Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/APpHZDQfxWe55LoZ-c_RtyBeAv0.roa
File:                     APpHZDQfxWe55LoZ-c_RtyBeAv0.roa (raw, json)
Hash identifier:          YCwo02tA+nKNFpAMiE7x2AOUlVEEvns5K+Fi68ymFPQ=
Subject key identifier:   00:FA:47:64:34:1F:C5:67:B9:E4:BA:19:F9:CF:D1:B7:20:5E:02:FD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0217
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/APpHZDQfxWe55LoZ-c_RtyBeAv0.roa
Signing time:             Tue 30 May 2023 17:40:29 +0000
ROA not before:           Tue 30 May 2023 17:40:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b200::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=00FA4764341FC567B9E4BA19F9CFD1B7205E02FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:5d:e1:ef:c3:35:70:4a:13:14:3c:0a:6d:
                    a6:56:bb:24:62:ce:55:fd:ea:d4:4a:0f:00:1f:e5:
                    ae:3f:e9:c7:17:63:44:a2:32:36:b5:5a:7e:12:79:
                    25:32:7b:cb:67:a1:0f:a6:a6:a1:f0:61:b9:9e:f8:
                    56:67:d4:f6:94:b0:cd:3e:57:48:fd:aa:b4:92:2e:
                    3c:83:74:2e:b6:47:d8:23:c9:62:c7:0c:01:2a:3f:
                    eb:7f:06:01:69:e2:b4:97:eb:74:ec:c8:59:92:92:
                    93:5c:de:9c:d4:75:72:38:20:a7:c6:be:5d:4a:15:
                    d1:37:f3:60:43:cc:96:07:41:c7:e6:f1:ec:33:b3:
                    89:72:08:8f:8c:ee:e5:b4:72:21:dd:79:8c:3c:ae:
                    7c:cf:c2:62:c6:54:16:bb:fd:13:e8:2a:91:e0:aa:
                    71:59:c4:59:70:86:68:15:87:e2:aa:fc:95:59:f0:
                    66:d2:56:ce:1c:b3:40:f2:59:0c:3e:dd:cb:5c:86:
                    3f:f5:98:4d:4d:43:5b:75:31:dc:9c:e3:99:29:60:
                    9c:a0:d3:12:28:41:e7:b3:2a:6d:48:25:ef:cd:a8:
                    7b:75:92:8d:4c:42:7a:dd:e2:e9:ae:e7:fe:b4:f9:
                    e6:4b:af:ae:5f:bc:d1:36:0f:ba:8c:e6:fd:4e:21:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FA:47:64:34:1F:C5:67:B9:E4:BA:19:F9:CF:D1:B7:20:5E:02:FD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/APpHZDQfxWe55LoZ-c_RtyBeAv0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b200::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:39:77:13:a1:94:f0:8f:94:85:86:ae:db:fd:a2:ba:3e:ac:
         4d:b6:68:fb:dd:0b:ee:61:99:11:1a:d1:e6:a6:f4:e5:02:07:
         b4:f3:e4:66:3e:19:4c:32:27:2b:b0:30:3b:b2:48:e2:22:a3:
         42:00:b3:66:48:dc:12:74:ed:2b:b0:f0:35:49:db:b4:16:7f:
         6c:30:c9:94:98:f2:a7:68:a5:cf:c7:fe:3e:c5:d6:20:66:06:
         14:69:69:3e:9c:8b:8d:53:d2:6f:33:91:73:8a:61:e7:c3:36:
         55:35:7c:d5:9d:b1:8c:79:8a:8c:67:ba:dd:d5:3b:a4:f8:87:
         6d:06:36:21:02:a4:b0:47:f3:2c:2f:fe:99:5c:5a:1f:b9:4c:
         4c:d5:aa:4d:89:e9:8f:c8:4f:d0:f1:9f:52:42:cb:66:ed:25:
         cc:aa:9a:7a:ed:ca:1e:f2:a3:97:1f:14:f8:96:39:77:9d:e1:
         f8:19:fd:3d:24:94:97:dc:3a:6f:7c:52:f1:3e:6e:58:e0:14:
         c4:7e:86:1d:64:9c:40:f4:c9:5c:04:5f:8f:a3:57:0a:40:bf:
         6d:26:02:7d:5d:5f:03:ec:b8:bc:d6:09:f5:7d:fb:32:ed:5b:
         25:44:18:81:bb:90:07:fa:50:d6:f2:f3:d7:5d:e8:80:32:03:
         77:ed:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:29 2024 by rpki-client on console-fra.rpki-client.org