Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AoDxRj5Oo7eFYB_obMxBv0R2nXY.roa
File:                     AoDxRj5Oo7eFYB_obMxBv0R2nXY.roa (raw, json)
Hash identifier:          WwBI/Xok0mmkSBqjJ1fcIfjyPOUqEvsU/3nBqEorBs8=
Subject key identifier:   02:80:F1:46:3E:4E:A3:B7:85:60:1F:E8:6C:CC:41:BF:44:76:9D:76
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       2D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AoDxRj5Oo7eFYB_obMxBv0R2nXY.roa
Signing time:             Tue 30 May 2023 16:02:08 +0000
ROA not before:           Tue 30 May 2023 16:02:08 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:08 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0280F1463E4EA3B785601FE86CCC41BF44769D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:08:6e:af:ad:3a:fb:ce:9b:73:65:5e:2c:
                    0b:33:39:e3:a0:b5:b7:a5:19:38:4f:54:61:35:fe:
                    4c:55:8f:80:04:6a:7d:23:16:9e:1b:2a:49:43:a9:
                    a0:33:d1:bf:c0:f7:6a:da:e5:b5:15:b7:dc:ea:f8:
                    d4:a3:17:5d:41:ec:cb:e5:1f:c1:77:0d:61:5a:01:
                    3c:c3:5b:d6:14:2b:69:d7:51:db:06:8d:06:04:34:
                    d1:0e:52:3e:74:1e:24:85:e7:75:5d:71:a5:b6:b1:
                    c4:af:53:f1:d7:c1:0d:9a:56:95:27:3f:8b:80:97:
                    1e:b8:5a:db:29:30:c1:e9:ea:d5:ed:e1:5b:4c:15:
                    09:dd:c7:5a:3c:9c:1e:4b:64:fe:cd:3a:b6:4d:c4:
                    ae:d0:77:fa:95:57:4f:83:59:af:ff:b2:2c:dc:d2:
                    72:eb:c1:69:a8:d3:88:2b:cc:54:f0:f8:e7:fe:7f:
                    7b:46:b9:a8:c5:f1:66:80:65:91:d1:e7:9a:8d:5a:
                    19:0e:29:7d:be:91:0e:5c:87:40:cb:85:45:45:ca:
                    db:b3:0e:20:fe:6b:d3:74:d0:9a:ce:05:ca:2e:04:
                    20:eb:32:c4:3d:34:f6:8c:d4:9e:e8:3a:bd:83:5d:
                    90:d5:f5:33:19:01:92:f4:dc:d8:d5:4a:54:de:de:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:F1:46:3E:4E:A3:B7:85:60:1F:E8:6C:CC:41:BF:44:76:9D:76
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AoDxRj5Oo7eFYB_obMxBv0R2nXY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:42:a0:ab:32:a9:fd:28:b0:3e:5d:9a:de:4e:27:ec:6b:
         da:a9:6c:e7:77:49:41:77:f6:7e:7b:38:77:19:8c:fc:55:9a:
         f7:4f:f2:c3:a9:09:46:4e:ef:bd:8d:0c:14:17:82:c1:6b:56:
         9f:7f:6c:5a:25:5b:20:e7:6c:19:37:86:3e:71:dd:b0:53:2e:
         cf:ac:32:1a:91:00:cf:49:c2:68:5a:51:8e:f1:41:8f:d5:3b:
         03:b0:da:3c:6b:40:c5:50:ed:7d:2b:79:cc:46:78:82:e1:07:
         60:62:3d:b8:cc:30:58:ee:fa:aa:e2:7c:11:39:6a:bd:22:12:
         6e:8d:32:e3:57:5f:ad:6d:f0:45:c3:c6:78:e0:d6:2c:67:d2:
         68:c3:87:ca:bc:11:18:d2:07:59:79:0e:60:c1:eb:f8:18:71:
         19:f5:07:7b:ad:c6:b0:ef:56:11:f4:11:14:7e:cd:5d:5e:d6:
         da:f2:c6:20:5b:ae:2e:d7:37:64:c6:19:ff:18:7f:96:03:3b:
         21:ff:40:9c:6c:87:a6:bf:4b:cf:02:b6:2f:17:eb:54:f8:ec:
         58:7b:fb:9e:fb:1d:b0:d9:b5:b9:21:2b:45:ef:bf:42:49:4b:
         4e:99:c4:97:5d:2c:7c:26:ad:22:a0:6c:95:9d:78:e7:57:3a:
         d0:68:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-fra.rpki-client.org