Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FQos4xxeLXE-LmXY2O7ogM1hBBo.roa
File:                     FQos4xxeLXE-LmXY2O7ogM1hBBo.roa (raw, json)
Hash identifier:          tp2xjKSs+CONqOcie32zUHQPkJ+o5VGNk/RqKxw123I=
Subject key identifier:   15:0A:2C:E3:1C:5E:2D:71:3E:2E:65:D8:D8:EE:E8:80:CD:61:04:1A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0198
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FQos4xxeLXE-LmXY2O7ogM1hBBo.roa
Signing time:             Tue 30 May 2023 17:34:32 +0000
ROA not before:           Tue 30 May 2023 17:34:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=150A2CE31C5E2D713E2E65D8D8EEE880CD61041A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:86:4f:55:96:8a:b9:d3:e4:c4:73:60:ca:
                    39:9a:46:15:0a:78:be:8b:f3:21:d1:c2:70:44:82:
                    4f:b7:04:79:95:06:8e:67:8d:95:8a:20:65:b9:56:
                    a5:4a:7c:06:4a:24:29:96:6b:08:8b:03:b4:a2:dc:
                    57:cd:29:ff:5f:db:50:4d:61:6d:0b:d8:2e:3a:42:
                    1b:dc:e5:6d:5d:37:87:94:dd:40:11:5a:31:a2:a0:
                    24:1c:f0:7b:6b:b9:ec:8c:25:64:28:5c:a0:6e:cb:
                    a6:08:98:61:42:3c:1c:1a:50:cd:20:47:97:0a:07:
                    ee:5f:c5:f1:e5:7f:fe:b4:1a:5e:c4:6c:7d:63:a8:
                    78:55:71:9c:77:f5:46:9b:26:61:17:89:01:a2:b0:
                    ee:a7:72:f8:da:eb:c1:0f:4b:07:df:fe:13:29:25:
                    31:94:68:fb:27:6a:df:cf:9a:20:40:ba:d2:74:7f:
                    f3:7b:fa:58:e8:e0:2d:13:21:e9:ad:20:49:7e:49:
                    e7:96:97:be:d6:42:3d:a3:e9:38:0f:82:89:f2:bc:
                    fe:22:b6:84:a0:00:1e:82:71:1b:ef:96:4e:f7:70:
                    d6:3a:e8:d8:2d:67:07:80:52:38:15:10:35:bc:10:
                    ff:e5:95:75:dc:be:d7:0e:34:1f:14:8c:1a:cd:4f:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:2C:E3:1C:5E:2D:71:3E:2E:65:D8:D8:EE:E8:80:CD:61:04:1A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FQos4xxeLXE-LmXY2O7ogM1hBBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:8d:02:09:1e:c0:18:a0:02:8c:ba:2f:96:f3:92:51:dd:
         2b:ea:25:b1:8d:0f:c2:56:77:80:6d:10:2a:91:04:e6:7f:39:
         02:06:c8:75:6a:f6:32:9f:fd:a0:f7:58:f5:fa:70:6f:32:f0:
         d4:48:b7:e8:41:08:c4:b8:26:57:74:48:cf:77:0e:45:f7:38:
         97:fa:07:78:6e:aa:60:d6:ac:9a:73:f3:8a:1a:a0:52:8a:e5:
         f0:15:66:3c:27:4a:55:8c:93:ee:09:69:4a:02:aa:2c:20:45:
         79:9b:e8:03:e0:49:48:65:42:79:59:37:ff:3e:d8:b8:8a:72:
         c8:06:fe:02:12:bf:e6:7b:03:a5:71:80:ad:a3:e5:20:9b:47:
         53:1d:91:e5:4a:87:af:4f:ca:64:60:ba:fc:1d:6b:f6:4c:1e:
         40:52:01:83:cb:d5:0a:c9:93:30:84:d3:c4:94:58:e9:4d:f9:
         7a:2a:99:d1:9d:ef:6b:eb:a6:d6:c1:51:07:72:40:e5:7c:db:
         f4:34:46:41:a4:9b:59:0a:5e:c7:32:3f:88:0c:80:81:c0:2f:
         01:99:a1:9b:c1:0a:67:80:7b:6a:6c:74:f9:9f:c9:4e:79:ed:
         af:e1:c3:19:b3:ed:4e:f7:0a:f0:b0:c8:dd:22:c9:c0:76:a7:
         80:73:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:29 2024 by rpki-client on console-fra.rpki-client.org