Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/TacGspZURgp86TIdfx06vniF8Ls.roa
File:                     TacGspZURgp86TIdfx06vniF8Ls.roa (raw, json)
Hash identifier:          4+8kCg0mVTryKG8O1GfHd7TWIPmFIIq3Pj9dNt1MbWY=
Subject key identifier:   4D:A7:06:B2:96:54:46:0A:7C:E9:32:1D:7F:1D:3A:BE:78:85:F0:BB
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       2F
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/TacGspZURgp86TIdfx06vniF8Ls.roa
Signing time:             Sat 01 Jul 2023 01:28:41 +0000
ROA not before:           Sat 01 Jul 2023 01:28:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        2001:260::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Jul  1 01:28:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4DA706B29654460A7CE9321D7F1D3ABE7885F0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:8c:a0:cc:c5:e5:00:97:09:62:a0:98:80:
                    3c:08:24:9a:17:74:37:49:ec:0d:1a:3f:e5:58:db:
                    8c:3c:84:81:0d:6d:d3:37:f7:41:2a:d8:57:2a:00:
                    c6:d6:27:38:5f:5b:03:6d:c3:b8:ad:b3:49:9c:c0:
                    81:94:bd:3c:35:d7:99:be:83:41:93:22:19:ba:d1:
                    9a:42:02:94:5e:01:be:8b:48:99:5e:04:8c:67:a2:
                    63:08:4a:94:01:ff:27:15:42:84:73:c1:ae:b1:3f:
                    d0:31:2f:5d:06:eb:78:39:18:8c:c3:30:c9:9b:99:
                    c1:01:8b:f0:9c:2a:e0:34:6b:fd:45:55:27:c1:6c:
                    c4:91:af:18:f8:94:c2:74:39:57:bc:51:ab:71:d8:
                    ae:cc:00:9d:d9:ef:ac:fd:2b:1e:59:0a:60:28:94:
                    0a:b3:67:76:90:fa:f7:15:d5:fe:77:b0:54:d5:20:
                    c3:09:0e:c2:fd:5b:df:6e:39:3e:27:b4:c0:3d:6a:
                    85:2b:a1:dc:ce:a0:4b:af:c0:12:bc:b2:1f:fe:78:
                    42:06:26:be:d0:43:65:7c:0a:0e:6d:b5:c8:20:0a:
                    f3:88:f9:41:a1:04:21:2b:73:f5:cf:ef:07:6e:89:
                    22:90:24:9d:0d:7f:d9:9e:81:62:c9:c9:34:0f:5d:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A7:06:B2:96:54:46:0A:7C:E9:32:1D:7F:1D:3A:BE:78:85:F0:BB
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/TacGspZURgp86TIdfx06vniF8Ls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:260::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:de:a6:6a:85:dc:a9:5b:66:4c:ce:9e:59:cf:6e:cc:74:19:
         da:57:b6:5c:d1:ae:7c:07:d9:28:03:75:f7:a2:cd:de:1d:f9:
         e9:9d:16:ff:ea:5e:6b:03:55:07:0c:fd:b5:b3:13:f5:91:b0:
         64:65:c6:95:06:c2:57:a3:31:3d:4c:92:7d:cc:77:af:36:8e:
         73:c6:3d:dc:f4:13:29:7b:45:6d:3b:2d:9e:53:e6:45:56:e6:
         f8:c2:74:32:0d:90:76:4b:3d:07:91:e0:d8:33:f8:83:cf:6a:
         ef:0b:2f:1a:a4:e3:d9:d9:5d:06:63:28:e1:f2:42:7a:48:ee:
         78:9d:42:36:c3:a4:7f:53:58:5a:79:a8:a8:2f:df:fa:3b:87:
         81:4a:df:65:53:cc:28:ab:93:e3:65:22:b6:a1:7e:c4:27:8e:
         46:62:41:34:91:a6:5d:ad:95:74:17:33:98:05:26:de:52:b9:
         cf:05:cb:c5:8e:04:2b:06:84:fd:71:68:5d:e7:03:53:29:0e:
         eb:75:de:8a:0d:77:ba:3e:14:0b:8f:38:8b:3e:ba:1e:fb:55:
         9a:e9:de:63:ea:a5:e0:d3:70:1b:2e:53:41:22:f7:03:7c:8c:
         61:6d:ef:7c:61:50:6e:7e:24:47:42:b0:6c:e7:04:18:31:39:
         b1:a6:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 05:55:50 2024 by rpki-client on console-ams.rpki-client.org