Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/RbnUARTSGe_tQQtjUOpI5M8F3tY.roa
File:                     RbnUARTSGe_tQQtjUOpI5M8F3tY.roa (raw, json)
Hash identifier:          a2SqIDIFx7tQ70Zb2u7qgwWSZ0ZGPMDJfRU/SuL4+ZY=
Subject key identifier:   45:B9:D4:01:14:D2:19:EF:ED:41:0B:63:50:EA:48:E4:CF:05:DE:D6
Certificate issuer:       /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Certificate serial:       13
Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/RbnUARTSGe_tQQtjUOpI5M8F3tY.roa
Signing time:             Fri 07 Jul 2023 02:03:59 +0000
ROA not before:           Fri 07 Jul 2023 02:03:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     23808
IP address blocks:        219.100.132.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
        Validity
            Not Before: Jul  7 02:03:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=45B9D40114D219EFED410B6350EA48E4CF05DED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:a9:7f:63:21:06:cf:69:0f:69:b7:35:5b:
                    a7:70:e9:ed:2a:46:6c:b6:2c:55:a6:be:43:b7:12:
                    93:82:6a:15:a0:8c:5d:a8:d0:35:d4:62:5d:08:5f:
                    b7:e4:d4:db:12:74:ab:72:9f:35:82:b4:5a:df:89:
                    0f:b1:db:f9:1e:bd:87:40:f1:0c:c2:24:4c:88:ce:
                    ef:2c:85:b2:78:94:1d:b3:37:bd:47:ac:dd:62:3a:
                    1d:3d:ce:53:5b:17:78:36:3d:90:e5:43:d5:58:c9:
                    ab:7d:fc:5b:cb:9b:cb:59:48:5b:75:47:2d:46:fb:
                    d9:49:37:b1:b9:52:8e:d5:9a:29:5f:f7:e2:2c:fa:
                    4b:c0:4f:05:ac:8d:a0:a5:83:e5:43:2b:ed:d1:4f:
                    ea:eb:df:a6:06:ee:de:0d:93:c8:d9:01:f9:4c:df:
                    86:83:26:2a:2e:ea:91:82:83:b8:ae:01:4f:07:41:
                    18:f1:26:4a:39:37:79:4b:25:ff:89:b6:e3:0b:69:
                    29:a5:7d:ae:84:4c:bd:b2:db:6b:0e:db:83:9c:3a:
                    60:50:fe:17:81:6b:07:39:38:a0:b5:98:82:a7:34:
                    5b:b3:3b:22:7f:f6:8c:c1:63:e0:27:df:98:da:0a:
                    37:68:39:9f:94:a3:91:0b:a7:3e:85:dd:e7:23:a0:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:D4:01:14:D2:19:EF:ED:41:0B:63:50:EA:48:E4:CF:05:DE:D6
            X509v3 Authority Key Identifier:
                keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/RbnUARTSGe_tQQtjUOpI5M8F3tY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:81:b6:78:9e:1d:40:8c:73:c9:e6:fa:36:50:49:18:bb:
         a7:53:23:d0:d4:29:51:1e:45:e4:60:22:f5:98:f9:d9:a1:f1:
         4d:74:08:57:7b:87:67:ad:a1:07:25:34:16:56:cf:a2:e3:bc:
         10:30:7d:d8:d5:16:82:31:dc:1f:5a:94:20:6a:90:06:cd:4d:
         43:65:89:34:d0:24:22:79:e1:9f:74:e6:68:69:b7:c3:6b:bc:
         7a:1b:c8:6d:8d:3e:dd:a5:93:42:12:9a:42:a4:29:18:07:93:
         62:7b:7a:b6:10:2d:05:f3:ab:e8:d3:e8:86:a1:ef:cd:46:b2:
         e4:03:ca:3b:81:32:1a:0c:bb:37:c4:2a:59:c5:87:04:16:3b:
         b6:d4:65:df:52:35:79:1b:ae:db:3c:0f:56:45:f8:c1:cd:7f:
         ee:19:5c:2a:a1:18:bd:fa:d6:ba:51:ef:70:91:b9:41:a5:d5:
         81:85:f9:20:80:13:bd:8a:10:9a:0d:94:bc:60:fa:3e:28:6f:
         b8:4d:aa:82:63:52:1e:ba:b8:3a:52:fe:b7:3d:58:22:c7:b3:
         c6:7e:86:39:02:0b:30:21:1e:96:42:a1:fe:25:1f:54:e8:4d:
         c4:1f:1e:77:f4:6d:f2:b1:52:f8:88:24:af:65:86:27:07:ba:
         22:80:5b:58
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUY0
MjBGMTkyMDBFMTFCRTRBRThEOTE0RUJBMkFDQjQyOTE3QjZFMB4XDTIzMDcwNzAy
MDM1OVoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoNDVCOUQ0MDExNEQyMTlF
RkVENDEwQjYzNTBFQTQ4RTRDRjA1REVENjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7hqX9jIQbPaQ9ptzVbp3Dp7SpGbLYsVaa+Q7cSk4JqFaCMXajQ
NdRiXQhft+TU2xJ0q3KfNYK0Wt+JD7Hb+R69h0DxDMIkTIjO7yyFsniUHbM3vUes
3WI6HT3OU1sXeDY9kOVD1VjJq338W8uby1lIW3VHLUb72Uk3sblSjtWaKV/34iz6
S8BPBayNoKWD5UMr7dFP6uvfpgbu3g2TyNkB+UzfhoMmKi7qkYKDuK4BTwdBGPEm
Sjk3eUsl/4m24wtpKaV9roRMvbLbaw7bg5w6YFD+F4FrBzk4oLWYgqc0W7M7In/2
jMFj4CffmNoKN2g5n5SjkQunPoXd5yOgVjMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRFudQBFNIZ7+1BC2NQ6kjkzwXe1jAfBgNVHSMEGDAWgBSK9CDxkgDhG+SujZFO
uirLQpF7bjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODg0L2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBLUmUyNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBL
UmUyNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODQvUmJuVUFSVFNHZV90UVF0alVPcEk1TThGM3RZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkhDANBgkqhkiG9w0BAQsFAAOCAQEAbnaBtnieHUCMc8nm+jZQSRi7p1Mj
0NQpUR5F5GAi9Zj52aHxTXQIV3uHZ62hByU0FlbPouO8EDB92NUWgjHcH1qUIGqQ
Bs1NQ2WJNNAkInnhn3TmaGm3w2u8ehvIbY0+3aWTQhKaQqQpGAeTYnt6thAtBfOr
6NPohqHvzUay5APKO4EyGgy7N8QqWcWHBBY7ttRl31I1eRuu2zwPVkX4wc1/7hlc
KqEYvfrWulHvcJG5QaXVgYX5IIATvYoQmg2UvGD6PihvuE2qgmNSHrq4OlL+tz1Y
Isezxn6GOQILMCEelkKh/iUfVOhNxB8ed/Rt8rFS+Igkr2WGJwe6IoBbWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org