Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/vpCvUrloNK9UWElBROgS4Yre68E.roa
File:                     vpCvUrloNK9UWElBROgS4Yre68E.roa (raw, json)
Hash identifier:          RuZhrEhN+Oy7JjfuIgI/VSYt2ANYjeLilTipabYKbh8=
Subject key identifier:   BE:90:AF:52:B9:68:34:AF:54:58:49:41:44:E8:12:E1:8A:DE:EB:C1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0459
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vpCvUrloNK9UWElBROgS4Yre68E.roa
Signing time:             Thu 13 Apr 2023 09:57:52 +0000
ROA not before:           Thu 13 Apr 2023 09:57:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        218.40.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113 (0x459)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BE90AF52B96834AF5458494144E812E18ADEEBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:c5:1e:51:7c:bf:93:cd:4b:f4:c9:7c:b6:
                    32:af:8c:95:7d:fc:21:0c:6a:3d:8b:93:05:98:d9:
                    f4:b2:a8:18:7f:3c:1d:ca:4b:7c:b3:1f:55:42:74:
                    4a:8a:59:2f:95:98:f9:1f:0f:0a:c2:b4:58:42:12:
                    d1:c8:fe:81:0a:82:2f:18:1e:89:fc:ea:ea:2a:26:
                    66:a2:9c:45:26:39:54:0a:ee:e6:57:0d:09:6a:16:
                    4d:50:87:34:1b:c2:a0:a1:2c:8e:3d:cd:dc:64:7a:
                    08:df:3b:8e:15:34:9d:78:a9:c5:de:f1:36:c0:b1:
                    59:dc:26:f6:45:4b:9d:1a:bc:03:b2:60:5d:9a:a4:
                    0c:c5:13:70:b2:ec:db:c5:74:90:55:93:3c:52:f5:
                    b9:ce:aa:b5:78:d0:4c:e3:04:13:f2:54:08:97:0a:
                    99:ae:f7:b8:3d:f8:0e:ff:f6:6c:ee:7a:1a:27:c1:
                    ce:1b:9b:3b:13:f8:54:14:b9:f2:b5:45:d1:5c:e7:
                    27:91:4a:a6:cd:cd:7b:3f:99:8a:af:13:07:fd:92:
                    1b:80:7e:1d:7a:7a:68:c5:21:ae:16:df:df:36:79:
                    05:b8:2f:f4:8a:f7:02:0b:4c:8e:77:9a:be:79:95:
                    1d:ba:8a:5b:76:30:17:b3:ba:6a:0a:e7:2c:8b:36:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:90:AF:52:B9:68:34:AF:54:58:49:41:44:E8:12:E1:8A:DE:EB:C1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vpCvUrloNK9UWElBROgS4Yre68E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:a9:00:48:04:b4:d5:34:dd:83:e2:dc:bf:c3:ba:4f:3b:e1:
         00:a8:33:27:7d:19:cf:c0:0a:04:87:76:cb:5f:13:df:31:86:
         b3:e6:a1:e5:63:91:f7:1d:b6:de:cd:c7:ca:c0:df:60:bc:5d:
         c4:e1:1c:76:f4:df:48:76:69:fe:8a:73:68:01:2d:2a:fc:80:
         d9:1d:af:dd:2c:73:3b:30:76:22:52:30:53:d7:0b:b9:70:4f:
         f1:8e:20:62:07:e1:ab:72:dc:f4:8b:ee:e9:74:1c:3c:1f:58:
         46:b5:6b:24:44:fd:04:a9:0a:af:1d:53:87:89:69:91:6e:b4:
         69:9f:37:6c:97:ab:be:24:c2:5d:2a:b4:b2:6f:2d:99:28:68:
         cf:4a:43:f4:e9:ac:c8:d9:45:3f:01:0a:72:95:e7:58:bc:f0:
         18:f8:50:96:b7:6c:74:f8:4d:3b:28:42:c4:03:67:4d:f5:55:
         7e:85:3d:a5:41:0e:22:c1:43:0e:d8:3f:62:ce:be:69:30:9e:
         7f:c1:86:d2:e3:fc:33:d9:44:14:85:97:9d:bf:2c:f7:5a:b2:
         e5:87:c1:05:fc:ce:d9:67:95:c1:70:03:c0:13:82:75:32:62:
         69:ed:f1:63:df:f6:f2:0b:93:8e:4e:23:47:e9:c3:07:b2:21:
         53:a6:1d:de
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU3NTJaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJFOTBBRjUyQjk2ODM0
QUY1NDU4NDk0MTQ0RTgxMkUxOEFERUVCQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnicUeUXy/k81L9Ml8tjKvjJV9/CEMaj2LkwWY2fSyqBh/PB3K
S3yzH1VCdEqKWS+VmPkfDwrCtFhCEtHI/oEKgi8YHon86uoqJmainEUmOVQK7uZX
DQlqFk1QhzQbwqChLI49zdxkegjfO44VNJ14qcXe8TbAsVncJvZFS50avAOyYF2a
pAzFE3Cy7NvFdJBVkzxS9bnOqrV40EzjBBPyVAiXCpmu97g9+A7/9mzuehonwc4b
mzsT+FQUufK1RdFc5yeRSqbNzXs/mYqvEwf9khuAfh16emjFIa4W3982eQW4L/SK
9wILTI53mr55lR26ilt2MBezumoK5yyLNhtVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvpCvUrloNK9UWElBROgS4Yre68EwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3ZwQ3ZVcmxvTks5VVdFbEJST2dTNFlyZTY4RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATaKNAwDQYJKoZIhvcNAQELBQADggEBAHupAEgEtNU03YPi3L/Duk874QCo
Myd9Gc/ACgSHdstfE98xhrPmoeVjkfcdtt7Nx8rA32C8XcThHHb030h2af6Kc2gB
LSr8gNkdr90sczswdiJSMFPXC7lwT/GOIGIH4aty3PSL7ul0HDwfWEa1ayRE/QSp
Cq8dU4eJaZFutGmfN2yXq74kwl0qtLJvLZkoaM9KQ/TprMjZRT8BCnKV51i88Bj4
UJa3bHT4TTsoQsQDZ031VX6FPaVBDiLBQw7YP2LOvmkwnn/BhtLj/DPZRBSFl52/
LPdasuWHwQX8ztlnlcFwA8ATgnUyYmnt8WPf9vILk45OI0fpwweyIVOmHd4=
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org