Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ZFTGe6JXlPw7YSB8OEOXnj-FCz0.roa
File:                     ZFTGe6JXlPw7YSB8OEOXnj-FCz0.roa (raw, json)
Hash identifier:          WM69GlweMXwhC5PRt34lItKy5deoBT0SJGqdRCeQRhk=
Subject key identifier:   64:54:C6:7B:A2:57:94:FC:3B:61:20:7C:38:43:97:9E:3F:85:0B:3D
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       5D
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ZFTGe6JXlPw7YSB8OEOXnj-FCz0.roa
Signing time:             Sat 01 Jul 2023 01:28:23 +0000
ROA not before:           Sat 01 Jul 2023 01:28:23 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9621
IP address blocks:        203.209.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Jul  1 01:28:23 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6454C67BA25794FC3B61207C3843979E3F850B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:77:24:ca:09:15:0e:14:fa:ff:74:12:0c:
                    5d:7f:97:a9:4e:05:43:2e:c3:f6:89:8c:22:fd:ac:
                    62:dd:b9:52:a8:83:ac:57:87:02:c7:5c:93:9d:39:
                    5d:26:27:72:0f:03:10:2b:0c:6c:67:b1:10:20:ca:
                    42:53:b0:1f:02:0a:fa:52:f0:00:3c:8c:21:0e:d2:
                    48:db:96:f7:de:e4:7f:58:b5:b1:2d:c7:8a:11:bf:
                    b0:70:e5:04:6a:16:9e:e8:b0:cf:3e:01:1b:52:d9:
                    3d:e4:c0:36:19:65:50:79:4c:e5:7e:b0:5d:64:e6:
                    7b:0a:c0:69:5c:75:84:05:5e:44:8b:6c:19:39:dc:
                    ba:3c:ba:bc:e6:b2:f5:69:18:66:ee:9d:ff:ef:f2:
                    61:03:9e:de:7f:1f:96:c4:a2:47:fb:12:01:56:c3:
                    a5:32:8a:8d:6a:1b:ff:51:40:f7:b9:70:b6:59:b3:
                    2b:2e:23:21:4e:be:f7:51:1a:f8:92:e4:7d:66:de:
                    72:5a:42:ea:0c:4b:67:1b:b8:ec:2a:fb:f0:69:e6:
                    c6:ac:42:f0:be:fb:91:a3:6a:76:e1:09:a4:78:d5:
                    2c:09:b7:ee:4e:ca:aa:0b:53:de:c3:2f:93:4e:a4:
                    9b:83:1f:cf:9d:e4:40:86:96:59:69:61:5b:53:cc:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:C6:7B:A2:57:94:FC:3B:61:20:7C:38:43:97:9E:3F:85:0B:3D
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ZFTGe6JXlPw7YSB8OEOXnj-FCz0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:5a:69:a7:e0:77:52:5f:32:1c:ac:9c:1f:86:17:e1:15:c4:
         30:df:22:f8:6f:ec:d0:c7:5d:85:ea:69:99:c4:ee:da:16:81:
         33:4c:75:64:6a:a8:b5:97:b4:fe:93:0f:d7:c0:7e:e2:c3:53:
         c1:e7:05:99:8c:ad:09:05:8f:ac:be:7e:94:24:f5:3b:35:1f:
         54:49:d2:da:8b:f4:70:db:fe:51:c6:e1:1b:d4:30:3b:62:72:
         fd:ed:48:96:14:18:ac:95:c6:80:fc:a4:40:2c:b9:b7:cb:5b:
         c5:5c:bf:9c:c2:75:97:8b:5c:5e:d7:c7:41:5e:2f:ae:05:93:
         b8:47:9f:ae:1e:e3:be:27:6c:19:09:06:05:cc:8c:85:6e:d7:
         36:fe:91:13:90:0a:38:63:58:37:c7:61:c6:43:e4:4c:ee:5d:
         3e:16:fd:2f:4a:46:d5:29:f9:fe:0a:d7:34:19:37:83:7b:32:
         eb:3f:5b:ea:c0:ad:05:b4:1f:47:a5:4c:85:68:d5:e2:2e:76:
         10:73:8e:92:18:0c:a9:cb:32:7b:1b:04:43:88:8d:8c:a8:a6:
         47:11:29:02:13:0a:47:21:c5:75:af:b8:bc:dc:ea:53:b4:43:
         88:fc:78:45:9b:96:9d:df:79:a0:7e:14:b0:22:a7:ac:11:cb:
         05:f5:e4:bd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4
MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTIzMDcwMTAx
MjgyM1oXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoNjQ1NEM2N0JBMjU3OTRG
QzNCNjEyMDdDMzg0Mzk3OUUzRjg1MEIzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKpCdyTKCRUOFPr/dBIMXX+XqU4FQy7D9omMIv2sYt25UqiDrFeH
Asdck505XSYncg8DECsMbGexECDKQlOwHwIK+lLwADyMIQ7SSNuW997kf1i1sS3H
ihG/sHDlBGoWnuiwzz4BG1LZPeTANhllUHlM5X6wXWTmewrAaVx1hAVeRItsGTnc
ujy6vOay9WkYZu6d/+/yYQOe3n8flsSiR/sSAVbDpTKKjWob/1FA97lwtlmzKy4j
IU6+91Ea+JLkfWbeclpC6gxLZxu47Cr78GnmxqxC8L77kaNqduEJpHjVLAm37k7K
qgtT3sMvk06km4Mfz53kQIaWWWlhW1PMZXMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRkVMZ7oleU/DthIHw4Q5eeP4ULPTAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn
4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ
TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84OTcvWkZUR2U2SlhsUHc3WVNCOE9FT1huai1GQ3owLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsvRuDANBgkqhkiG9w0BAQsFAAOCAQEAA1ppp+B3Ul8yHKycH4YX4RXEMN8i
+G/s0MddheppmcTu2haBM0x1ZGqotZe0/pMP18B+4sNTwecFmYytCQWPrL5+lCT1
OzUfVEnS2ov0cNv+UcbhG9QwO2Jy/e1IlhQYrJXGgPykQCy5t8tbxVy/nMJ1l4tc
XtfHQV4vrgWTuEefrh7jvidsGQkGBcyMhW7XNv6RE5AKOGNYN8dhxkPkTO5dPhb9
L0pG1Sn5/grXNBk3g3sy6z9b6sCtBbQfR6VMhWjV4i52EHOOkhgMqcsyexsEQ4iN
jKimRxEpAhMKRyHFda+4vNzqU7RDiPx4RZuWnd95oH4UsCKnrBHLBfXkvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org