Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/mKmwzc1DOtGknP7-EzqBCqRQi6Q.roa
File:                     mKmwzc1DOtGknP7-EzqBCqRQi6Q.roa (raw, json)
Hash identifier:          B42tozLLMULjuUNZbL9YAFQWJ5efjDACaALMuYznvTM=
Subject key identifier:   98:A9:B0:CD:CD:43:3A:D1:A4:9C:FE:FE:13:3A:81:0A:A4:50:8B:A4
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       24
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/mKmwzc1DOtGknP7-EzqBCqRQi6Q.roa
Signing time:             Fri 01 Sep 2023 01:30:40 +0000
ROA not before:           Fri 01 Sep 2023 01:30:40 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        2405:1200::/29 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Sep  1 01:30:40 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=98A9B0CDCD433AD1A49CFEFE133A810AA4508BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:13:bf:ac:eb:30:33:64:85:f3:93:f7:c5:
                    dc:3d:3d:a2:6a:10:b4:80:2c:6f:3d:21:8d:8c:b9:
                    4d:49:ad:61:b0:0d:b4:c4:a7:bb:53:2c:6d:bb:4f:
                    2a:0e:00:d0:a5:a0:2f:58:bd:f8:49:85:88:62:b3:
                    8c:c1:d7:fc:59:69:ef:8c:dc:d1:0f:c3:e2:d4:dc:
                    78:f4:b4:6c:de:82:ad:f5:4b:d1:ba:44:ec:4e:99:
                    a0:38:ff:fe:dd:e1:6b:30:4f:3e:07:82:0a:e1:f6:
                    0e:4a:1a:dd:8a:b0:8e:f6:0f:7c:01:04:2c:98:47:
                    90:d4:a4:c0:d2:fc:8c:94:4a:83:de:a4:0b:69:8e:
                    d0:0e:0b:54:49:bf:16:9e:d3:7b:17:13:e3:46:7e:
                    b2:42:e5:62:62:e2:48:19:82:54:8f:8d:25:84:6b:
                    5e:70:1e:99:01:29:6e:05:1a:26:20:3a:f1:73:98:
                    86:20:66:66:24:ff:e3:dc:0f:4f:a4:b0:be:22:da:
                    de:cf:16:8d:04:b8:41:56:59:b4:79:ee:2a:e8:aa:
                    f4:31:ed:cc:8c:81:0a:92:af:37:2d:48:64:bf:ba:
                    ec:2f:5b:48:b6:ff:57:f7:0c:47:2e:79:60:ce:88:
                    75:d7:e3:7e:e3:d9:a2:dc:1d:aa:74:14:4b:ee:84:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A9:B0:CD:CD:43:3A:D1:A4:9C:FE:FE:13:3A:81:0A:A4:50:8B:A4
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/mKmwzc1DOtGknP7-EzqBCqRQi6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:1200::/29

    Signature Algorithm: sha256WithRSAEncryption
         aa:79:bd:ca:f9:13:46:98:a0:a9:80:5e:e8:c3:af:0f:bb:42:
         21:80:f5:1e:89:2b:2d:45:2a:64:72:ba:78:d1:2e:99:d9:5b:
         ae:6d:51:cd:65:3d:a9:be:6c:ca:93:0f:aa:aa:e5:5d:49:3a:
         b2:da:db:26:e1:7e:c9:bc:fe:27:62:33:43:00:35:56:86:0f:
         05:68:e4:6f:1e:ef:b6:f9:a1:b2:7e:81:9f:7d:06:e5:e0:72:
         56:40:fb:f7:a1:1d:41:43:c2:e8:39:67:49:5f:08:1e:e2:b3:
         bc:78:ae:67:c2:7d:f4:82:0a:46:f4:91:28:a5:92:dd:dc:0f:
         48:92:57:14:67:7e:38:2d:48:ff:75:89:ff:ed:87:ca:3c:f9:
         9a:eb:f8:94:66:b3:e9:86:99:cf:65:91:0c:4a:4e:b2:1f:8e:
         f1:48:59:a9:e8:20:df:ad:e9:30:4a:3b:de:3f:d6:9f:67:d4:
         f3:8f:08:51:91:86:22:9d:c6:11:e4:a8:1d:63:74:f2:a7:ab:
         a4:ad:50:33:49:2a:b9:f0:a1:03:ed:fc:e4:07:1c:df:88:b4:
         a5:d3:ed:4e:ee:14:39:41:a3:66:e4:30:e5:bd:bc:ea:16:04:
         b5:4a:3d:fe:88:b1:52:9e:52:00:58:07:cf:a5:95:dc:1a:b5:
         0e:c3:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org