Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ADSPLe6OlQLN1aFb2rJ9b9JFGqE.roa
File:                     ADSPLe6OlQLN1aFb2rJ9b9JFGqE.roa (raw, json)
Hash identifier:          Ny7cLCNKiDKDnfAdeWn6e0RKJUckoSNAmwh6jLyzNss=
Subject key identifier:   00:34:8F:2D:EE:8E:95:02:CD:D5:A1:5B:DA:B2:7D:6F:D2:45:1A:A1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       016A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ADSPLe6OlQLN1aFb2rJ9b9JFGqE.roa
Signing time:             Tue 30 May 2023 17:32:35 +0000
ROA not before:           Tue 30 May 2023 17:32:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=00348F2DEE8E9502CDD5A15BDAB27D6FD2451AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:5f:c0:97:8f:c2:ea:95:9c:fe:6a:9e:a9:
                    1a:01:b6:68:ab:31:71:8a:45:d1:bc:7c:e5:53:da:
                    73:6e:a4:c6:de:75:43:8b:e7:40:fc:5d:2b:91:f9:
                    4c:b6:c1:4c:54:12:73:58:90:23:9c:a2:03:3c:69:
                    2b:1a:62:20:84:b6:62:cf:f3:70:70:43:16:23:6b:
                    f5:f5:a0:bd:3d:d6:5f:9f:8e:60:f4:38:d0:e5:c2:
                    61:9a:48:3c:c9:66:fa:f7:44:a0:a9:99:8a:6c:8e:
                    a7:ec:3b:ca:fc:f1:5e:c7:13:b8:72:b8:3e:04:90:
                    3d:e1:75:9e:62:a8:dd:27:48:c2:c7:7a:93:e8:92:
                    b5:d7:c0:5c:54:76:dd:33:16:48:39:f4:63:7c:16:
                    1f:6a:b4:48:e3:0f:2c:47:1e:e8:c4:90:b0:ac:63:
                    a0:7d:76:c1:da:0b:f0:56:b2:31:78:87:47:5b:e0:
                    0a:4c:c3:13:84:fe:ee:32:17:51:f1:cb:6b:1c:06:
                    9d:77:8f:3a:e2:a8:16:2f:42:29:3f:ea:93:e8:15:
                    b2:14:68:18:1d:3d:86:be:b4:a0:73:87:11:ad:2d:
                    e7:3b:94:4d:ab:03:d7:e1:e5:57:1c:4a:40:cd:1d:
                    25:e6:d2:aa:b0:2b:d9:f9:ab:75:0a:29:e0:fa:01:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:34:8F:2D:EE:8E:95:02:CD:D5:A1:5B:DA:B2:7D:6F:D2:45:1A:A1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ADSPLe6OlQLN1aFb2rJ9b9JFGqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:1a:ce:ee:d2:0b:03:8a:b3:5c:06:cf:92:9c:05:c1:85:84:
         8d:b2:b9:08:21:cc:b3:42:f9:5d:60:d7:d6:62:c7:b9:2a:cd:
         7b:cb:7a:14:a7:a0:b0:5a:1e:7f:82:2d:9c:de:e5:f4:d0:c2:
         e2:0e:a0:31:20:7e:d9:99:ba:7d:47:10:33:02:9d:27:a9:24:
         2a:fe:bf:eb:ec:c4:53:80:ae:cf:e2:94:e3:14:d4:a3:13:77:
         8f:23:1e:ec:5a:f9:73:72:c6:f0:a7:59:b7:c6:9b:28:21:03:
         87:f2:c6:30:48:a7:fd:a8:8b:3f:1d:88:bd:16:0a:0d:47:6e:
         5b:10:c0:f6:dd:57:6f:9c:04:18:41:87:33:d6:f6:56:bf:8e:
         cd:06:02:4f:d3:c2:f4:d9:81:6d:10:da:a6:ee:c1:3a:d4:45:
         fb:f8:ba:54:cd:56:92:f9:85:fb:a7:be:eb:67:93:b2:76:a5:
         a8:3a:17:91:da:e3:46:92:f1:ca:0d:f7:92:da:b8:8e:4f:a5:
         f4:da:18:a0:d4:32:0e:9e:80:85:9e:a1:81:6e:f3:5a:00:e6:
         52:09:f7:44:23:0c:78:01:69:88:d8:98:99:df:f6:e1:24:c2:
         1e:da:9f:dc:3e:fa:07:bb:82:dc:df:ab:67:94:d2:de:98:34:
         c5:6e:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:29 2024 by rpki-client on console-fra.rpki-client.org