Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZP659fD_0nNRX9gmknt-W0wgYfk.roa
File:                     ZP659fD_0nNRX9gmknt-W0wgYfk.roa (raw, json)
Hash identifier:          DxmXLrnhAZJR9MgZTFq2QgvafLtQa94xhZ2eH9UBPU0=
Subject key identifier:   64:FE:B9:F5:F0:FF:D2:73:51:5F:D8:26:92:7B:7E:5B:4C:20:61:F9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       024C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZP659fD_0nNRX9gmknt-W0wgYfk.roa
Signing time:             Tue 06 Jun 2023 16:29:17 +0000
ROA not before:           Tue 06 Jun 2023 16:29:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:800::/38 maxlen: 38

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  6 16:29:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=64FEB9F5F0FFD273515FD826927B7E5B4C2061F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e0:fc:e5:c5:dd:2b:df:73:a9:5f:fe:be:0b:
                    11:7b:2d:56:fd:4f:a8:0a:b1:21:0d:e3:68:ad:57:
                    9a:18:05:c9:91:31:84:ae:48:da:b0:91:29:18:44:
                    f6:1d:47:b1:26:53:46:d8:7d:a5:a1:b7:d2:a4:5d:
                    53:69:31:db:3f:ee:df:87:95:80:29:55:18:a8:ce:
                    2b:83:3d:86:46:b8:e9:fb:03:a2:ce:66:7b:fc:fa:
                    d8:06:e5:63:96:ca:a5:ff:12:78:30:32:e8:88:66:
                    7a:0c:39:1b:2d:c4:05:82:9f:a1:88:c7:aa:68:c0:
                    cc:1a:ac:66:2f:80:1e:92:21:df:ea:16:01:ea:cf:
                    08:47:eb:21:a6:be:1d:0f:86:6a:aa:43:3c:3e:22:
                    5e:28:2f:8e:8e:45:9a:e9:9e:3b:5d:81:e6:46:53:
                    f2:d9:79:8a:27:59:2e:27:44:d4:69:0f:aa:c8:c2:
                    2f:39:8e:8d:07:85:8f:c6:82:6b:83:63:18:a8:55:
                    b7:d6:8f:cc:60:ab:0f:16:9f:1c:49:f1:09:67:da:
                    e3:f2:6c:57:e6:05:50:bb:c0:0d:de:87:dd:25:90:
                    e6:83:e9:cf:75:f3:5a:d8:d1:2c:15:db:0e:ff:e5:
                    6d:26:69:9b:cf:00:58:b3:e2:ac:a9:28:fa:c1:ec:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FE:B9:F5:F0:FF:D2:73:51:5F:D8:26:92:7B:7E:5B:4C:20:61:F9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZP659fD_0nNRX9gmknt-W0wgYfk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         c6:3a:b0:1d:fa:94:af:86:ea:de:06:d0:ae:22:9b:09:16:76:
         12:32:e0:9f:cf:09:5c:c0:c7:e0:cc:a5:9c:94:52:71:88:e5:
         2c:bf:6b:26:1d:97:15:bf:a7:49:ab:e6:4a:5f:f8:c9:76:60:
         3b:b5:dd:a1:b1:75:f6:c9:d0:73:97:e9:6f:1d:fa:52:78:8e:
         35:77:f8:1c:75:f9:b2:7a:23:bf:03:32:ce:a9:73:dd:e4:fb:
         6f:d4:de:14:e4:a8:48:2a:45:6d:c4:bb:ea:52:d2:b1:2d:d7:
         41:40:6c:18:c1:e4:d4:51:2f:a2:8e:d7:9f:eb:cb:40:fd:04:
         2f:78:00:d0:53:ab:ba:31:72:7d:f9:a8:4a:13:f7:a8:04:b0:
         0c:24:bb:29:9e:82:99:a2:4d:8d:a4:9c:1f:16:8b:a9:00:b3:
         77:c6:8b:cd:53:6a:86:4d:3d:b3:46:9d:8c:31:03:ac:2c:44:
         3a:34:f7:b9:36:54:6e:e9:98:87:98:3b:a4:05:0d:d2:32:ad:
         14:6a:ad:0b:41:bd:ed:62:69:d6:23:84:be:6c:0f:dd:52:87:
         3d:e8:47:72:a8:d4:05:38:c4:7f:f0:8f:f4:02:d0:c7:f9:90:
         90:82:a5:d0:a3:90:da:50:c4:33:06:00:36:51:67:08:88:ca:
         f0:92:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org