Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/qZ2zEWQjhlaektvdFVQabvnPDdw.roa
File:                     qZ2zEWQjhlaektvdFVQabvnPDdw.roa (raw, json)
Hash identifier:          5o1Y5zRVEAOhhBYhv6fO4kWWALHcLhUIKvqSM2qo44g=
Subject key identifier:   A9:9D:B3:11:64:23:86:56:9E:92:DB:DD:15:54:1A:6E:F9:CF:0D:DC
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       36
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/qZ2zEWQjhlaektvdFVQabvnPDdw.roa
Signing time:             Mon 01 May 2023 01:29:12 +0000
ROA not before:           Mon 01 May 2023 01:29:12 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     59103
IP address blocks:        2401:af80:9011::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: May  1 01:29:12 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=A99DB311642386569E92DBDD15541A6EF9CF0DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:91:cf:f3:b8:ff:64:31:6b:3a:17:f0:2d:
                    2e:ab:0b:27:a4:2f:7c:18:74:06:98:ec:d5:c0:21:
                    3a:c3:0a:5f:a2:02:14:02:8e:7c:c7:e5:2a:a7:d4:
                    1b:59:07:9f:98:e3:4a:94:04:49:be:d2:a5:2d:b7:
                    7f:8b:6f:80:ce:d4:8d:d7:87:cc:25:19:eb:9e:ff:
                    08:14:a1:54:3a:3a:d7:64:b2:28:b1:ae:75:c4:04:
                    03:43:a5:a8:bf:3b:ec:50:96:38:09:a1:e8:21:6c:
                    00:80:fd:97:44:1d:a4:de:35:0d:da:f0:30:22:d7:
                    74:74:b2:aa:a3:b3:ee:ae:31:02:aa:46:ef:ad:e8:
                    e3:ef:fc:d7:b3:2b:bf:17:05:0b:df:fd:c7:ba:45:
                    13:b7:91:5d:5a:0f:ff:3e:fb:7a:30:f5:7b:47:35:
                    7c:98:d5:47:5e:52:67:f1:04:9e:bd:f5:fc:d2:4e:
                    45:0a:56:75:11:19:c4:f3:a7:06:49:55:39:81:a4:
                    f2:ff:18:73:f8:ce:30:93:06:17:ee:dd:b6:d9:1b:
                    7c:81:86:30:bc:44:4a:07:a1:e8:41:7f:3a:31:b6:
                    8d:09:06:af:4b:74:64:13:be:79:5c:25:dc:54:ac:
                    cc:47:17:7d:84:1c:33:97:4f:d7:85:0c:76:a0:0a:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9D:B3:11:64:23:86:56:9E:92:DB:DD:15:54:1A:6E:F9:CF:0D:DC
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/qZ2zEWQjhlaektvdFVQabvnPDdw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:4a:21:dd:97:c3:6c:2b:97:19:1d:27:b9:e6:c5:aa:1b:
         3c:63:1b:9e:a4:7e:61:c6:f2:19:9a:89:21:7e:fb:d0:07:cf:
         7b:71:8a:24:1c:10:06:d3:45:b1:c7:da:c9:cd:b5:fe:75:8b:
         f8:9e:90:d3:40:41:70:be:f7:27:b5:52:e2:3a:67:90:2c:7c:
         eb:57:ed:70:6a:62:8c:10:13:eb:eb:eb:14:97:67:66:c4:38:
         d0:a6:ba:81:d9:aa:26:cd:0b:a1:86:8c:d2:c3:56:80:3e:5a:
         73:9b:b3:95:63:8b:70:32:36:d0:81:bf:15:1b:0f:bd:19:06:
         25:dd:a9:09:9b:3e:9b:c2:7e:a8:12:fa:e0:75:46:a3:a6:0f:
         5b:86:ed:f4:c9:78:17:69:a9:d3:46:aa:6c:f8:5d:6e:0d:f2:
         b2:6b:f2:4d:fc:1b:a7:56:3f:1a:a6:17:2f:74:9e:13:6b:d5:
         dc:ec:22:b8:22:6e:67:f5:4f:cb:64:1c:39:70:ca:82:55:bc:
         12:7f:00:0d:6b:e7:cd:ed:74:d7:87:21:7e:8d:d4:72:f6:06:
         99:cf:ea:1c:a7:99:bf:eb:c0:9c:90:3a:da:cb:5a:7f:07:86:
         93:a5:c5:66:40:f2:45:55:0d:76:f4:80:5f:09:95:de:78:41:
         68:5e:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org