Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/R_cz9c6TiO8U7mBUWJ94h985f28.roa
File:                     R_cz9c6TiO8U7mBUWJ94h985f28.roa (raw, json)
Hash identifier:          NpXv2kjymDuZi8i3xTvtKPpPrCYqdudagp7Fq0sZ2Ac=
Subject key identifier:   47:F7:33:F5:CE:93:88:EF:14:EE:60:54:58:9F:78:87:DF:39:7F:6F
Certificate issuer:       /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial:       0A
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/R_cz9c6TiO8U7mBUWJ94h985f28.roa
Signing time:             Sun 17 Mar 2024 12:13:21 +0000
ROA not before:           Sun 17 Mar 2024 12:13:21 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     59098
IP address blocks:        103.149.4.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 13:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
        Validity
            Not Before: Mar 17 12:13:21 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=47F733F5CE9388EF14EE6054589F7887DF397F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:16:b8:cb:79:27:9b:a8:51:5e:2d:fc:08:34:
                    17:fa:26:cc:21:56:f8:38:d1:a7:d2:98:52:05:16:
                    f5:e3:21:da:d8:3b:67:55:17:30:d8:69:05:34:4f:
                    fe:64:87:c1:2d:57:a1:08:0c:b5:ed:77:c5:fa:7e:
                    fc:a1:95:61:be:c3:99:25:92:b0:a2:f9:f5:9f:0e:
                    3f:85:86:dd:76:cd:68:e5:30:2b:20:9e:af:cb:ef:
                    c2:4b:63:79:be:24:3e:1e:64:a7:1a:88:aa:a8:22:
                    56:09:28:93:76:1f:64:f1:09:7e:8d:e3:c4:8c:84:
                    a1:2f:d3:a9:b5:3a:5d:af:7a:71:76:de:ae:b4:f2:
                    35:8d:0d:2f:bf:7c:cb:c1:f3:5b:d2:a0:4a:9c:7c:
                    b5:61:81:b0:35:ba:e6:af:f0:75:68:91:5e:db:de:
                    61:5b:e9:05:e5:f3:5f:e7:e3:e9:df:04:ef:2a:25:
                    41:ef:56:39:ac:3b:2f:a3:07:db:a5:f6:5a:f2:04:
                    12:83:3a:56:6a:a4:1a:37:2d:7b:8a:0b:2e:6f:4d:
                    a1:e5:34:d5:80:44:2f:30:fa:56:ac:21:f5:49:24:
                    14:1e:a9:0b:77:d3:58:36:4a:5e:d7:28:39:1e:00:
                    d8:14:d7:92:bb:86:40:c0:ba:53:9a:15:e7:15:1d:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F7:33:F5:CE:93:88:EF:14:EE:60:54:58:9F:78:87:DF:39:7F:6F
            X509v3 Authority Key Identifier:
                keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/R_cz9c6TiO8U7mBUWJ94h985f28.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:ea:2b:5f:86:f6:82:93:cc:7c:43:44:3f:da:85:a3:9e:
         72:37:88:5a:23:98:d7:96:33:62:43:bc:9f:29:7e:cf:ac:32:
         8c:6e:b7:dc:e8:f7:4c:d1:c1:ed:9d:2c:f3:47:22:1b:77:b6:
         8d:35:3e:f4:c9:2a:6b:d0:59:6b:80:7d:ad:e5:4a:5b:30:66:
         1c:73:6a:b4:4a:81:7d:48:28:9a:67:32:39:af:bf:89:f5:a8:
         51:71:2a:c6:f2:2c:42:b8:e4:88:8b:6d:b0:50:dd:da:ff:5a:
         20:71:46:a6:2d:6e:e2:7b:d9:6d:c5:c2:e7:cb:35:bc:80:63:
         58:89:86:20:23:35:9d:4f:cb:77:d0:28:d4:31:a6:69:79:7e:
         d3:81:5b:e4:30:e2:8b:9b:26:58:64:07:d7:10:ec:e9:1f:44:
         00:8c:a5:45:a4:34:26:73:74:ce:50:18:e5:b7:60:91:f9:a0:
         39:f5:a0:4c:71:eb:dc:4d:26:11:f7:dd:72:ba:3e:08:59:a5:
         b5:f0:28:ef:6d:ef:85:c2:81:d5:ce:47:f0:d7:43:98:c6:ac:
         57:a9:98:6d:e3:ae:d3:71:87:d5:ae:b8:43:81:b3:48:f2:96:
         e3:b9:de:37:60:0b:4a:ab:15:7c:5e:cb:2d:2c:0e:de:b7:64:
         2f:f8:c3:73
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NDZD
NjVCN0FGOTE3QUZGQTc0RjZCMDlFNDM3QUMwRjM2NTM3NDFEMB4XDTI0MDMxNzEy
MTMyMVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDdGNzMzRjVDRTkzODhF
RjE0RUU2MDU0NTg5Rjc4ODdERjM5N0Y2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANAWuMt5J5uoUV4t/Ag0F/omzCFW+DjRp9KYUgUW9eMh2tg7Z1UX
MNhpBTRP/mSHwS1XoQgMte13xfp+/KGVYb7DmSWSsKL59Z8OP4WG3XbNaOUwKyCe
r8vvwktjeb4kPh5kpxqIqqgiVgkok3YfZPEJfo3jxIyEoS/TqbU6Xa96cXberrTy
NY0NL798y8HzW9KgSpx8tWGBsDW65q/wdWiRXtveYVvpBeXzX+fj6d8E7yolQe9W
Oaw7L6MH26X2WvIEEoM6VmqkGjcte4oLLm9NoeU01YBELzD6Vqwh9UkkFB6pC3fT
WDZKXtcoOR4A2BTXkruGQMC6U5oV5xUdtq0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRH9zP1zpOI7xTuYFRYn3iH3zl/bzAfBgNVHSMEGDAWgBREbGW3r5F6/6dPawnk
N6wPNlN0HTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTcvUkd4bHQ2LVJldi1uVDJzSjVEZXNEelpUZEIwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUkd4bHQ2LVJldi1uVDJzSjVEZXNE
elpUZEIwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjE3L1JfY3o5YzZUaU84VTdtQlVXSjk0aDk4NWYyOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnlQQwDQYJKoZIhvcNAQELBQADggEBAB2f6itfhvaCk8x8Q0Q/2oWj
nnI3iFojmNeWM2JDvJ8pfs+sMoxut9zo90zRwe2dLPNHIht3to01PvTJKmvQWWuA
fa3lSlswZhxzarRKgX1IKJpnMjmvv4n1qFFxKsbyLEK45IiLbbBQ3dr/WiBxRqYt
buJ72W3FwufLNbyAY1iJhiAjNZ1Py3fQKNQxpml5ftOBW+Qw4oubJlhkB9cQ7Okf
RACMpUWkNCZzdM5QGOW3YJH5oDn1oExx69xNJhH33XK6PghZpbXwKO9t74XCgdXO
R/DXQ5jGrFepmG3jrtNxh9WuuEOBs0jyluO53jdgC0qrFXxeyy0sDt63ZC/4w3M=
-----END CERTIFICATE-----
Generated at Sun Mar 17 17:30:24 2024 by rpki-client on console.sobornost.net