Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/o0sdmeKHFxVayQnBZH4_dou_6uI.roa
File:                     o0sdmeKHFxVayQnBZH4_dou_6uI.roa (raw, json)
Hash identifier:          pVpy7fCRu7Hd7ui6Hg3fwhBfO9QkHNoUT0JtgpTyb34=
Subject key identifier:   A3:4B:1D:99:E2:87:17:15:5A:C9:09:C1:64:7E:3F:76:8B:BF:EA:E2
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       0F
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/o0sdmeKHFxVayQnBZH4_dou_6uI.roa
Signing time:             Thu 01 Sep 2022 01:31:06 +0000
ROA not before:           Thu 01 Sep 2022 01:31:06 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        2001:c30:40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Sep  1 01:31:06 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=A34B1D99E28717155AC909C1647E3F768BBFEAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:4a:45:29:33:05:bc:58:da:ac:4d:a7:87:
                    a0:8d:53:f9:4a:c9:ca:9f:a5:82:8e:dc:c8:ac:0c:
                    b9:1d:cb:9c:1e:1b:8d:d2:b9:16:c7:c4:79:7d:ef:
                    d7:61:32:06:2e:a6:7a:c9:5f:25:b7:da:1d:f5:17:
                    bf:77:a6:3b:e4:42:ac:28:33:01:26:10:3e:e8:73:
                    c6:0d:df:bf:6d:d3:5a:ce:09:7a:71:dd:40:ac:d8:
                    ed:20:ef:4e:a5:e6:22:11:81:16:4d:48:7b:3f:a2:
                    de:90:77:1c:fb:70:90:b1:3a:7c:96:a0:ef:53:91:
                    ed:85:5f:31:51:90:fb:72:6c:5c:aa:19:ec:58:f1:
                    65:d7:45:0d:13:3f:49:04:2c:1a:e3:96:36:31:e4:
                    3c:82:18:54:a2:64:8d:f9:11:ac:9c:a7:e3:4c:69:
                    80:7b:a9:8c:22:35:db:2a:70:0e:07:0d:00:7b:4e:
                    4a:37:2c:eb:da:4f:67:72:92:08:35:1c:02:0c:65:
                    9d:41:32:06:c2:d7:26:ad:6e:1e:e9:00:6b:71:35:
                    18:e1:d2:4f:c2:64:d4:43:43:70:e6:a0:0f:bd:ff:
                    14:d4:50:8a:40:fc:4b:f2:d3:61:30:ef:38:6b:46:
                    bc:d8:c4:1c:5d:7d:b2:e6:68:de:3f:db:e8:d8:d6:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4B:1D:99:E2:87:17:15:5A:C9:09:C1:64:7E:3F:76:8B:BF:EA:E2
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/o0sdmeKHFxVayQnBZH4_dou_6uI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:60:53:2b:86:55:20:cc:88:85:46:7b:81:bf:96:d9:d3:
         b8:0c:ac:aa:28:1a:63:9e:9d:56:3e:7a:57:d6:d3:39:81:5f:
         78:13:29:21:f1:f5:f4:99:5f:6d:c5:de:2c:b7:88:13:fb:6f:
         1e:e8:44:a5:07:03:0b:70:90:ff:cb:f7:a0:e1:f9:54:2b:fc:
         ca:0d:c8:30:45:fe:ef:3c:fc:e6:cb:a2:53:a9:53:7e:b3:19:
         d9:bc:13:8e:eb:52:d3:f6:b7:87:13:2a:57:9f:70:f0:a8:d0:
         36:0e:5e:11:1b:b4:98:2c:64:a2:09:da:cd:ff:b6:8f:0f:13:
         77:56:d3:2d:1e:a8:a5:e3:5d:52:bc:2b:cf:1d:fb:9d:70:ce:
         08:08:69:01:a0:23:28:c1:c9:0b:ae:2d:25:80:bc:b6:a8:94:
         26:7f:0e:c0:62:9c:84:32:6f:75:e5:d3:40:b5:47:b1:37:19:
         3d:0c:4a:1f:be:0e:48:e7:69:08:86:22:e0:60:b2:c8:94:97:
         af:c0:a7:c4:30:3f:3d:cb:1d:d0:77:20:68:ff:ab:b6:8d:d4:
         24:8d:d9:b0:f4:2a:be:02:3c:b1:87:fc:cf:c7:69:b9:08:88:
         68:00:13:3c:da:24:41:33:b2:a2:37:29:c6:6e:a9:17:47:a3:
         0c:48:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 02:05:00 2023 by rpki-client on console-fra.rpki-client.org