Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/4qICJEdgk6cUmzvPf77yrjGxc_w.roa
File:                     4qICJEdgk6cUmzvPf77yrjGxc_w.roa (raw, json)
Hash identifier:          PBgMmSFNsTkmDGUXE8lIaN7XhBJryrs3G78n8dTaByU=
Subject key identifier:   E2:A2:02:24:47:60:93:A7:14:9B:3B:CF:7F:BE:F2:AE:31:B1:73:FC
Certificate issuer:       /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
Certificate serial:       04
Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/4qICJEdgk6cUmzvPf77yrjGxc_w.roa
Signing time:             Wed 28 Jun 2023 01:13:40 +0000
ROA not before:           Wed 28 Jun 2023 01:13:40 +0000
ROA not after:            Sat 15 Jun 2024 06:45:48 +0000
asID:                     131965
IP address blocks:        162.43.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 06:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
        Validity
            Not Before: Jun 28 01:13:40 2023 GMT
            Not After : Jun 15 06:45:48 2024 GMT
        Subject: CN=E2A20224476093A7149B3BCF7FBEF2AE31B173FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fb:35:c6:dc:67:f6:84:21:87:18:00:a9:12:
                    e6:4a:1a:d5:b6:2a:b3:d4:e4:1e:7c:db:fc:5b:16:
                    b3:4e:7e:22:4d:aa:63:13:06:6b:32:c9:a0:be:d0:
                    3b:55:d9:1e:a6:9a:2b:f5:21:39:f7:76:66:3a:c5:
                    6a:52:ff:4e:79:e9:d6:43:94:bd:ed:b1:33:0d:df:
                    f3:ef:2d:de:7b:27:52:5a:6f:32:e8:02:cb:ff:3f:
                    0a:a2:a8:2f:dd:60:b2:d4:2f:7e:b9:d0:5e:1d:64:
                    ec:5c:ad:ee:13:a4:9c:3c:e4:06:0d:3c:6e:e5:99:
                    1a:b9:70:a0:2c:d5:50:76:38:1b:8b:a3:c8:e7:9b:
                    45:59:88:51:a0:23:a6:6d:d4:0a:5e:67:9c:0e:84:
                    13:04:0a:b5:14:9d:5c:dc:29:92:66:49:62:b4:d5:
                    95:d1:65:65:21:6f:61:84:7a:77:32:11:1f:49:a6:
                    cf:fb:2e:03:0f:04:f7:69:e4:15:08:f2:f2:30:23:
                    cf:46:c9:ea:2d:58:bb:e0:8d:60:3d:db:d2:40:f9:
                    bf:f8:d4:1f:db:78:d0:56:a5:70:c6:82:a8:39:e5:
                    e2:69:51:3b:2d:0c:65:65:f8:f2:71:30:95:4e:14:
                    8e:e7:80:6c:11:a8:82:86:4b:90:72:74:5b:5d:90:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:02:24:47:60:93:A7:14:9B:3B:CF:7F:BE:F2:AE:31:B1:73:FC
            X509v3 Authority Key Identifier:
                keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/4qICJEdgk6cUmzvPf77yrjGxc_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.43.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:f2:98:f1:1e:78:05:f0:fa:b8:51:f2:ec:b2:a3:4d:79:
         01:45:71:16:b0:6a:df:a6:82:7d:a6:29:70:1f:6e:a8:39:04:
         05:13:3a:91:0a:e0:55:b9:7b:b0:fe:e0:9e:43:ca:82:22:5a:
         ff:d4:41:de:43:96:57:da:ee:79:90:9f:2e:eb:04:48:04:9b:
         19:bc:2c:0f:60:77:c5:76:ab:2c:b6:a0:9a:dc:ec:e7:6b:91:
         65:e4:f6:92:f3:46:d8:8d:31:60:63:80:d0:96:40:e1:1a:fc:
         14:b5:45:f7:96:81:60:ef:98:40:df:7e:cd:99:95:39:19:93:
         69:75:97:40:b1:62:f2:c5:5a:8e:f0:d9:21:f9:2d:1e:a0:2f:
         54:cb:7e:cf:f9:ff:75:7b:38:e5:f5:da:52:a6:d5:94:9d:21:
         e8:43:cf:67:90:1b:43:01:d3:62:1a:af:9f:b8:6d:e1:01:97:
         41:e3:ac:10:61:aa:ed:01:da:a7:5f:2a:7e:5f:bf:fa:07:e7:
         ba:05:74:0d:be:f2:1f:90:32:66:41:f3:27:08:e7:3c:24:c7:
         c2:73:94:9f:17:58:48:91:df:36:e2:db:bf:b2:7b:ce:e9:40:
         1a:da:d1:5a:c0:22:7a:3f:6c:19:ce:7b:59:de:70:78:e0:de:
         40:b5:c2:b3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2
REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTIzMDYyODAx
MTM0MFoXDTI0MDYxNTA2NDU0OFowMzExMC8GA1UEAxMoRTJBMjAyMjQ0NzYwOTNB
NzE0OUIzQkNGN0ZCRUYyQUUzMUIxNzNGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOz7NcbcZ/aEIYcYAKkS5koa1bYqs9TkHnzb/FsWs05+Ik2qYxMG
azLJoL7QO1XZHqaaK/UhOfd2ZjrFalL/Tnnp1kOUve2xMw3f8+8t3nsnUlpvMugC
y/8/CqKoL91gstQvfrnQXh1k7Fyt7hOknDzkBg08buWZGrlwoCzVUHY4G4ujyOeb
RVmIUaAjpm3UCl5nnA6EEwQKtRSdXNwpkmZJYrTVldFlZSFvYYR6dzIRH0mmz/su
Aw8E92nkFQjy8jAjz0bJ6i1Yu+CNYD3b0kD5v/jUH9t40FalcMaCqDnl4mlROy0M
ZWX48nEwlU4UjueAbBGogoZLkHJ0W12Q8VsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTiogIkR2CTpxSbO89/vvKuMbFz/DAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc
a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41
RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85OTAvNHFJQ0pFZGdrNmNVbXp2UGY3N3lyakd4Y193LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB6IrADANBgkqhkiG9w0BAQsFAAOCAQEAT1fymPEeeAXw+rhR8uyyo015AUVx
FrBq36aCfaYpcB9uqDkEBRM6kQrgVbl7sP7gnkPKgiJa/9RB3kOWV9rueZCfLusE
SASbGbwsD2B3xXarLLagmtzs52uRZeT2kvNG2I0xYGOA0JZA4Rr8FLVF95aBYO+Y
QN9+zZmVORmTaXWXQLFi8sVajvDZIfktHqAvVMt+z/n/dXs45fXaUqbVlJ0h6EPP
Z5AbQwHTYhqvn7ht4QGXQeOsEGGq7QHap18qfl+/+gfnugV0Db7yH5AyZkHzJwjn
PCTHwnOUnxdYSJHfNuLbv7J7zulAGtrRWsAiej9sGc57Wd5weODeQLXCsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org