Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/SESD37paPI1bWUMYAqlk2_wyhLs.roa
File:                     SESD37paPI1bWUMYAqlk2_wyhLs.roa (raw, json)
Hash identifier:          ysXXyilMHRzSmrjOnOMMDrZQ6hNc6/U3BFJFiu8+tQI=
Subject key identifier:   48:44:83:DF:BA:5A:3C:8D:5B:59:43:18:02:A9:64:DB:FC:32:84:BB
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       22
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/SESD37paPI1bWUMYAqlk2_wyhLs.roa
Signing time:             Fri 01 Sep 2023 01:30:39 +0000
ROA not before:           Fri 01 Sep 2023 01:30:39 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     4721
IP address blocks:        2001:c30::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Sep  1 01:30:39 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=484483DFBA5A3C8D5B59431802A964DBFC3284BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:e3:30:79:36:b8:40:c1:3e:12:ed:b6:1f:
                    b0:66:35:89:8d:c5:7a:59:4b:64:85:71:6e:c9:fc:
                    c5:28:5f:44:d1:94:d0:4a:22:d3:c6:a4:46:43:df:
                    ad:57:a6:f1:e2:de:af:94:d5:b7:8f:f7:de:56:01:
                    eb:2f:e8:1c:de:95:8b:dd:ae:ce:0c:57:e2:2c:62:
                    57:9f:e6:5c:34:2f:5f:1b:3c:8a:3c:d7:5c:05:36:
                    d0:49:a2:6c:0f:69:ce:e1:a3:5c:b0:6e:de:6b:7f:
                    59:20:2f:3d:d6:2d:fc:07:78:d2:78:44:1e:f6:a6:
                    1d:6b:73:8f:bf:d1:02:51:eb:a1:eb:be:0b:ac:62:
                    70:10:93:d8:97:fb:98:91:c9:0d:f7:cd:57:c7:d4:
                    e2:38:ca:70:b8:dd:fe:71:e8:b1:28:a1:07:d9:1e:
                    70:10:d6:0e:98:96:2c:a5:fc:41:97:2e:be:d6:39:
                    a6:ee:79:3c:60:c5:f4:e8:33:a0:15:6a:cd:32:09:
                    fa:9f:08:fe:81:a8:be:81:97:13:65:81:21:b1:a8:
                    e9:63:6b:a1:45:8f:c4:40:25:b0:a4:86:a3:69:ee:
                    50:fd:9d:78:94:a6:70:cf:11:19:95:61:2e:1f:b7:
                    72:7f:6f:c1:a1:96:25:4f:79:8c:11:e1:69:12:70:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:44:83:DF:BA:5A:3C:8D:5B:59:43:18:02:A9:64:DB:FC:32:84:BB
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/SESD37paPI1bWUMYAqlk2_wyhLs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:9d:a8:d8:4e:e5:f9:30:dc:7c:bb:39:ca:81:25:1a:c2:92:
         18:37:a2:fb:66:9b:d7:54:24:c9:6e:30:60:47:39:4a:19:f9:
         e7:ef:9b:5e:45:bc:d4:9b:25:a8:df:88:89:b8:67:e4:eb:f6:
         f7:14:c3:3d:01:cb:2b:a1:d6:08:35:c2:97:f5:3d:72:e6:af:
         2e:38:2f:17:37:71:2f:ae:44:ab:b4:62:29:cb:d5:f1:61:97:
         dc:12:60:6a:fa:07:3f:9c:02:c6:c6:81:5f:3c:a4:9a:51:d4:
         78:f0:25:a9:07:fa:16:2a:ce:c2:07:00:42:63:de:3c:e5:51:
         17:b0:72:f4:f8:de:98:36:ce:c8:f5:96:9b:ea:ed:0d:0e:57:
         19:17:a6:8c:66:fa:21:ba:b3:f3:6a:1f:6d:cd:63:8c:1f:4e:
         9c:17:c4:65:30:67:12:45:91:20:c8:1d:2a:58:07:6f:1e:3d:
         70:69:8a:76:14:a5:43:08:95:1b:61:e0:fc:65:10:af:fd:6d:
         c0:b2:05:e7:7d:10:88:04:cf:a5:9a:44:d4:33:0d:9d:fe:58:
         5c:5c:a0:9d:9a:b3:da:1b:75:c3:36:b7:1e:1b:c7:4d:19:23:
         f6:72:86:2d:a0:83:78:04:a2:9c:c0:1c:52:5a:04:f4:85:fa:
         72:08:89:3f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OEFF
NTJDMUYzNkJGQUY4NTJGNDEwRjFDQUQwRDM2ODNENTQxMjYxMB4XDTIzMDkwMTAx
MzAzOVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoNDg0NDgzREZCQTVBM0M4
RDVCNTk0MzE4MDJBOTY0REJGQzMyODRCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOCO4zB5NrhAwT4S7bYfsGY1iY3FellLZIVxbsn8xShfRNGU0Eoi
08akRkPfrVem8eLer5TVt4/33lYB6y/oHN6Vi92uzgxX4ixiV5/mXDQvXxs8ijzX
XAU20EmibA9pzuGjXLBu3mt/WSAvPdYt/Ad40nhEHvamHWtzj7/RAlHroeu+C6xi
cBCT2Jf7mJHJDffNV8fU4jjKcLjd/nHosSihB9kecBDWDpiWLKX8QZcuvtY5pu55
PGDF9OgzoBVqzTIJ+p8I/oGovoGXE2WBIbGo6WNroUWPxEAlsKSGo2nuUP2deJSm
cM8RGZVhLh+3cn9vwaGWJU95jBHhaRJwzcMCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRIRIPfulo8jVtZQxgCqWTb/DKEuzAfBgNVHSMEGDAWgBRYrlLB82v6+FL0EPHK
0NNoPVQSYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNzIvV0s1U3dmTnItdmhTOUJEeHl0RFRhRDFVRW1FLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0s1U3dmTnItdmhTOUJEeHl0RFRh
RDFVRW1FLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDcyL1NFU0QzN3BhUEkxYldVTVlBcWxrMl93eWhMcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQwwMA0GCSqGSIb3DQEBCwUAA4IBAQBSnajYTuX5MNx8uznKgSUa
wpIYN6L7ZpvXVCTJbjBgRzlKGfnn75teRbzUmyWo34iJuGfk6/b3FMM9AcsrodYI
NcKX9T1y5q8uOC8XN3EvrkSrtGIpy9XxYZfcEmBq+gc/nALGxoFfPKSaUdR48CWp
B/oWKs7CBwBCY9485VEXsHL0+N6YNs7I9Zab6u0NDlcZF6aMZvohurPzah9tzWOM
H06cF8RlMGcSRZEgyB0qWAdvHj1waYp2FKVDCJUbYeD8ZRCv/W3AsgXnfRCIBM+l
mkTUMw2d/lhcXKCdmrPaG3XDNrceG8dNGSP2coYtoIN4BKKcwBxSWgT0hfpyCIk/
-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org