Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/853/DEzPdnr94N1-IdinSCjlUmgeutc.roa
File:                     DEzPdnr94N1-IdinSCjlUmgeutc.roa (raw, json)
Hash identifier:          N59RUo6yKIdiT4hthkd23s7FyE3n1KseD1ojXl64+xA=
Subject key identifier:   0C:4C:CF:76:7A:FD:E0:DD:7E:21:D8:A7:48:28:E5:52:68:1E:BA:D7
Certificate issuer:       /CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
Certificate serial:       31
Authority key identifier: 27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/DEzPdnr94N1-IdinSCjlUmgeutc.roa
Signing time:             Thu 13 Apr 2023 09:53:38 +0000
ROA not before:           Thu 13 Apr 2023 09:53:38 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2506
IP address blocks:        202.249.192.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
        Validity
            Not Before: Apr 13 09:53:38 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0C4CCF767AFDE0DD7E21D8A74828E552681EBAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e3:cb:13:e0:fb:11:49:80:cf:39:1e:f5:19:
                    a8:c1:29:72:0e:bd:d5:11:8e:7c:79:a0:f7:6d:b6:
                    68:11:7a:10:05:4e:27:80:f5:33:22:27:ed:7b:48:
                    98:7f:ca:cd:b1:ab:c2:39:3f:71:de:de:de:1f:5f:
                    aa:61:12:f5:27:d9:88:f3:af:b3:32:38:12:68:1b:
                    c3:3f:06:ff:8f:cf:e8:b6:8b:46:aa:5e:91:48:8d:
                    98:12:be:ab:2f:2e:22:c5:46:3e:ad:0b:8b:f6:d4:
                    f9:13:df:60:58:88:e8:91:03:c2:48:62:ab:ee:92:
                    f5:38:df:aa:6d:1d:b6:8b:3e:51:4f:1f:89:8c:f9:
                    8d:52:06:33:76:97:e3:a7:ad:72:33:49:14:c1:a9:
                    5f:f5:2c:8b:eb:b4:a3:c8:aa:02:91:44:76:b3:a9:
                    d1:8a:c1:95:13:64:b1:6c:cd:09:95:cd:11:b2:a5:
                    a0:eb:29:0d:85:86:d2:25:92:29:40:ef:8a:14:94:
                    e9:3c:ff:fb:5b:bc:e1:ac:bf:de:32:f4:35:1b:b4:
                    62:76:ce:86:60:d7:3b:d7:f5:3a:61:2b:52:c8:56:
                    63:e7:96:c9:6b:d9:a2:0f:c8:42:59:b4:60:a0:6f:
                    00:67:9f:8b:47:1e:2f:45:f3:71:a8:15:41:f7:8c:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4C:CF:76:7A:FD:E0:DD:7E:21:D8:A7:48:28:E5:52:68:1E:BA:D7
            X509v3 Authority Key Identifier:
                keyid:27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/J6wM0khnq-iA-7dCP9OYDb-kMdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/DEzPdnr94N1-IdinSCjlUmgeutc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:5c:a3:cb:0a:6c:11:73:ef:b3:3b:82:b9:a3:d8:cf:f4:
         f4:4a:5a:10:74:76:29:8c:7b:b5:60:d9:9f:fc:10:06:55:63:
         d9:ad:3c:00:4a:b6:90:7d:09:36:81:66:3c:29:3d:3b:fd:cf:
         7b:f5:4b:9d:6a:f3:6b:98:52:49:5f:89:8e:97:a9:67:08:90:
         ee:85:76:86:66:6f:9f:47:1c:45:bd:fd:b4:7f:66:ed:f5:15:
         64:59:76:23:e3:a1:8d:da:9e:ed:91:f7:8d:04:c8:e1:e8:fe:
         7c:4c:79:15:68:9f:ed:4f:80:26:d1:a6:8c:01:01:2b:43:9f:
         93:06:36:4f:62:81:f6:ce:88:33:6b:f5:9d:24:01:14:dd:04:
         4c:1b:be:e4:15:14:2e:da:e3:6a:1b:c4:9d:00:34:b7:50:6d:
         5f:fd:73:e2:a9:61:63:e0:7d:3d:66:8f:b2:71:5e:85:41:44:
         c4:ef:f3:49:74:f5:7e:af:e9:a6:14:46:71:08:76:bb:7a:36:
         b6:eb:b7:f2:7a:e2:76:e5:c8:2e:8c:9f:b6:b9:e0:1e:e4:74:
         55:08:48:79:ef:53:c3:02:14:6d:f1:6c:f5:1d:d1:2f:f3:d0:
         53:d6:c9:d7:c1:a1:cc:98:ec:d6:27:04:4a:cf:81:f7:b4:4e:
         3b:0f:1c:16
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyN0FD
MENEMjQ4NjdBQkU4ODBGQkI3NDIzRkQzOTgwREJGQTQzMUQwMB4XDTIzMDQxMzA5
NTMzOFoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMEM0Q0NGNzY3QUZERTBE
RDdFMjFEOEE3NDgyOEU1NTI2ODFFQkFENzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO7jyxPg+xFJgM85HvUZqMEpcg691RGOfHmg9222aBF6EAVOJ4D1
MyIn7XtImH/KzbGrwjk/cd7e3h9fqmES9SfZiPOvszI4Emgbwz8G/4/P6LaLRqpe
kUiNmBK+qy8uIsVGPq0Li/bU+RPfYFiI6JEDwkhiq+6S9Tjfqm0dtos+UU8fiYz5
jVIGM3aX46etcjNJFMGpX/Usi+u0o8iqApFEdrOp0YrBlRNksWzNCZXNEbKloOsp
DYWG0iWSKUDvihSU6Tz/+1u84ay/3jL0NRu0YnbOhmDXO9f1OmErUshWY+eWyWvZ
og/IQlm0YKBvAGefi0ceL0XzcagVQfeMh0MCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQMTM92ev3g3X4h2KdIKOVSaB661zAfBgNVHSMEGDAWgBQnrAzSSGer6ID7t0I/
05gNv6Qx0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODUzL0o2d00wa2hucS1pQS03ZENQOU9ZRGIta01kQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0o2d00wa2hucS1pQS03ZENQOU9ZRGIt
a01kQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTMvREV6UGRucjk0TjEtSWRpblNDamxVbWdldXRjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBsr5wDANBgkqhkiG9w0BAQsFAAOCAQEAHnZco8sKbBFz77M7grmj2M/09Epa
EHR2KYx7tWDZn/wQBlVj2a08AEq2kH0JNoFmPCk9O/3Pe/VLnWrza5hSSV+Jjpep
ZwiQ7oV2hmZvn0ccRb39tH9m7fUVZFl2I+Ohjdqe7ZH3jQTI4ej+fEx5FWif7U+A
JtGmjAEBK0OfkwY2T2KB9s6IM2v1nSQBFN0ETBu+5BUULtrjahvEnQA0t1BtX/1z
4qlhY+B9PWaPsnFehUFExO/zSXT1fq/pphRGcQh2u3o2tuu38nriduXILoyftrng
HuR0VQhIee9TwwIUbfFs9R3RL/PQU9bJ18GhzJjs1icESs+B97ROOw8cFg==
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org