Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UKOVIw0Pz4mbWh6KUNnVk9p9rF8.roa
File:                     UKOVIw0Pz4mbWh6KUNnVk9p9rF8.roa (raw, json)
Hash identifier:          SXu/0sLQ7IQ8nZH1T7ML4DObRK+ew7czHKpAzHHoEsk=
Subject key identifier:   50:A3:95:23:0D:0F:CF:89:9B:5A:1E:8A:50:D9:D5:93:DA:7D:AC:5F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0232
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UKOVIw0Pz4mbWh6KUNnVk9p9rF8.roa
Signing time:             Tue 30 May 2023 17:42:25 +0000
ROA not before:           Tue 30 May 2023 17:42:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ee00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=50A395230D0FCF899B5A1E8A50D9D593DA7DAC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:d2:d5:fb:ce:85:92:ea:28:a8:ba:6b:2e:
                    bf:e3:df:ac:38:3c:ba:bd:fa:56:88:47:76:33:c5:
                    38:a3:23:94:05:91:3a:1d:9a:b5:8f:1f:b2:73:a0:
                    c6:49:b9:e7:33:a5:4a:df:7f:74:58:9c:1e:e5:c7:
                    3d:df:58:1f:e0:ab:cb:43:6e:43:c1:bd:94:33:2a:
                    2d:6d:95:5a:25:63:8d:66:73:c3:d8:62:ca:3e:85:
                    bf:d5:61:48:9e:fc:fa:4a:9e:74:fd:f0:95:d9:7c:
                    c7:58:fe:91:5d:dc:b3:1f:77:b1:a8:b7:31:76:cd:
                    27:07:92:17:53:1a:5b:c7:04:22:37:92:f7:ce:9d:
                    c5:79:cf:2b:ed:0e:52:18:9f:c2:f4:dd:42:09:80:
                    f5:c9:fd:e8:f1:52:6f:c2:95:be:0c:8d:cd:0c:af:
                    74:43:8b:07:5b:45:aa:eb:b1:8a:c2:e1:68:52:ad:
                    17:94:cd:e4:0a:ae:ea:98:47:81:33:dc:7b:d9:d7:
                    90:1a:2a:95:51:57:a3:09:51:4f:97:d6:e8:85:a1:
                    23:c6:47:90:ac:29:2f:39:4c:e3:80:db:21:d0:14:
                    91:db:02:6b:a9:b8:72:9a:02:9f:8d:8e:ff:ce:0d:
                    99:49:30:79:ce:8e:69:bb:83:3e:f0:69:2b:fa:a2:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A3:95:23:0D:0F:CF:89:9B:5A:1E:8A:50:D9:D5:93:DA:7D:AC:5F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UKOVIw0Pz4mbWh6KUNnVk9p9rF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:56:3e:08:d3:d8:3a:a8:ac:5a:57:32:d8:3f:b9:21:8b:
         56:3b:7e:d2:2c:c2:f6:e3:25:78:0a:b1:a8:1d:7f:76:0a:74:
         3b:7c:72:25:94:ec:8a:fa:31:9b:34:c9:0c:e7:b8:53:cd:08:
         c2:c0:10:2d:d9:da:b8:29:0e:14:d8:df:20:6f:a1:fe:4b:a5:
         21:9f:5b:be:6f:98:50:b9:8c:9f:37:fc:ab:b6:92:53:58:2b:
         25:e2:f5:3f:2a:a0:cd:f4:04:d8:24:74:51:69:55:29:29:6c:
         e0:b1:2d:38:cc:dc:f0:87:c3:42:e7:0d:84:4e:70:fa:b3:53:
         62:1e:72:2d:79:38:59:13:bf:32:55:f3:2d:2d:f9:3d:68:a0:
         8d:05:24:89:85:a5:e3:d2:c0:ab:c3:b3:aa:eb:10:df:8e:d3:
         d4:91:e6:f8:fa:ac:e1:34:a2:6c:56:ad:a8:0e:29:5b:8d:5d:
         2f:d9:f4:d3:d8:8d:74:3c:d6:e4:d0:48:d3:84:93:eb:9b:db:
         46:3e:b9:32:03:91:a5:be:71:1d:7c:31:a5:ea:c0:e0:68:0f:
         51:df:33:45:be:9f:d9:87:af:ce:cb:e0:14:5f:9a:2c:81:33:
         8a:a6:3b:cd:27:a4:9c:3d:f1:07:d9:af:1d:0e:79:41:d2:34:
         f8:e1:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org