Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NWxOddwqxPDzU59V72U9yPfi0h0.roa
File:                     NWxOddwqxPDzU59V72U9yPfi0h0.roa (raw, json)
Hash identifier:          sjXdLq6VR87Tet1J7VeENOrvIqYM3dj9OdVRw6pzJwA=
Subject key identifier:   35:6C:4E:75:DC:2A:C4:F0:F3:53:9F:55:EF:65:3D:C8:F7:E2:D2:1D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       AC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NWxOddwqxPDzU59V72U9yPfi0h0.roa
Signing time:             Tue 30 May 2023 16:08:23 +0000
ROA not before:           Tue 30 May 2023 16:08:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=356C4E75DC2AC4F0F3539F55EF653DC8F7E2D21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cb:8a:e8:11:62:65:0a:ad:00:3b:cf:5d:bb:
                    85:3a:a1:35:5d:ea:84:3d:70:b4:76:e5:9c:d1:c7:
                    7c:70:ba:81:45:06:45:a3:05:cb:85:be:2f:fe:d1:
                    e6:7d:83:8f:ec:46:7f:50:b2:21:b4:fd:9a:3f:cd:
                    3f:61:8c:8e:70:59:67:d6:28:62:3c:e4:32:6f:e1:
                    e0:4b:5d:6f:c3:be:2b:03:02:e9:2d:ba:8b:20:75:
                    20:6b:1f:e7:3d:08:8c:eb:28:ed:3f:5d:17:d9:20:
                    bf:2d:89:c0:53:60:f0:4d:0d:ba:76:1f:fd:f2:26:
                    45:f3:73:d9:89:f2:4c:5b:21:52:c1:5b:2e:7c:e9:
                    71:71:77:4b:ca:4e:36:7d:a6:f9:ed:cf:10:b8:67:
                    fc:e5:b2:8f:b6:58:ee:0d:fb:e2:96:b7:c2:ed:fd:
                    10:32:60:0c:40:79:d3:1d:4e:01:93:03:20:39:60:
                    5a:cb:61:df:ee:86:0f:8c:67:fa:d6:75:92:c7:38:
                    c5:de:8e:3a:77:61:74:a8:ca:38:2d:87:d8:09:2b:
                    77:c3:0f:12:16:98:32:a9:f4:e4:b2:20:99:fb:b7:
                    95:b9:4f:1a:ea:6a:7c:7c:18:29:bf:84:f8:59:d9:
                    bd:37:99:21:a8:1d:50:14:e4:55:60:9f:87:67:7d:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6C:4E:75:DC:2A:C4:F0:F3:53:9F:55:EF:65:3D:C8:F7:E2:D2:1D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NWxOddwqxPDzU59V72U9yPfi0h0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:ad:60:e6:98:26:e0:f2:38:b1:4c:c9:61:ea:70:d5:f3:
         f5:4b:1a:14:a3:e2:6d:ce:63:eb:0d:69:47:26:a5:89:c2:80:
         10:f2:3c:ca:6f:3b:b6:cc:af:d8:9b:bc:a3:b2:1c:cd:f2:3d:
         93:6f:0c:e1:f3:63:31:a7:92:dc:59:83:57:cc:80:3c:f1:ca:
         bc:60:d4:cf:4f:aa:56:3a:c7:a8:59:2e:d7:3f:95:00:6c:dc:
         06:c9:6a:86:9d:08:f7:78:aa:66:20:c9:90:ad:61:3b:f3:1d:
         80:e8:a7:5f:37:3f:5e:e5:61:25:5e:e7:20:8e:ad:90:0c:5c:
         be:2b:b9:66:8d:8a:bf:07:88:6a:9d:a2:b2:2e:21:06:e5:0e:
         d4:a3:c9:13:a6:7d:d4:ef:07:d9:85:94:7e:0c:2b:f2:31:ef:
         01:c2:6b:5a:9d:d8:4b:fb:c7:ed:a8:a9:d0:87:c0:66:33:5b:
         c4:49:34:7d:ef:23:54:f7:ad:12:f1:32:71:6e:d5:af:99:83:
         a5:04:43:8a:1c:e5:d8:31:1f:15:6b:2c:6b:06:d6:de:a6:66:
         a2:7d:a0:77:61:c2:7e:ea:36:23:ee:f0:29:6f:da:31:fe:2c:
         9f:a1:42:08:55:ea:e6:fe:7b:33:60:ef:c8:28:78:ef:7e:dc:
         cb:df:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-fra.rpki-client.org