Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/2uPstzzIuaj9KO_xZai-HTK987Y.roa
File:                     2uPstzzIuaj9KO_xZai-HTK987Y.roa (raw, json)
Hash identifier:          C/CwUIDoiEF8IAryNY9pJ03DWf3hw1ClIGP0Tx6eo7w=
Subject key identifier:   DA:E3:EC:B7:3C:C8:B9:A8:FD:28:EF:F1:65:A8:BE:1D:32:BD:F3:B6
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       41
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/2uPstzzIuaj9KO_xZai-HTK987Y.roa
Signing time:             Tue 07 Nov 2023 05:19:47 +0000
ROA not before:           Tue 07 Nov 2023 05:19:47 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     38639
IP address blocks:        2402:c800:ef::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 02:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Nov  7 05:19:47 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=DAE3ECB73CC8B9A8FD28EFF165A8BE1D32BDF3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:5b:53:a4:65:33:14:5d:d6:27:4b:4f:4d:
                    b6:89:65:80:d7:56:a6:e9:8d:39:34:80:85:e0:d0:
                    10:0e:68:11:0f:1f:2e:39:07:b2:d4:4f:03:84:62:
                    ac:4a:9f:79:ec:53:a5:d9:8a:c9:fa:66:b2:26:6d:
                    5d:d8:bf:0e:23:5e:1b:7c:36:31:c0:86:6d:0b:dd:
                    cc:9d:20:de:48:9b:63:c4:f8:89:c8:7f:f3:db:7f:
                    a4:19:17:3f:8a:ef:09:80:cf:35:75:9d:bb:f1:6f:
                    eb:8d:97:47:04:af:70:6c:5f:6f:9a:bb:52:82:9d:
                    d0:cc:ce:0f:42:ed:14:27:cd:a1:91:00:56:4d:9f:
                    60:f3:0c:60:4d:98:4b:c7:05:a1:90:60:dd:1d:66:
                    24:5d:52:c7:1c:25:d9:c2:b2:92:b5:d9:41:0b:92:
                    6c:9a:ad:0f:2a:ef:a3:81:27:d7:9a:59:95:e0:53:
                    e5:f4:09:ed:a0:22:c5:5b:8e:ca:9c:20:b4:af:59:
                    fb:93:4c:17:94:2f:58:67:00:ad:64:7c:55:75:ec:
                    dc:7b:a6:85:5c:8e:44:78:52:db:44:17:25:2c:8d:
                    97:41:fc:10:00:95:ec:f5:f5:6d:e9:34:b6:7f:6b:
                    a1:9c:20:9d:bf:7b:b1:97:ec:79:ef:e5:ba:04:6c:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:EC:B7:3C:C8:B9:A8:FD:28:EF:F1:65:A8:BE:1D:32:BD:F3:B6
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/2uPstzzIuaj9KO_xZai-HTK987Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:eb:cd:d1:5d:05:c1:ed:91:0e:cb:01:31:b7:35:9d:04:66:
         8c:1f:23:8f:55:40:0f:a5:c2:23:98:a5:72:1c:ce:76:60:af:
         5f:bd:6d:bd:8b:ed:ae:ba:cf:c9:9d:f5:63:90:16:23:93:d2:
         98:5a:c8:59:39:a0:93:1e:87:31:bc:05:78:bf:71:2a:14:fa:
         e6:3a:4b:90:d9:b8:c7:79:9a:fe:31:1b:37:09:f4:b7:06:06:
         fa:59:eb:2e:89:e1:4e:74:c5:d0:23:5f:9e:55:c8:d8:ac:38:
         ea:d9:9d:02:2f:1b:6f:71:da:3b:50:8c:64:8c:27:c8:e8:9a:
         a4:07:7c:2c:66:65:3f:bb:b3:3d:9a:74:3e:ec:e0:4e:01:0c:
         a6:9a:26:4b:90:6a:19:67:7a:26:e4:c4:20:0d:43:38:ab:c1:
         75:c4:0f:1f:98:8f:e5:79:fa:82:4c:c6:28:83:00:f8:a6:2d:
         1b:29:89:57:c0:fa:07:9a:1f:09:6b:5d:89:55:c9:14:d8:ee:
         b6:85:5c:dc:1c:01:02:80:f7:71:61:1d:f4:ce:0f:82:9f:cb:
         e1:83:63:f7:7c:05:6d:e6:c7:93:ff:a5:6a:94:be:ab:30:0d:
         63:24:95:88:a1:57:89:16:db:ed:35:79:cb:16:54:c3:97:e4:
         cc:2e:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 03:44:07 2024 by rpki-client on console-ams.rpki-client.org