Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Xta4bEZyc5wVnGfYnMntL9s70yc.roa
File:                     Xta4bEZyc5wVnGfYnMntL9s70yc.roa (raw, json)
Hash identifier:          j+nFjUwFUQwK4Vmo2zCzZABV4s6hINPcfaVimse+4hU=
Subject key identifier:   5E:D6:B8:6C:46:72:73:9C:15:9C:67:D8:9C:C9:ED:2F:DB:3B:D3:27
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       80
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Xta4bEZyc5wVnGfYnMntL9s70yc.roa
Signing time:             Tue 30 May 2023 16:06:25 +0000
ROA not before:           Tue 30 May 2023 16:06:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6500::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5ED6B86C4672739C159C67D89CC9ED2FDB3BD327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:e2:6c:79:41:bc:6e:ab:3c:95:57:22:6e:
                    ab:da:a5:20:57:11:c5:24:f4:7d:5d:87:cb:c4:17:
                    3c:19:9b:86:d4:2e:43:0d:c7:13:8e:a4:fa:fa:fd:
                    c5:80:ba:b0:94:4b:30:e8:25:91:0d:5f:d0:04:11:
                    99:ce:da:92:39:54:b2:0f:00:dd:2d:09:e5:aa:50:
                    58:e0:18:0e:4d:41:71:40:2b:66:99:59:dc:45:cf:
                    67:1b:cc:dd:f2:0e:cc:0b:66:0b:2e:26:ba:69:a8:
                    72:21:bd:c9:9a:e0:9a:f7:67:04:e4:95:85:43:d2:
                    ae:51:6a:e2:2b:44:4f:12:bc:3f:d2:f2:f4:fe:cc:
                    db:b5:36:e8:1a:66:07:0f:8f:aa:21:ff:67:56:88:
                    53:ef:4c:1e:13:4f:b8:f6:14:11:6d:47:4f:28:88:
                    5b:9a:db:c9:f5:7d:12:f4:b8:01:dc:30:a1:cd:ee:
                    6e:b6:55:49:74:d4:22:df:2a:bf:ad:8f:d1:6a:c8:
                    a0:fa:00:eb:b4:9a:eb:91:72:cd:10:6b:e8:6d:54:
                    e0:7c:eb:dd:47:49:1e:3c:16:b0:14:e8:03:8f:1a:
                    09:b1:8e:5e:e1:fc:1d:62:72:b0:66:7f:37:e6:c3:
                    89:5b:f5:2c:50:86:56:4d:0a:8c:e4:29:93:02:1d:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D6:B8:6C:46:72:73:9C:15:9C:67:D8:9C:C9:ED:2F:DB:3B:D3:27
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Xta4bEZyc5wVnGfYnMntL9s70yc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:0f:04:65:3b:e6:0f:d3:b8:71:b1:36:4f:f8:94:de:fc:25:
         ee:e0:fe:e4:93:11:41:3e:1e:92:28:d9:7c:be:24:5f:6f:1a:
         ab:be:99:ee:c2:8b:e6:b9:7f:a6:55:74:bc:75:bc:69:51:87:
         22:29:f7:79:b3:bd:25:82:59:66:9b:71:5b:ea:be:0c:48:b9:
         e2:07:2c:de:21:2c:7e:66:7f:0e:b2:15:3a:15:c3:4e:ac:0c:
         f9:5a:c4:1f:87:9c:ee:d0:15:c0:73:0a:59:4a:8d:69:76:5c:
         ba:5e:09:3a:38:b9:75:67:60:df:d6:ad:7a:5d:04:9a:7e:5c:
         e3:1c:c2:38:d9:89:74:4a:40:47:fe:c6:6d:8a:14:df:5a:ca:
         d0:28:c5:a1:af:1b:67:8b:00:41:c1:63:a7:e1:30:1b:0a:48:
         1c:d2:df:19:fe:fb:6f:e5:ee:cc:22:d0:7c:9e:3c:30:bc:38:
         80:0d:ab:55:3c:39:72:61:c6:95:1f:c6:97:9d:24:2b:e8:75:
         4d:69:6c:aa:c0:5e:31:0f:54:cd:06:18:fc:bf:bb:0c:ea:3b:
         57:fb:53:ab:dc:03:97:8a:e4:70:54:42:6d:e8:8a:f7:45:bf:
         ac:1a:43:8f:9c:4a:9a:78:8c:9e:db:ee:92:d2:39:44:b3:1e:
         78:b8:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-fra.rpki-client.org