsgE7s0FjAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvb0hxLUJOTGcwWmZpdWJIOE1vRnJJQk83TkJZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqpQDANBgkqhkiG9w0BAQsFAAOCAQEALIELVmVFI0HbEtKD83+6R9bgb/wV
SL4l0GSZ/wyLqYg3uvVqQR6CU1CJL7C6q8JS851QMrdbs49yzK9ITHDQEFnyQPaC
87bFEWi0S0OL6R+5ipvwNlUuRUD+fwwFidL1+p6GtuegqsOAi8KHE8+XMYEEGLgu
LjmyxUCbfqi6a9Bggx/ftsxLssuO3NVi0f7Gog1AieKWHu5KyjP3Q4Ewi8aaTEHI
7o3cS4I21oiaZy6kNqMxZJ5OAg9Lzr5KCv7hIYL27RsNP0AK66Et2bvof+YQIpUW
DcN3QTbtWQDFPZUwKeZJTj/5DRwbhGPdzgYvKsgkUAfnxCQYUp7DfwE9nA==
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org