Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/xlAiPjbww-H_jnHCO-b6UU1cVtI.roa
File:                     xlAiPjbww-H_jnHCO-b6UU1cVtI.roa (raw, json)
Hash identifier:          MqM/iNvhksK63qYMXYzCJ5nvsXpm2wRYgCJI4jIPOSY=
Subject key identifier:   C6:50:22:3E:36:F0:C3:E1:FF:8E:71:C2:3B:E6:FA:51:4D:5C:56:D2
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       05
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/xlAiPjbww-H_jnHCO-b6UU1cVtI.roa
Signing time:             Wed 23 Aug 2023 01:42:25 +0000
ROA not before:           Wed 23 Aug 2023 01:42:25 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     23791
IP address blocks:        118.102.40.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Aug 23 01:42:25 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=C650223E36F0C3E1FF8E71C23BE6FA514D5C56D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:e1:5f:62:12:cf:71:80:50:29:93:c6:14:
                    b1:87:4c:b1:6d:cf:a2:a4:08:fd:71:d7:4f:1c:c1:
                    82:31:cd:14:01:62:d6:37:4f:3f:c1:64:2f:c8:c6:
                    48:ff:ab:d4:06:f4:99:5c:49:bd:5c:56:80:12:74:
                    e7:f3:b2:f0:8e:06:8a:e5:fd:02:e6:12:d4:9b:dd:
                    d8:d4:36:57:f4:20:32:9a:99:b6:a5:7e:c3:3f:ec:
                    45:bf:1a:51:5e:29:b3:a7:42:f9:a2:67:2a:2b:ed:
                    2f:d8:38:15:2d:24:51:8a:bb:53:ef:45:4c:5e:c3:
                    d2:04:77:9e:6d:bc:30:6a:6d:9d:7e:a7:b4:e2:fa:
                    62:a6:a9:9c:ea:8b:70:95:59:b3:b5:16:a9:af:13:
                    8f:20:e5:44:ed:fc:34:33:e2:43:96:2b:d0:33:24:
                    10:96:81:f7:a7:57:88:28:79:cf:1f:19:56:e9:37:
                    55:b2:42:0d:46:2f:56:e8:5e:e2:ac:46:07:ca:9f:
                    53:6a:a6:9f:bf:31:6f:8e:70:24:f5:54:bb:ef:ee:
                    ca:27:cd:6a:ad:e9:11:29:d6:cb:35:71:57:be:cc:
                    d9:22:4c:89:78:70:9f:11:b0:9e:6b:b8:f8:52:ea:
                    32:6f:d3:ea:06:e1:30:3d:16:a3:22:10:81:cc:44:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:50:22:3E:36:F0:C3:E1:FF:8E:71:C2:3B:E6:FA:51:4D:5C:56:D2
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/xlAiPjbww-H_jnHCO-b6UU1cVtI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.102.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:36:11:cb:96:24:67:8b:99:33:3c:19:15:68:48:2b:67:85:
         3a:a8:16:58:81:a5:2f:46:b6:29:42:ae:12:8c:a6:75:32:93:
         f7:da:3e:27:0c:bf:4e:23:ca:2b:a1:7b:99:3e:86:58:a8:22:
         ec:78:6f:15:78:08:64:15:c1:90:97:a3:36:86:2b:86:56:f0:
         f9:33:32:8d:1d:52:ae:29:e7:5f:ac:5a:84:2c:86:50:12:b0:
         ed:5b:82:9f:6b:14:70:d5:a8:9c:0a:46:90:40:7a:57:f3:66:
         e4:77:2e:65:5b:9c:a8:df:00:db:05:35:2b:b5:99:48:58:e8:
         a7:3d:a9:38:07:50:b4:cf:dc:ca:9a:94:dd:89:bd:87:72:9b:
         8c:92:ec:07:8f:5f:7d:63:42:1e:fb:b7:a5:10:27:e0:1b:9c:
         a1:92:fe:88:a2:51:fd:04:3f:0a:cd:34:5c:ad:95:01:7d:62:
         3d:c4:b2:f3:c2:d2:ab:20:d2:49:84:76:cc:8f:d6:bc:f1:8f:
         24:33:e6:52:86:5d:41:82:14:4b:6e:66:5a:24:7d:63:f0:83:
         61:4a:ee:48:1f:a3:f7:5b:bb:e0:cc:21:6c:72:7b:35:fd:d7:
         c8:f5:11:62:ca:f5:e8:c2:fa:5d:cd:8b:69:44:a3:78:7f:e0:
         19:4f:81:ae
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzYy
QjJFM0U0NzhEQ0JBRDZGNDJBNDUxMTI5MENGQzM3M0MyNEM2MB4XDTIzMDgyMzAx
NDIyNVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoQzY1MDIyM0UzNkYwQzNF
MUZGOEU3MUMyM0JFNkZBNTE0RDVDNTZEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALrc4V9iEs9xgFApk8YUsYdMsW3PoqQI/XHXTxzBgjHNFAFi1jdP
P8FkL8jGSP+r1Ab0mVxJvVxWgBJ05/Oy8I4GiuX9AuYS1Jvd2NQ2V/QgMpqZtqV+
wz/sRb8aUV4ps6dC+aJnKivtL9g4FS0kUYq7U+9FTF7D0gR3nm28MGptnX6ntOL6
YqapnOqLcJVZs7UWqa8TjyDlRO38NDPiQ5Yr0DMkEJaB96dXiCh5zx8ZVuk3VbJC
DUYvVuhe4qxGB8qfU2qmn78xb45wJPVUu+/uyifNaq3pESnWyzVxV77M2SJMiXhw
nxGwnmu4+FLqMm/T6gbhMD0WoyIQgcxELX0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTGUCI+NvDD4f+OccI75vpRTVxW0jAfBgNVHSMEGDAWgBQjYrLj5Hjcutb0KkUR
KQz8NzwkxjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAyL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0RjOEpNWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0Rj
OEpNWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDIveGxBaVBqYnd3LUhfam5IQ08tYjZVVTFjVnRJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3ZmKDANBgkqhkiG9w0BAQsFAAOCAQEANzYRy5YkZ4uZMzwZFWhIK2eFOqgW
WIGlL0a2KUKuEoymdTKT99o+Jwy/TiPKK6F7mT6GWKgi7HhvFXgIZBXBkJejNoYr
hlbw+TMyjR1SrinnX6xahCyGUBKw7VuCn2sUcNWonApGkEB6V/Nm5HcuZVucqN8A
2wU1K7WZSFjopz2pOAdQtM/cypqU3Ym9h3KbjJLsB49ffWNCHvu3pRAn4BucoZL+
iKJR/QQ/Cs00XK2VAX1iPcSy88LSqyDSSYR2zI/WvPGPJDPmUoZdQYIUS25mWiR9
Y/CDYUruSB+j91u74MwhbHJ7Nf3XyPURYsr16ML6Xc2LaUSjeH/gGU+Brg==
-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:27 2024 by rpki-client on console-fra.rpki-client.org