Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/6VcE-EegcgNlRehBJf_NRWdCL_w.roa
File:                     6VcE-EegcgNlRehBJf_NRWdCL_w.roa (raw, json)
Hash identifier:          6MKNTLhF+pKO72EQMO7rrOEgytjZpkfdWt5lZD0NamY=
Subject key identifier:   E9:57:04:F8:47:A0:72:03:65:45:E8:41:25:FF:CD:45:67:42:2F:FC
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       8B
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/6VcE-EegcgNlRehBJf_NRWdCL_w.roa
Signing time:             Sat 01 Jul 2023 01:28:32 +0000
ROA not before:           Sat 01 Jul 2023 01:28:32 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        211.13.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:32 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E95704F847A072036545E84125FFCD4567422FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:35:f4:f9:e9:1d:cd:87:32:62:5e:e8:50:
                    27:b8:6f:f5:34:ca:01:f2:ae:ac:72:f7:94:30:fa:
                    7b:aa:90:05:ea:5d:eb:5f:e1:c3:64:59:b3:48:0f:
                    07:97:f8:3a:af:40:cb:3c:59:f4:0d:c4:08:f6:29:
                    98:b3:1c:02:02:e1:f2:b9:11:82:38:53:b2:7d:c4:
                    44:09:82:c3:39:b2:b0:a0:fb:64:78:6c:25:8f:3b:
                    42:54:74:1f:20:19:ca:e0:cd:5c:27:8c:15:f1:2e:
                    07:25:1f:d7:e9:77:3e:3e:c3:b2:8d:44:a1:52:ca:
                    66:af:99:ee:75:de:30:82:ae:5c:fa:2c:f0:43:8a:
                    35:49:3d:f5:87:49:e5:6b:59:54:b9:d5:96:27:6d:
                    b4:da:2c:0d:b3:25:37:c2:48:63:17:a7:c5:be:51:
                    1d:84:03:0e:bf:f1:63:fb:54:42:46:a9:f9:6b:de:
                    4e:95:c4:f4:a7:29:0f:0e:c6:73:21:a3:24:da:50:
                    2b:f1:05:f7:01:36:d4:6c:a0:bf:1e:00:18:86:f4:
                    60:dc:d3:2d:2f:b4:87:29:f9:87:37:22:c2:a8:39:
                    be:0a:68:d7:fd:ef:b4:64:07:42:8b:2f:83:b0:61:
                    8b:a0:e4:64:21:8c:c5:a5:2d:1e:f2:8c:a9:de:39:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:57:04:F8:47:A0:72:03:65:45:E8:41:25:FF:CD:45:67:42:2F:FC
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/6VcE-EegcgNlRehBJf_NRWdCL_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:04:d2:f6:95:97:91:63:ed:8f:42:96:1c:28:ec:5a:86:
         f5:ae:68:58:0d:41:70:4f:99:53:2e:fc:8c:a2:41:cc:39:2d:
         9e:da:6a:75:9c:4f:5e:9d:b2:ee:8f:18:9e:b4:da:df:f2:37:
         02:d9:a3:3a:f5:91:bc:b8:93:53:e8:7e:79:33:6a:e9:7c:2d:
         47:17:60:19:58:b1:3b:2b:95:28:4a:fa:9e:a3:c9:d3:2e:46:
         a6:ef:7a:9c:84:46:70:65:c4:9e:8c:c2:ba:e2:b4:c9:0e:f1:
         74:1e:ab:f5:5b:12:e5:f8:17:71:6b:b3:b6:bc:ad:15:0c:b0:
         51:22:32:ce:28:da:04:03:f9:20:55:a7:29:79:9c:9d:51:62:
         f2:b6:af:2c:b2:43:f3:41:48:c8:ea:49:cd:a5:b9:52:a3:e8:
         30:49:46:72:fe:eb:07:0a:f6:5d:a9:86:53:bd:6e:9b:c7:13:
         95:8d:8a:00:01:c1:18:4e:15:68:09:87:27:fe:ef:37:a3:bf:
         9c:c1:f4:06:dc:2c:df:28:f8:5a:56:ea:cd:b6:bc:5f:55:f5:
         bc:15:4c:db:0f:94:2d:58:b5:f0:55:33:35:5a:1a:e6:c8:a0:
         ec:8e:a2:cb:db:a9:2b:c2:ae:90:71:0c:71:9c:a6:6a:53:7a:
         88:91:f4:81
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yMzA3MDEw
MTI4MzJaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEU5NTcwNEY4NDdBMDcy
MDM2NTQ1RTg0MTI1RkZDRDQ1Njc0MjJGRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm9TX0+ekdzYcyYl7oUCe4b/U0ygHyrqxy95Qw+nuqkAXqXetf
4cNkWbNIDweX+DqvQMs8WfQNxAj2KZizHAIC4fK5EYI4U7J9xEQJgsM5srCg+2R4
bCWPO0JUdB8gGcrgzVwnjBXxLgclH9fpdz4+w7KNRKFSymavme513jCCrlz6LPBD
ijVJPfWHSeVrWVS51ZYnbbTaLA2zJTfCSGMXp8W+UR2EAw6/8WP7VEJGqflr3k6V
xPSnKQ8OxnMhoyTaUCvxBfcBNtRsoL8eABiG9GDc0y0vtIcp+Yc3IsKoOb4KaNf9
77RkB0KLL4OwYYug5GQhjMWlLR7yjKneObhlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6VcE+EegcgNlRehBJf/NRWdCL/wwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5LzZWY0UtRWVnY2dObFJlaEJKZl9OUldkQ0xfdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfTDQAwDQYJKoZIhvcNAQELBQADggEBAAxSBNL2lZeRY+2PQpYcKOxahvWu
aFgNQXBPmVMu/IyiQcw5LZ7aanWcT16dsu6PGJ602t/yNwLZozr1kby4k1Pofnkz
aul8LUcXYBlYsTsrlShK+p6jydMuRqbvepyERnBlxJ6MwrritMkO8XQeq/VbEuX4
F3Frs7a8rRUMsFEiMs4o2gQD+SBVpyl5nJ1RYvK2ryyyQ/NBSMjqSc2luVKj6DBJ
RnL+6wcK9l2phlO9bpvHE5WNigABwRhOFWgJhyf+7zejv5zB9AbcLN8o+FpW6s22
vF9V9bwVTNsPlC1YtfBVMzVaGubIoOyOosvbqSvCrpBxDHGcpmpTeoiR9IE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org