Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/cGnZj6H2eNerhek0cFaeL7733l0.roa
File:                     cGnZj6H2eNerhek0cFaeL7733l0.roa (raw, json)
Hash identifier:          UJ2gzz//g3osguuc8gssvQdknfX5B0V0e6Oj80GdMZM=
Subject key identifier:   70:69:D9:8F:A1:F6:78:D7:AB:85:E9:34:70:56:9E:2F:BE:F7:DE:5D
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       E5
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/cGnZj6H2eNerhek0cFaeL7733l0.roa
Signing time:             Sun 01 Oct 2023 01:28:56 +0000
ROA not before:           Sun 01 Oct 2023 01:28:56 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     8220
IP address blocks:        110.50.78.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:28:56 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7069D98FA1F678D7AB85E93470569E2FBEF7DE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:f2:36:bb:c8:be:5e:9f:a1:16:75:6e:03:
                    5c:d6:45:75:f2:e7:80:43:d7:98:bd:9b:b9:0c:fd:
                    5f:b9:4c:5e:27:80:c5:e7:0d:f8:35:06:47:05:d3:
                    b6:db:dd:85:6f:b1:4a:54:96:28:a2:dc:0e:bb:ee:
                    1b:85:da:7d:dc:c3:49:64:91:f5:4d:61:43:76:68:
                    63:24:3c:3e:8c:38:a5:b7:e1:9e:e2:7c:71:50:db:
                    9a:18:44:f0:ae:32:aa:bc:2c:54:1a:89:91:60:60:
                    c4:3d:df:f8:67:8c:5a:1e:e6:42:f4:af:ed:18:d2:
                    4b:cf:ed:4e:59:4b:2e:a5:9c:24:59:5b:8a:59:45:
                    cd:6b:a9:a6:4a:6d:66:57:44:bf:5a:3f:94:d5:50:
                    d0:4c:10:89:1a:ef:43:c9:55:50:4b:a5:94:1d:fe:
                    8d:2d:13:ec:f2:94:0c:ad:e4:5d:6d:8c:54:67:f1:
                    ff:c9:8e:0e:a8:1b:d9:42:aa:6e:68:e0:f3:27:e3:
                    37:40:14:bb:32:0e:a9:21:d9:4b:51:5f:1e:69:fb:
                    af:4a:8d:4c:4f:4a:d8:ea:93:fa:40:d1:9b:de:6a:
                    e2:cd:26:0b:2e:a0:1f:c2:65:13:88:93:20:04:b7:
                    8d:b6:1d:2e:cd:07:e5:57:d9:d1:78:ca:60:cd:b1:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:69:D9:8F:A1:F6:78:D7:AB:85:E9:34:70:56:9E:2F:BE:F7:DE:5D
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/cGnZj6H2eNerhek0cFaeL7733l0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:4a:18:21:eb:ac:f0:88:21:bd:5a:04:61:c7:35:49:5d:68:
         af:05:dc:76:44:96:2b:e5:a6:f9:74:9b:3f:a6:96:9e:6b:3e:
         03:80:6e:ef:de:9f:3a:b1:9c:df:f6:bf:65:89:08:d7:68:56:
         2a:6c:78:ef:47:cc:d6:27:78:d1:21:6a:ab:d4:33:71:62:f6:
         34:5f:15:55:38:4b:86:22:58:f1:cd:96:1f:9b:93:83:e6:ee:
         ad:e2:56:58:af:41:27:84:bf:3f:cd:a4:af:16:83:d2:9d:35:
         bb:60:ee:19:ea:39:d9:a2:5e:03:45:ba:64:d0:d6:23:02:d4:
         83:0f:8e:b2:f4:d5:40:eb:c0:a8:47:62:e2:8b:23:81:57:ed:
         36:f9:eb:40:7d:12:1c:17:4c:d9:d7:12:1b:03:b3:4b:e3:ab:
         d1:b1:89:6e:81:18:42:26:41:b0:76:53:5e:2c:8e:a7:c0:00:
         78:a4:9d:ce:ad:d0:af:26:a4:e8:ff:e6:8d:9c:7a:da:18:32:
         f9:69:36:a8:1d:fd:91:14:13:c6:f6:12:4f:c3:fc:dc:d1:9f:
         bc:5f:da:0e:9b:a0:8c:33:9b:12:a4:28:fd:be:ec:15:2c:10:
         94:99:a9:93:ea:25:78:18:cc:10:f0:ff:43:72:51:a2:39:7e:
         c7:0e:f2:c8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEwMDEw
MTI4NTZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDcwNjlEOThGQTFGNjc4
RDdBQjg1RTkzNDcwNTY5RTJGQkVGN0RFNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPM/I2u8i+Xp+hFnVuA1zWRXXy54BD15i9m7kM/V+5TF4ngMXn
Dfg1BkcF07bb3YVvsUpUliii3A677huF2n3cw0lkkfVNYUN2aGMkPD6MOKW34Z7i
fHFQ25oYRPCuMqq8LFQaiZFgYMQ93/hnjFoe5kL0r+0Y0kvP7U5ZSy6lnCRZW4pZ
Rc1rqaZKbWZXRL9aP5TVUNBMEIka70PJVVBLpZQd/o0tE+zylAyt5F1tjFRn8f/J
jg6oG9lCqm5o4PMn4zdAFLsyDqkh2UtRXx5p+69KjUxPStjqk/pA0ZveauLNJgsu
oB/CZROIkyAEt422HS7NB+VX2dF4ymDNsSxnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUcGnZj6H2eNerhek0cFaeL7733l0wHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L2NHblpqNkgyZU5lcmhlazBjRmFlTDc3MzNsMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFuMk4wDQYJKoZIhvcNAQELBQADggEBAHpKGCHrrPCIIb1aBGHHNUldaK8F
3HZElivlpvl0mz+mlp5rPgOAbu/enzqxnN/2v2WJCNdoVipseO9HzNYneNEhaqvU
M3Fi9jRfFVU4S4YiWPHNlh+bk4Pm7q3iVlivQSeEvz/NpK8Wg9KdNbtg7hnqOdmi
XgNFumTQ1iMC1IMPjrL01UDrwKhHYuKLI4FX7Tb560B9EhwXTNnXEhsDs0vjq9Gx
iW6BGEImQbB2U14sjqfAAHiknc6t0K8mpOj/5o2cetoYMvlpNqgd/ZEUE8b2Ek/D
/NzRn7xf2g6boIwzmxKkKP2+7BUsEJSZqZPqJXgYzBDw/0NyUaI5fscO8sg=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org