Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2-wAVx9G2dpLjRrWwU9MojP1Tco.roa
File:                     2-wAVx9G2dpLjRrWwU9MojP1Tco.roa (raw, json)
Hash identifier:          6leWrvtDkIWQpMp666fFQZqNCDnfcv2pQq7To2OmZLg=
Subject key identifier:   DB:EC:00:57:1F:46:D9:DA:4B:8D:1A:D6:C1:4F:4C:A2:33:F5:4D:CA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       20
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2-wAVx9G2dpLjRrWwU9MojP1Tco.roa
Signing time:             Tue 30 May 2023 16:01:58 +0000
ROA not before:           Tue 30 May 2023 16:01:58 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ab00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:01:58 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DBEC00571F46D9DA4B8D1AD6C14F4CA233F54DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:12:93:ed:05:f6:9c:0b:2c:c9:67:e3:2e:
                    a9:f7:e5:0f:21:be:6f:ed:99:95:65:dc:43:73:1f:
                    0b:86:22:45:75:9a:ad:8c:86:7f:da:79:53:52:b9:
                    60:a6:c2:73:06:be:07:56:6d:61:8c:14:84:79:fd:
                    ef:46:ee:55:77:0d:a7:93:82:35:10:df:ad:ce:4d:
                    56:9d:d0:eb:fb:6c:74:12:38:72:16:0b:58:e3:11:
                    9d:44:04:16:c6:58:b1:23:ab:f3:f1:47:75:67:5b:
                    5b:39:c7:d4:93:db:58:5c:c1:7f:6f:63:86:dd:c3:
                    e4:bd:d6:ab:70:3f:e3:cb:37:00:b0:ad:94:c5:ee:
                    e3:e8:4b:09:d6:ef:ee:fc:2e:aa:67:5e:d5:d3:31:
                    be:0a:c1:28:16:50:1d:0b:79:a7:a9:47:93:9c:13:
                    2b:fc:7b:e8:51:9c:3d:0f:26:d0:4b:f9:4e:d0:eb:
                    de:d8:bd:5e:e7:73:07:9f:67:98:ab:95:03:86:a0:
                    64:fc:8f:46:20:7e:c3:35:f6:79:76:45:7d:db:c3:
                    42:97:dc:c7:64:db:df:47:68:5f:d4:db:c2:74:1a:
                    ea:a7:6c:1e:3d:05:83:23:cd:b2:d2:71:01:61:f7:
                    25:08:e3:56:60:ac:88:5e:5a:01:f6:30:ac:3f:8d:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EC:00:57:1F:46:D9:DA:4B:8D:1A:D6:C1:4F:4C:A2:33:F5:4D:CA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2-wAVx9G2dpLjRrWwU9MojP1Tco.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ab00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:01:ef:87:93:dd:f3:0e:51:c1:ea:44:6e:a1:5d:cb:1f:b2:
         d8:c5:ab:0a:40:73:16:8b:a6:96:6d:b9:d6:9d:ff:55:8d:7d:
         f0:79:22:d0:c3:df:6e:65:88:7b:fe:80:e6:95:ac:9c:2b:d8:
         d7:61:25:75:9d:32:77:27:e0:9a:f1:2c:af:87:1d:9b:42:72:
         e0:f1:fc:d8:57:ca:52:0a:78:03:53:de:a3:79:de:08:f0:e8:
         ab:2e:32:5e:e3:61:c4:fd:5b:1f:2d:66:1c:51:89:b5:db:c1:
         e6:90:fb:0a:68:6a:46:5a:62:f0:44:62:1f:7a:d7:3c:5c:07:
         e9:62:65:f5:31:c7:e1:12:be:64:bc:12:fe:0b:9f:16:0e:c3:
         0e:f1:3b:e9:65:97:c5:02:23:f3:7e:d6:1d:ac:2f:1b:2a:44:
         eb:b7:02:8b:a5:93:91:f2:0d:4d:e6:2e:1c:32:85:70:ab:52:
         d4:58:0d:47:7c:4c:0e:82:3c:8d:2c:d3:2f:43:5d:cd:22:22:
         12:3e:80:30:9e:1f:d7:df:08:3b:19:39:bc:c8:5f:3c:a6:aa:
         30:d7:35:c9:54:bb:00:fb:f3:c9:7d:57:82:88:20:2a:bd:87:
         07:81:d3:1f:7b:40:4f:65:d7:db:1e:4e:c5:37:bf:96:2e:35:
         18:94:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-fra.rpki-client.org