Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Qx6rDu6zd8ePz-eE_3BGjw5uFy4.roa
File:                     Qx6rDu6zd8ePz-eE_3BGjw5uFy4.roa (raw, json)
Hash identifier:          Z6tsfjjwxDnniwu4jMzgRVXkU+1P5eYfl10RkyktpF8=
Subject key identifier:   43:1E:AB:0E:EE:B3:77:C7:8F:CF:E7:84:FF:70:46:8F:0E:6E:17:2E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       016B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Qx6rDu6zd8ePz-eE_3BGjw5uFy4.roa
Signing time:             Tue 30 May 2023 17:32:36 +0000
ROA not before:           Tue 30 May 2023 17:32:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=431EAB0EEEB377C78FCFE784FF70468F0E6E172E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:8a:37:6b:d7:ee:ec:08:6a:ea:6b:e6:bf:
                    9c:43:a5:ac:b8:e2:a5:78:01:88:c1:a6:a1:94:ba:
                    f3:4a:f0:4f:ce:92:62:71:da:fa:fe:35:b0:24:37:
                    f5:95:87:ba:a2:a6:f9:df:8f:2f:89:53:cc:a9:1d:
                    17:45:da:bf:f5:eb:1c:fa:fd:f7:7c:f2:6d:c9:ad:
                    98:99:c4:84:d9:b1:3d:ef:b6:2c:68:bb:a1:ec:f9:
                    3c:7a:e4:dd:5a:63:62:88:55:ae:41:fd:54:2a:e5:
                    04:c5:d6:5f:32:aa:66:64:df:5a:12:81:03:86:0e:
                    65:42:43:fd:92:f2:30:ec:aa:96:b4:08:e4:92:16:
                    a5:98:1b:74:2b:7d:b3:13:ad:4f:ba:92:8e:c9:2d:
                    e7:f9:e9:06:ed:f3:af:ac:02:6f:06:e2:9e:54:0a:
                    df:65:d9:d1:e9:77:f5:69:9b:fa:c6:6d:94:68:4f:
                    85:0d:72:c7:67:00:fd:ab:7a:c7:c5:b9:d2:e8:92:
                    7a:1f:92:13:79:3a:dc:b3:b4:b0:69:fa:94:f3:bc:
                    4e:ee:60:00:15:be:4b:1e:c2:c1:b6:05:23:a3:fa:
                    42:67:f3:be:dc:14:e4:dc:6a:1b:29:2e:51:af:65:
                    bd:4d:99:19:24:f0:b1:44:e8:67:3b:97:41:40:6b:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1E:AB:0E:EE:B3:77:C7:8F:CF:E7:84:FF:70:46:8F:0E:6E:17:2E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Qx6rDu6zd8ePz-eE_3BGjw5uFy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:68:cc:62:5d:9d:e5:88:77:79:1b:08:11:07:5e:79:93:7f:
         a7:ff:ad:66:23:5a:25:62:a2:4c:e6:e6:0f:95:3c:f8:f4:0a:
         84:af:58:a1:5a:87:95:c6:4a:5e:2f:45:7b:62:3b:0c:61:89:
         a1:0c:9b:44:9a:7f:f1:8f:4e:5c:48:1c:63:c8:f0:a1:b0:72:
         0b:64:db:bc:92:61:ea:75:2c:ed:6d:0f:ba:87:45:08:74:1b:
         21:1c:b7:3b:45:da:79:ce:e2:c4:3c:e6:b8:79:80:9c:15:45:
         22:cb:b5:34:64:94:c0:c6:31:00:5e:b7:9f:19:3e:28:f6:a9:
         ea:98:88:96:cf:47:65:9e:be:47:bb:03:29:18:dd:de:32:92:
         97:61:43:6f:ac:6f:6f:5c:7a:bf:10:25:fa:4d:72:79:eb:34:
         19:bf:95:78:35:29:07:33:b4:f3:3d:0f:03:49:12:f1:f1:8e:
         cd:38:ac:e0:27:34:5b:fe:98:37:35:82:c1:28:f5:aa:ca:e0:
         d5:85:99:c9:ee:6b:1b:90:6c:ad:2d:2b:e7:4f:5e:4e:bd:ce:
         d8:d4:f8:75:16:f6:cc:51:e6:29:be:95:30:7c:f8:68:88:79:
         39:9a:9f:e0:cb:37:db:b7:ee:6a:ff:1e:11:34:39:bf:3a:5b:
         5c:20:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:29 2024 by rpki-client on console-fra.rpki-client.org