Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YeXow6K-1z26iT__Kyn-vxMZGks.roa
File:                     YeXow6K-1z26iT__Kyn-vxMZGks.roa (raw, json)
Hash identifier:          Uud+eO+ay55O3+2LEKfxuBm9sc+7IsJU/8qIBExl0YI=
Subject key identifier:   61:E5:E8:C3:A2:BE:D7:3D:BA:89:3F:FF:2B:29:FE:BF:13:19:1A:4B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       3A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YeXow6K-1z26iT__Kyn-vxMZGks.roa
Signing time:             Tue 30 May 2023 16:02:12 +0000
ROA not before:           Tue 30 May 2023 16:02:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=61E5E8C3A2BED73DBA893FFF2B29FEBF13191A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:fc:73:d0:be:9a:cb:43:e5:39:52:25:5a:
                    32:bc:22:a9:e5:bb:cd:0f:dd:d5:06:57:89:6d:92:
                    b3:7e:0f:13:28:24:0e:18:2d:7f:20:bb:40:1b:c0:
                    c6:ce:0d:f9:0d:79:a3:90:17:01:fc:47:7b:cc:4b:
                    78:db:61:98:01:ec:a9:7c:e6:c5:bd:17:6f:b5:9d:
                    fc:45:fa:ce:cc:76:76:30:67:f0:ec:08:49:c5:3e:
                    ba:53:a3:e8:bc:58:b1:5f:f4:2a:53:e7:a8:57:c9:
                    ee:61:22:9e:46:eb:95:dd:09:95:a0:31:e9:ca:9d:
                    ee:ec:d1:25:2d:ee:1a:87:72:eb:5c:c5:f4:1d:94:
                    e4:1c:a0:eb:2e:2f:23:a1:a3:b4:39:0b:6d:f9:23:
                    6d:ad:24:0a:26:91:63:01:3c:cd:65:e6:90:d7:1e:
                    3a:31:7f:e2:55:36:b5:62:5b:4b:a4:eb:f3:9a:be:
                    cf:58:2a:a4:3c:4e:98:60:18:b2:29:4d:76:64:21:
                    a1:56:42:31:e5:b8:c7:0a:e1:3d:17:9b:a0:2e:5b:
                    e4:4b:60:68:32:08:a4:72:f2:a6:ac:44:83:06:59:
                    b6:fe:5d:59:1a:00:a4:a7:56:9b:a4:06:d7:03:ef:
                    ac:74:6a:75:11:a4:08:55:38:b5:07:8c:b4:56:37:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E5:E8:C3:A2:BE:D7:3D:BA:89:3F:FF:2B:29:FE:BF:13:19:1A:4B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YeXow6K-1z26iT__Kyn-vxMZGks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:ae:2f:3a:e1:92:14:8f:f1:c6:fb:da:97:d7:7d:a1:6e:
         d9:b7:2e:74:97:5e:6e:98:eb:ce:52:8d:9b:54:ed:1c:7d:50:
         73:2e:7e:fe:84:c6:31:26:3a:1e:30:dc:4b:cc:b4:b4:e8:50:
         97:62:64:dc:7d:d6:39:48:a9:d3:79:ee:e6:a6:55:78:77:c4:
         2c:33:06:c3:57:bb:2d:96:f7:a9:f2:42:98:3a:08:9b:d2:1b:
         b8:41:20:07:3a:0f:88:ca:d8:57:89:b0:e8:4a:1f:0a:5e:52:
         eb:04:6c:e8:0c:c4:b1:7c:86:bd:2b:20:3a:cd:ba:83:e0:b1:
         9b:07:d7:1d:48:d2:24:e9:bb:87:c6:f2:f6:73:f3:ed:4b:32:
         3e:6a:f9:fe:ed:36:d5:98:81:28:c1:82:d1:54:f4:38:d4:1a:
         13:35:d5:5a:32:aa:d1:bf:0b:74:cf:2a:30:74:de:a0:38:cc:
         6f:e3:a0:03:10:36:dc:39:bc:b2:82:51:12:67:00:98:1c:8e:
         f8:c5:de:8b:ff:ad:7c:57:a7:8b:6a:8f:a9:89:81:e9:63:f3:
         8d:fc:e4:cc:41:91:66:a9:ae:ff:76:2c:c1:11:af:f9:eb:9f:
         ad:79:e5:df:46:68:52:7d:f8:f2:4e:c9:e2:7a:a2:f6:56:4c:
         57:75:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org