Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30410/YD3y9ysFyJp1e6Lo0qWk1l5j5B0.roa
File:                     YD3y9ysFyJp1e6Lo0qWk1l5j5B0.roa (raw, json)
Hash identifier:          d+KCd4br0f3UUiUM8YQkENMVSn9lOsSDdjd2IkUr4Q0=
Subject key identifier:   60:3D:F2:F7:2B:05:C8:9A:75:7B:A2:E8:D2:A5:A4:D6:5E:63:E4:1D
Certificate issuer:       /CN=93BCDB433396C43EAB076DCDC7AF462C22B50176
Certificate serial:       02
Authority key identifier: 93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/YD3y9ysFyJp1e6Lo0qWk1l5j5B0.roa
Signing time:             Mon 10 Jul 2023 00:09:43 +0000
ROA not before:           Mon 10 Jul 2023 00:09:43 +0000
ROA not after:            Wed 03 Jul 2024 04:59:12 +0000
asID:                     150359
IP address blocks:        2400:c0a0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 04:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BCDB433396C43EAB076DCDC7AF462C22B50176
        Validity
            Not Before: Jul 10 00:09:43 2023 GMT
            Not After : Jul  3 04:59:12 2024 GMT
        Subject: CN=603DF2F72B05C89A757BA2E8D2A5A4D65E63E41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:f5:fc:a5:d2:9a:40:b2:1d:be:5e:e8:58:
                    16:d3:a2:06:35:ef:ca:70:1d:77:fc:47:70:58:a4:
                    e7:d8:87:c1:b7:f3:6e:77:0d:fb:51:91:c7:c8:11:
                    f9:5d:36:a5:c1:b3:c5:b4:7e:42:e8:33:62:e1:60:
                    fd:60:d1:c7:03:38:09:44:a9:02:3c:97:2d:e1:1d:
                    a5:8c:29:21:7d:92:25:fa:68:05:d1:4e:a0:8b:db:
                    ec:c4:3d:79:80:31:52:94:35:e0:45:1c:1a:76:72:
                    f6:96:d3:bb:60:7f:c3:ac:a5:9e:c1:05:fe:9d:aa:
                    c1:83:8b:fb:83:9b:d8:9b:d5:12:83:97:cb:cd:80:
                    cb:05:ac:b1:4d:b4:45:8a:74:2c:de:b3:3f:82:16:
                    fb:71:e5:d5:3d:57:c6:a0:1d:d3:47:1e:07:9c:23:
                    7a:93:66:68:ee:c6:c4:2d:17:6f:b9:29:e9:24:39:
                    ef:b0:27:fb:e2:f0:77:67:9f:f2:c2:a7:12:ec:0b:
                    d8:5c:22:68:9f:b6:79:96:28:ad:ac:b6:23:77:a4:
                    61:78:2e:7a:c5:8f:41:1c:b9:de:6f:95:92:dd:0b:
                    31:f2:89:f8:4e:66:e4:49:e1:7a:38:da:c0:8d:cf:
                    2a:de:94:e0:20:d3:ab:a2:5c:ec:b1:06:b4:2a:b5:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:F2:F7:2B:05:C8:9A:75:7B:A2:E8:D2:A5:A4:D6:5E:63:E4:1D
            X509v3 Authority Key Identifier:
                keyid:93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/YD3y9ysFyJp1e6Lo0qWk1l5j5B0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:1a:ea:e4:ee:29:61:5a:e0:c4:1d:e1:4d:54:ed:68:b1:
         ea:c1:78:81:9a:00:a6:4d:f0:b4:cf:2a:d4:a5:a9:85:c0:77:
         7a:86:22:88:83:b4:f3:2b:eb:63:f3:0b:77:9f:24:6d:7b:d3:
         19:05:9f:56:26:79:e4:26:55:ce:d2:d5:06:59:96:ab:b2:54:
         0f:dc:92:d4:02:56:aa:77:2d:fb:b6:cb:81:2c:bb:57:2c:d2:
         c6:32:f6:9d:31:5e:c7:f4:f7:8c:ff:93:e2:66:cd:cc:69:e0:
         9d:b2:bd:57:e9:9f:61:54:25:74:00:30:9e:b9:56:7d:2d:7f:
         58:bf:65:66:d1:61:ca:39:b9:e6:f6:c2:0c:3b:33:e5:4a:74:
         e5:ae:6f:71:bd:b0:69:4f:18:de:c9:3d:ca:b0:39:82:1f:f4:
         cf:1e:5e:6a:11:5e:b1:5b:4a:3c:fc:98:91:e2:66:3c:36:dd:
         d9:42:9f:8f:e5:75:05:1a:b4:d7:24:59:f8:94:07:89:42:93:
         ea:87:fb:51:b1:30:0d:bc:a5:dd:d0:19:0d:69:b1:fc:d4:22:
         0e:ce:d5:a0:9d:cf:44:b5:2e:f0:6b:17:bb:5e:52:72:57:6d:
         95:67:1a:58:b3:04:4f:f6:4a:8d:df:1b:1e:9c:51:8e:f9:5d:
         b9:f5:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 09:52:33 2024 by rpki-client on console-ams.rpki-client.org