Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USjIS0Jid1zubt1vEHrgFaJK-2s.roa
File:                     USjIS0Jid1zubt1vEHrgFaJK-2s.roa (raw, json)
Hash identifier:          Z4F3Tli5eWtmrIOwYbQUF/D5lVs+yR0lqIgBnUuYOLs=
Subject key identifier:   51:28:C8:4B:42:62:77:5C:EE:6E:DD:6F:10:7A:E0:15:A2:4A:FB:6B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       4F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USjIS0Jid1zubt1vEHrgFaJK-2s.roa
Signing time:             Tue 30 May 2023 16:04:20 +0000
ROA not before:           Tue 30 May 2023 16:04:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5128C84B4262775CEE6EDD6F107AE015A24AFB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:9b:78:f4:22:70:9f:d7:9f:19:da:e5:47:
                    34:a3:09:54:20:51:02:55:7b:d0:61:d7:5b:66:72:
                    34:21:3a:47:67:05:a9:e5:80:0d:1e:3c:2b:3c:1f:
                    08:a4:1f:06:7d:57:63:fd:6c:19:58:0b:a7:99:5b:
                    b3:51:ac:6c:49:09:4e:ac:16:c3:86:de:d6:39:00:
                    ed:77:ab:86:31:bb:dc:ef:6d:ef:68:de:fd:86:aa:
                    44:a9:91:0b:45:2e:21:dc:71:6f:4a:a2:56:fe:cf:
                    2c:7e:87:96:34:b8:b2:f0:df:30:d7:1c:b3:fe:a8:
                    cd:7e:b8:e6:b9:ba:6e:e7:be:8a:e8:e5:9f:44:8a:
                    77:c9:51:a9:cf:1e:a4:a4:11:b5:8d:7d:91:1d:47:
                    3a:ee:db:6b:10:05:14:04:1d:19:3f:eb:02:0f:76:
                    c5:fe:1a:f1:0e:44:d2:05:63:42:a1:54:18:d2:f4:
                    7f:10:18:71:12:2d:f2:08:2a:e8:78:ac:a9:94:15:
                    1e:ec:1b:00:68:39:64:77:78:26:5c:da:f7:42:12:
                    3d:b3:0e:f7:fe:c7:56:4a:ff:e5:75:e3:12:2c:81:
                    bd:61:62:4d:89:42:0e:f4:f5:03:c1:58:4a:38:f4:
                    33:e6:d7:9f:32:04:89:5f:a8:50:eb:93:b1:37:bb:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:28:C8:4B:42:62:77:5C:EE:6E:DD:6F:10:7A:E0:15:A2:4A:FB:6B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USjIS0Jid1zubt1vEHrgFaJK-2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:77:5c:b1:a6:52:9d:64:46:a2:a2:a5:b0:c4:72:a7:2e:
         f7:d7:18:25:41:76:1c:39:28:ea:0f:db:c7:41:1c:d3:a2:9e:
         f4:bf:b2:e6:6a:0d:05:37:41:58:2a:85:33:4a:9a:07:d7:89:
         14:c8:59:e7:22:44:f4:7c:3a:ec:85:58:67:92:58:de:4e:8d:
         ed:59:cc:bb:b2:cc:f2:35:59:bf:83:1d:8c:5a:e2:73:76:71:
         51:7b:31:1a:b2:ca:01:e5:b4:b5:4f:3d:a3:43:83:ea:ce:5b:
         db:a0:9b:67:7f:91:d5:e3:3d:d6:f9:76:dc:ad:05:81:7a:49:
         60:e2:43:c2:4f:e2:5a:21:f6:fe:37:6f:9e:f7:9a:05:d7:32:
         4a:3a:30:e0:22:ee:e3:47:9e:c8:60:af:84:a5:f2:f9:32:92:
         1b:b3:55:20:94:b9:5c:cd:48:c0:fa:3e:7c:51:65:2d:22:d2:
         c7:7d:d2:09:a2:5b:bc:56:2c:39:9f:06:89:2f:5c:25:78:2d:
         bb:bf:84:e4:ab:41:b6:fe:fd:1b:76:13:58:ce:36:a6:d9:9f:
         51:c5:44:18:00:2c:b2:9c:16:67:13:11:d8:c1:0c:ac:de:06:
         b7:95:ba:2a:32:a8:80:3c:74:40:b9:10:44:df:4b:86:b9:c8:
         7a:e1:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org