Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa
File:                     aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa (raw, json)
Hash identifier:          F7T3jN6ytcxpXvaPLrTVdHmG+zT8Mfa/S+t6gKKodsY=
Subject key identifier:   68:2B:B3:FD:0D:24:F0:28:DB:44:CA:B6:35:BD:68:17:C0:4A:1E:E6
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       23
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa
Signing time:             Fri 01 Sep 2023 01:30:40 +0000
ROA not before:           Fri 01 Sep 2023 01:30:40 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        2001:c30::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Sep  1 01:30:40 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=682BB3FD0D24F028DB44CAB635BD6817C04A1EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:99:ba:05:5c:22:bf:be:74:44:0f:8c:04:
                    2b:3d:45:a4:b3:58:b8:38:1c:39:92:89:7a:38:6b:
                    08:8a:36:ac:d9:3e:0e:38:ff:1f:76:0c:6c:f4:ca:
                    01:cb:9a:3d:72:c1:8d:2c:43:d9:5a:dd:50:0d:d0:
                    ba:83:de:6b:a9:32:5b:ba:c4:0c:b7:d5:03:d5:1b:
                    38:33:ee:54:93:1e:d1:54:c1:6c:e9:fb:f7:ea:a7:
                    3b:56:d8:c2:9e:50:c6:11:51:00:a4:5d:e1:ae:32:
                    1d:f5:e2:96:53:fd:8b:72:61:fd:aa:1f:38:fe:cd:
                    42:87:df:6e:bb:02:c9:be:bc:64:6f:89:87:f0:07:
                    92:89:95:c6:57:d3:72:c4:eb:15:80:cb:50:05:b1:
                    c7:43:ce:96:ba:13:a8:54:93:97:38:7b:7f:9d:be:
                    e7:23:19:a8:d8:63:c7:e2:06:ae:44:e8:54:37:fb:
                    08:e8:0b:57:86:38:99:95:39:d0:9d:46:95:dc:56:
                    30:86:5b:d8:2d:40:31:41:f8:71:8b:54:5c:e7:cf:
                    47:6a:dc:cc:2f:61:a4:e4:3d:a1:8d:4f:bf:ef:39:
                    3b:a9:e7:b2:27:f9:26:7b:d9:36:0c:9b:c9:2a:db:
                    2f:09:dc:e1:ce:22:a9:9b:e9:35:8a:c7:2d:5d:fb:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:B3:FD:0D:24:F0:28:DB:44:CA:B6:35:BD:68:17:C0:4A:1E:E6
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:d8:a6:f3:bb:de:be:74:01:ee:f9:0f:08:84:ae:09:e1:6f:
         36:b5:61:0f:53:f0:51:03:13:3e:3c:48:11:a2:89:5f:ec:03:
         80:e6:a1:ef:db:80:23:2f:32:43:f3:86:21:b4:fc:6a:b4:63:
         4e:a1:dd:2f:97:15:7f:a9:1d:14:4c:c1:ef:4a:da:28:b7:6c:
         2e:47:2e:fd:33:39:f3:6d:64:64:a4:88:64:09:36:11:4b:c0:
         1c:b5:b7:a0:f9:ec:8e:ee:88:2b:92:ae:62:35:21:b4:e9:23:
         d2:9d:13:78:98:65:12:70:97:49:85:8b:26:5f:36:d8:03:b2:
         69:47:cf:d4:ff:0e:43:64:77:63:ef:d5:d1:dc:d4:cb:56:b4:
         e5:55:71:14:95:46:23:b3:fc:c8:dd:d1:53:33:b1:47:94:cc:
         91:3d:dc:31:59:b5:b6:09:88:77:93:57:6a:66:96:8d:93:bd:
         5b:9a:27:52:be:70:9f:f3:89:a6:de:0f:f7:d0:27:5a:02:5c:
         8f:b9:7c:a5:d7:10:4f:e4:01:a1:99:7d:e2:82:10:f2:f5:bf:
         43:45:13:0a:46:09:2b:d7:0c:65:3f:2f:cc:85:50:d4:ed:bf:
         ae:81:0a:fc:0b:3d:4e:98:99:3b:71:0a:f4:fa:54:ff:98:2e:
         88:81:e4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:26 2024 by rpki-client on console-fra.rpki-client.org