Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/eFvSXsZBoU70nMEVT3p_Kpy3Iuw.roa
File:                     eFvSXsZBoU70nMEVT3p_Kpy3Iuw.roa (raw, json)
Hash identifier:          uDcKoPsFp/nS8d8EOvUk/EgkSSJR5ujf0zRFy391ZIg=
Subject key identifier:   78:5B:D2:5E:C6:41:A1:4E:F4:9C:C1:15:4F:7A:7F:2A:9C:B7:22:EC
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       82
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/eFvSXsZBoU70nMEVT3p_Kpy3Iuw.roa
Signing time:             Sat 01 Jul 2023 01:28:28 +0000
ROA not before:           Sat 01 Jul 2023 01:28:28 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        118.108.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:28 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=785BD25EC641A14EF49CC1154F7A7F2A9CB722EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:ad:ec:4d:52:0f:5b:93:e6:fb:d7:49:c4:
                    78:cc:c3:65:ce:27:ab:69:9d:06:1a:5b:16:07:d9:
                    78:77:c8:14:18:55:55:07:f2:c3:2b:9f:4c:3c:17:
                    35:40:ba:14:7a:e9:3a:49:50:f0:73:3e:9e:b0:dc:
                    ab:75:55:bc:c4:e1:af:a0:53:4c:d4:99:4f:82:03:
                    3d:bb:00:ca:5d:17:84:54:d2:6a:f2:87:cd:97:21:
                    82:5b:98:cb:fd:94:06:6d:39:38:b7:28:3e:5f:cb:
                    f8:ba:f9:a0:9f:82:35:34:67:ea:49:c7:31:55:0f:
                    73:6d:38:b5:bb:75:37:94:25:93:da:83:26:70:30:
                    c2:cb:3e:3e:4a:2d:1a:99:fd:54:d5:74:69:96:b1:
                    b1:04:54:e6:f8:e1:63:fe:68:dd:1e:cc:29:dc:38:
                    36:c9:49:4f:65:0c:6a:d9:23:35:fe:df:15:f3:16:
                    2e:c0:80:8e:f0:61:51:d9:70:73:f9:5e:ef:f4:ca:
                    cf:2a:25:7f:40:e4:01:78:7b:a6:73:d8:02:6c:61:
                    ae:2e:fc:e5:d1:1f:58:30:af:e9:92:c4:dd:7c:88:
                    29:bb:89:53:32:81:a6:36:dd:27:95:b5:9f:e8:1f:
                    d2:a0:a5:ac:b0:f0:f2:70:7a:f5:79:2b:d1:73:c9:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5B:D2:5E:C6:41:A1:4E:F4:9C:C1:15:4F:7A:7F:2A:9C:B7:22:EC
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/eFvSXsZBoU70nMEVT3p_Kpy3Iuw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:c8:ea:80:4c:75:6d:9b:a9:12:fb:24:7e:3c:02:c4:28:
         f2:0a:6f:df:eb:2c:d5:22:9d:5d:36:8f:98:44:91:52:87:3f:
         b6:21:d7:25:5c:01:a7:79:c7:a0:9e:b4:85:a8:81:90:10:c9:
         f0:69:c9:b7:63:1b:bc:68:6e:30:91:a3:cc:ad:90:ac:a3:20:
         af:d4:0e:99:8a:a3:26:44:25:87:73:ab:d0:be:0e:13:4d:6d:
         c9:f9:b8:20:89:fd:f5:ab:52:0d:39:73:1b:47:08:94:95:e1:
         fe:13:c6:17:73:27:82:21:01:d2:9b:17:34:70:b5:ad:de:87:
         9a:a8:f4:00:8e:83:2d:8b:6c:ce:1d:63:56:89:d4:a6:b6:76:
         dc:2c:32:07:69:a4:50:e5:a7:c2:b4:f3:c2:ce:66:50:0b:f7:
         59:90:51:76:1b:8b:bc:08:2a:1c:77:6e:ac:1f:bf:51:1d:e1:
         e2:4a:4e:10:47:e7:2e:88:43:24:a3:91:06:32:fc:8e:52:c1:
         52:06:e1:19:28:94:36:a4:0f:80:fe:55:98:c4:e5:58:35:bb:
         12:96:47:11:3f:9a:40:7d:a6:36:63:ae:29:14:6e:b9:8e:cc:
         88:7c:9e:63:aa:18:f9:ef:f4:6b:ea:d6:bc:86:02:8b:7c:4b:
         73:28:55:31
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yMzA3MDEw
MTI4MjhaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc4NUJEMjVFQzY0MUEx
NEVGNDlDQzExNTRGN0E3RjJBOUNCNzIyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChX63sTVIPW5Pm+9dJxHjMw2XOJ6tpnQYaWxYH2Xh3yBQYVVUH
8sMrn0w8FzVAuhR66TpJUPBzPp6w3Kt1VbzE4a+gU0zUmU+CAz27AMpdF4RU0mry
h82XIYJbmMv9lAZtOTi3KD5fy/i6+aCfgjU0Z+pJxzFVD3NtOLW7dTeUJZPagyZw
MMLLPj5KLRqZ/VTVdGmWsbEEVOb44WP+aN0ezCncODbJSU9lDGrZIzX+3xXzFi7A
gI7wYVHZcHP5Xu/0ys8qJX9A5AF4e6Zz2AJsYa4u/OXRH1gwr+mSxN18iCm7iVMy
gaY23SeVtZ/oH9Kgpayw8PJwevV5K9FzycFFAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUeFvSXsZBoU70nMEVT3p/Kpy3IuwwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5L2VGdlNYc1pCb1U3MG5NRVZUM3BfS3B5M0l1dy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJ2bDANBgkqhkiG9w0BAQsFAAOCAQEAjSLI6oBMdW2bqRL7JH48AsQo8gpv
3+ss1SKdXTaPmESRUoc/tiHXJVwBp3nHoJ60haiBkBDJ8GnJt2MbvGhuMJGjzK2Q
rKMgr9QOmYqjJkQlh3Or0L4OE01tyfm4IIn99atSDTlzG0cIlJXh/hPGF3MngiEB
0psXNHC1rd6Hmqj0AI6DLYtszh1jVonUprZ23CwyB2mkUOWnwrTzws5mUAv3WZBR
dhuLvAgqHHdurB+/UR3h4kpOEEfnLohDJKORBjL8jlLBUgbhGSiUNqQPgP5VmMTl
WDW7EpZHET+aQH2mNmOuKRRuuY7MiHyeY6oY+e/0a+rWvIYCi3xLcyhVMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org