Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9Gsi2TnLpD5aitx8Rov5HsMWh7Q.roa
File:                     9Gsi2TnLpD5aitx8Rov5HsMWh7Q.roa (raw, json)
Hash identifier:          vIb22ieOwJld2ZGMU7541zQOMG4BZ50Il67z4cEu4l0=
Subject key identifier:   F4:6B:22:D9:39:CB:A4:3E:5A:8A:DC:7C:46:8B:F9:1E:C3:16:87:B4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       DF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9Gsi2TnLpD5aitx8Rov5HsMWh7Q.roa
Signing time:             Tue 30 May 2023 16:10:26 +0000
ROA not before:           Tue 30 May 2023 16:10:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F46B22D939CBA43E5A8ADC7C468BF91EC31687B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:04:b6:87:a3:3e:97:1a:ec:a2:a4:66:f3:ac:
                    9a:31:2b:70:61:3d:d8:84:3a:a7:cb:62:c5:8e:d9:
                    7f:88:49:8c:cd:23:2b:1d:ba:47:44:f4:9e:bb:3a:
                    7c:ac:84:f5:80:38:73:79:51:5b:c6:ea:11:61:0e:
                    4c:e1:77:78:a9:b4:bf:bd:ac:a4:3b:8a:c4:4e:4f:
                    df:bc:dd:b9:4f:65:ab:0f:01:79:c9:0a:c7:ed:c7:
                    1e:96:98:2b:da:45:e2:1e:ed:cf:30:73:d9:5b:76:
                    70:97:95:48:36:c5:5f:2e:16:dd:da:48:ee:ac:9d:
                    94:74:0b:c7:8f:0d:cb:4f:f6:f9:74:14:ec:fd:5e:
                    33:7d:85:ca:c1:e8:8d:1c:ed:a9:bf:bc:8e:ab:05:
                    5f:be:57:bf:44:b2:be:13:ad:ad:9e:e8:b6:42:10:
                    de:8d:59:cf:91:12:3b:58:37:d0:4e:93:dd:74:36:
                    0f:cf:9a:a5:2e:8b:7e:90:80:71:54:05:7a:ea:76:
                    18:4c:65:40:c0:8b:56:a2:44:4a:4a:a2:76:9e:a6:
                    fe:6b:77:97:b6:4e:c8:22:8b:3b:99:34:ed:e5:88:
                    45:08:de:55:c0:eb:fc:19:9e:42:46:b8:69:ae:f8:
                    3f:64:76:ad:bb:20:14:14:58:40:64:00:3e:64:87:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6B:22:D9:39:CB:A4:3E:5A:8A:DC:7C:46:8B:F9:1E:C3:16:87:B4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9Gsi2TnLpD5aitx8Rov5HsMWh7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:2b:2d:03:75:14:1c:af:89:76:7d:ae:e0:57:24:04:a1:
         f3:4f:71:96:13:a4:6c:09:b3:3b:bd:9e:9a:77:13:f1:0d:d1:
         68:bb:ac:36:9f:2d:95:4e:35:d3:d1:6e:72:2d:e1:be:63:78:
         9f:bd:5d:10:63:3e:e5:7f:b4:f0:66:f3:f3:a1:4e:2e:16:68:
         5b:49:b6:41:22:12:3b:99:03:99:4a:d1:d1:78:d6:b0:03:bd:
         0d:72:0c:2b:b4:13:60:32:7a:33:62:a2:c7:02:e4:8a:88:ec:
         f3:32:8b:7f:01:a1:61:f0:7e:43:de:17:fc:a2:38:c1:7c:46:
         54:03:cf:ce:bc:a2:e9:f0:f1:ca:6d:28:a2:f5:ef:ce:d4:41:
         7c:6d:7e:ca:04:47:49:6b:6b:82:0c:4b:8d:01:ef:a0:fb:07:
         b7:6e:c9:7d:ce:c0:99:fa:8c:dd:54:fa:47:4d:cf:55:11:83:
         e1:e2:44:84:0b:96:46:e5:3e:cd:de:68:26:26:51:e2:d9:6c:
         a7:5e:16:3a:9a:e1:71:af:e6:68:a0:2c:4e:cb:d6:15:c4:36:
         75:f9:ec:d0:52:eb:de:20:2b:6c:00:a0:3f:58:0d:5a:fa:56:
         d5:6c:9c:06:c8:9f:76:3b:2f:4c:f1:a0:ac:48:d5:c3:65:8d:
         2d:1b:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-fra.rpki-client.org