Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/gpL9M1XrIdQOVSj7B4gMz3Uyt_U.roa
File:                     gpL9M1XrIdQOVSj7B4gMz3Uyt_U.roa (raw, json)
Hash identifier:          hIlvHSrtLVAijm34MeDnKOV/yArhAeiw3yHQtwOcgu8=
Subject key identifier:   82:92:FD:33:55:EB:21:D4:0E:55:28:FB:07:88:0C:CF:75:32:B7:F5
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       46
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/gpL9M1XrIdQOVSj7B4gMz3Uyt_U.roa
Signing time:             Sat 01 Jul 2023 01:28:11 +0000
ROA not before:           Sat 01 Jul 2023 01:28:11 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     17675
IP address blocks:        61.211.160.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jul  1 01:28:11 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8292FD3355EB21D40E5528FB07880CCF7532B7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:99:2a:f9:a4:5e:2b:71:46:dd:35:a0:00:
                    90:bb:d0:cd:fb:67:95:2f:33:d9:23:98:84:f5:5a:
                    05:c4:17:46:c3:5a:f4:59:42:ab:5a:5d:ff:28:94:
                    d5:11:fe:df:53:54:52:2d:01:0d:c5:0d:b8:72:2d:
                    a2:6c:dd:d5:0d:0c:7d:78:06:8a:da:9b:3a:5b:e4:
                    f2:3f:1b:96:5d:22:b8:41:7d:67:45:f9:d7:89:0e:
                    79:a1:ff:59:c5:5b:1a:c7:b9:ee:4b:2d:db:d7:45:
                    cc:1c:c4:58:21:be:26:ff:93:43:d8:d4:b6:69:88:
                    7d:87:8e:85:fa:1d:01:3c:44:78:10:84:fc:8f:87:
                    6c:a4:02:85:5b:c1:ef:d5:1a:32:86:3f:71:7b:d1:
                    61:73:0d:50:36:47:b2:18:16:00:c0:13:71:3a:45:
                    f5:0f:f8:c6:77:ed:60:ba:ca:61:3e:8e:60:00:fa:
                    15:8a:68:2f:9a:3d:08:8a:ff:fa:74:b8:0f:cb:12:
                    97:95:1b:f8:fd:03:b4:7f:1d:a2:02:6d:75:db:1b:
                    a0:87:6f:1f:15:29:96:85:fe:9a:25:2d:cd:7a:dc:
                    ec:e2:89:8e:2d:d6:dc:be:21:99:e6:e6:8c:ac:06:
                    8e:ef:da:07:a8:b7:d3:09:8c:c6:d9:0c:96:ee:a4:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:FD:33:55:EB:21:D4:0E:55:28:FB:07:88:0C:CF:75:32:B7:F5
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/gpL9M1XrIdQOVSj7B4gMz3Uyt_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:44:2f:11:0c:b5:44:2e:10:94:91:c2:97:bd:0e:30:a6:e9:
         d4:18:34:ae:30:38:c8:51:48:e6:33:d6:06:77:f3:88:54:50:
         02:4a:23:fd:ff:46:78:ea:ee:80:2f:b6:cf:54:f5:96:a3:4e:
         cb:8b:44:18:a1:bf:29:22:e4:c0:c5:8d:87:e5:bc:d4:2c:0d:
         61:0b:ba:4d:fa:0d:ad:b1:f7:45:f4:aa:a6:c9:f6:5c:57:65:
         f1:29:a8:fb:9d:1f:af:c8:ab:e7:e3:1c:cf:f0:9a:7a:6f:c9:
         7b:42:e7:22:6a:e4:80:cb:70:4d:34:65:03:c6:bf:88:56:82:
         35:36:9d:63:10:d7:82:c4:99:03:09:34:65:72:7a:46:e8:98:
         87:be:77:dd:c9:5e:7f:cc:68:64:b3:2f:d3:7b:54:df:2a:a5:
         d2:c0:3c:84:cd:06:bb:c5:a7:72:19:24:2f:7f:34:bf:ab:cf:
         e6:3e:b6:9d:e7:c2:2e:32:d1:31:de:3f:c7:6e:4d:5c:b5:93:
         a2:b0:bc:e6:bb:06:b7:fb:08:d1:50:4c:c1:df:19:fe:8c:e3:
         eb:86:cf:69:d2:f3:4b:0b:b1:c8:c2:0d:a5:80:4b:0c:97:44:
         fc:06:92:01:bf:8e:48:01:0a:83:ad:e0:2f:02:82:67:04:0c:
         06:9a:87:b2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTIzMDcwMTAx
MjgxMVoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoODI5MkZEMzM1NUVCMjFE
NDBFNTUyOEZCMDc4ODBDQ0Y3NTMyQjdGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ7cmSr5pF4rcUbdNaAAkLvQzftnlS8z2SOYhPVaBcQXRsNa9FlC
q1pd/yiU1RH+31NUUi0BDcUNuHItomzd1Q0MfXgGitqbOlvk8j8bll0iuEF9Z0X5
14kOeaH/WcVbGse57kst29dFzBzEWCG+Jv+TQ9jUtmmIfYeOhfodATxEeBCE/I+H
bKQChVvB79UaMoY/cXvRYXMNUDZHshgWAMATcTpF9Q/4xnftYLrKYT6OYAD6FYpo
L5o9CIr/+nS4D8sSl5Ub+P0DtH8dogJtddsboIdvHxUploX+miUtzXrc7OKJji3W
3L4hmebmjKwGju/aB6i30wmMxtkMlu6kTH8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSCkv0zVesh1A5VKPsHiAzPdTK39TAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvZ3BMOU0xWHJJZFFPVlNqN0I0Z016M1V5dF9VLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3ToDANBgkqhkiG9w0BAQsFAAOCAQEAaUQvEQy1RC4QlJHCl70OMKbp1Bg0
rjA4yFFI5jPWBnfziFRQAkoj/f9GeOrugC+2z1T1lqNOy4tEGKG/KSLkwMWNh+W8
1CwNYQu6TfoNrbH3RfSqpsn2XFdl8Smo+50fr8ir5+Mcz/Caem/Je0LnImrkgMtw
TTRlA8a/iFaCNTadYxDXgsSZAwk0ZXJ6RuiYh7533clef8xoZLMv03tU3yql0sA8
hM0Gu8WnchkkL380v6vP5j62nefCLjLRMd4/x25NXLWTorC85rsGt/sI0VBMwd8Z
/ozj64bPadLzSwuxyMINpYBLDJdE/AaSAb+OSAEKg63gLwKCZwQMBpqHsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org