Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30012/ZQMzc1j0qX5hXRLKvb-UCed5l5c.roa
File:                     ZQMzc1j0qX5hXRLKvb-UCed5l5c.roa (raw, json)
Hash identifier:          5z2w0Kiu7MKIY62Hp8HukJJdhBxU7OUC+OTaVaqzC/k=
Subject key identifier:   65:03:33:73:58:F4:A9:7E:61:5D:12:CA:BD:BF:94:09:E7:79:97:97
Certificate issuer:       /CN=153097FB864FAF4C9E646BB21AD05B5A095BBE3E
Certificate serial:       03
Authority key identifier: 15:30:97:FB:86:4F:AF:4C:9E:64:6B:B2:1A:D0:5B:5A:09:5B:BE:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FTCX-4ZPr0yeZGuyGtBbWglbvj4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/ZQMzc1j0qX5hXRLKvb-UCed5l5c.roa
Signing time:             Mon 07 Aug 2023 10:15:41 +0000
ROA not before:           Mon 07 Aug 2023 10:15:41 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7682
IP address blocks:        2001:398::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153097FB864FAF4C9E646BB21AD05B5A095BBE3E
        Validity
            Not Before: Aug  7 10:15:41 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6503337358F4A97E615D12CABDBF9409E7799797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:a8:17:c8:e3:73:98:72:d0:8b:df:e8:4a:
                    36:55:2c:ba:6f:17:82:ff:f8:ac:d4:b1:9e:8a:19:
                    70:ba:11:e3:13:ce:d6:14:4d:56:c5:0a:b4:59:14:
                    bc:38:21:db:e4:4d:f8:29:d4:85:87:6d:99:b3:5f:
                    95:76:d1:d1:c2:10:e8:63:73:25:90:be:0b:3c:95:
                    d6:71:b7:18:50:46:6e:cc:6c:4d:1b:9b:07:e9:43:
                    fd:a5:91:ae:02:16:2d:e5:88:4e:27:12:e6:6b:a1:
                    dd:d2:25:aa:76:a6:71:de:00:86:79:b4:cc:c4:01:
                    c8:4e:36:04:04:f8:8b:d4:2c:10:ed:5d:09:ff:f0:
                    0e:64:ef:75:77:3a:ac:b6:19:57:c4:26:25:57:74:
                    8a:e1:89:c7:19:e3:c7:37:a7:f4:5e:39:c0:02:b4:
                    1c:5c:f0:e7:6f:93:c8:59:0b:47:15:1e:7c:7f:05:
                    30:dc:f9:1b:88:7d:b5:cf:12:54:2d:dc:84:ef:b4:
                    35:2f:c0:07:84:d1:ae:3d:d3:36:e6:ff:2f:67:4d:
                    6e:b4:1f:c4:25:4c:e8:59:d1:0d:89:e0:f8:a1:d0:
                    a7:c5:83:09:6d:fc:db:01:d4:b1:6a:9e:75:e6:a8:
                    c4:7e:d3:b0:98:eb:b2:6c:bb:fc:f5:21:dd:0a:8c:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:03:33:73:58:F4:A9:7E:61:5D:12:CA:BD:BF:94:09:E7:79:97:97
            X509v3 Authority Key Identifier:
                keyid:15:30:97:FB:86:4F:AF:4C:9E:64:6B:B2:1A:D0:5B:5A:09:5B:BE:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/FTCX-4ZPr0yeZGuyGtBbWglbvj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FTCX-4ZPr0yeZGuyGtBbWglbvj4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30012/ZQMzc1j0qX5hXRLKvb-UCed5l5c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:398::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:fd:80:ad:15:c7:f3:e2:0b:0f:7b:fa:02:90:dc:e8:ed:c8:
         1a:70:73:f9:c4:1e:e6:bd:f4:18:05:89:25:4b:e7:4c:21:4e:
         db:17:95:79:1c:29:1f:41:b7:50:96:3a:53:71:b2:ee:9a:3c:
         83:31:a5:4e:c2:d8:f2:03:5e:c6:fd:f8:83:2b:53:a7:41:90:
         ea:0f:8e:52:64:e2:2e:ed:f0:4a:ee:18:25:8b:ec:11:fa:7c:
         25:6b:34:f4:96:a8:54:4f:88:d9:98:28:45:e8:2a:8c:e0:b4:
         9b:ae:bf:da:66:ab:69:9e:6d:a5:6f:56:29:27:56:4a:f1:26:
         b9:ef:80:80:56:7b:7e:1d:a9:e1:7d:09:ef:5d:48:01:87:46:
         3d:4d:f2:1b:5a:b0:80:cc:df:21:94:fd:20:e9:f6:c2:88:c7:
         26:5e:d6:a3:2b:28:60:8c:5a:74:6b:9c:7f:39:8d:34:b6:a2:
         ab:59:5c:6e:74:68:b1:f4:db:6f:e0:0b:14:e8:1c:d3:fb:f3:
         cf:24:94:94:fe:b9:42:c1:9c:da:25:14:df:6f:e3:5a:d0:74:
         12:f5:bd:da:68:e2:57:bb:65:82:8d:f9:42:1c:41:3a:9f:c0:
         96:b8:cc:ea:ae:e0:71:92:bb:32:28:bd:86:2a:dc:af:ed:4c:
         c9:fa:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org