Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZljurVcLnhYwXsdP-bhGIG2_hsA.roa
File:                     ZljurVcLnhYwXsdP-bhGIG2_hsA.roa (raw, json)
Hash identifier:          OLh0gbP1NCO1O7CgVSOYLR9Hcfkrzvvl9BjjTrITOhA=
Subject key identifier:   66:58:EE:AD:57:0B:9E:16:30:5E:C7:4F:F9:B8:46:20:6D:BF:86:C0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       23
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZljurVcLnhYwXsdP-bhGIG2_hsA.roa
Signing time:             Tue 30 May 2023 16:02:05 +0000
ROA not before:           Tue 30 May 2023 16:02:05 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6900::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:05 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6658EEAD570B9E16305EC74FF9B846206DBF86C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:e8:62:c0:78:c2:39:27:8b:3f:cf:f2:38:
                    56:29:4e:cf:01:49:4e:7a:35:15:c8:4a:bf:16:3c:
                    ea:ea:4b:fe:49:b4:46:b3:45:8f:90:92:c8:d5:c9:
                    06:1e:f8:b4:bc:85:54:35:25:e8:81:62:89:e3:8c:
                    16:16:d5:ce:05:9b:e7:5d:94:8c:7f:6d:f4:da:2e:
                    ab:db:bb:ef:ba:98:17:4d:02:02:3e:9c:35:e7:d5:
                    1d:d3:a6:da:21:94:32:1a:fc:55:dc:f7:4f:11:55:
                    9e:a0:2f:fe:0e:69:f7:b4:99:0a:86:d4:80:e5:b0:
                    b2:aa:b1:6e:d5:7c:b5:2f:69:0a:45:a5:b2:6c:73:
                    fa:41:f0:d8:e4:5e:83:4c:e8:2a:9f:8d:1a:15:ea:
                    64:7d:a7:2f:9c:b9:78:ab:98:6c:7a:f8:f3:63:9a:
                    ee:93:14:a8:1a:a5:be:bb:74:5c:9d:36:41:97:85:
                    51:67:ac:49:ff:a6:b2:3b:29:84:6f:a8:42:3e:07:
                    9f:b1:07:b2:62:68:6a:4c:35:2e:5f:40:d5:6c:1d:
                    a7:4a:a5:76:7f:ee:52:65:c8:ab:35:0d:21:07:c1:
                    b2:2b:e5:fc:81:96:62:10:6b:fd:64:78:2e:21:a8:
                    22:74:9d:89:c3:9f:79:70:14:38:9c:04:f9:4a:f4:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:EE:AD:57:0B:9E:16:30:5E:C7:4F:F9:B8:46:20:6D:BF:86:C0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZljurVcLnhYwXsdP-bhGIG2_hsA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6900::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:23:01:c3:b9:16:9e:56:aa:0e:7e:09:b3:2d:88:21:45:6b:
         97:55:f6:c0:ff:95:40:bd:c1:07:2e:73:de:f3:55:ee:58:04:
         ea:d4:6c:02:57:0a:c1:b5:f2:85:2f:d7:2f:84:34:44:69:6d:
         84:38:de:31:14:db:5a:2f:0d:00:78:e7:50:cd:25:61:df:3c:
         cd:b3:4b:8f:9e:db:e3:6e:d9:18:da:8f:2b:69:c1:14:35:a2:
         c2:1b:55:b4:dc:3a:ca:22:05:cc:d8:a6:de:27:de:0e:1f:12:
         c6:9e:c7:fb:53:8c:bd:0f:d3:59:47:11:1d:ee:2c:32:e7:46:
         d8:ee:f0:4d:cc:c8:fc:57:34:59:29:a8:2f:44:b4:81:bb:72:
         18:f1:ed:29:ab:e3:af:0b:d4:bd:08:45:14:2c:3f:38:f4:2f:
         29:2b:39:ed:f8:f8:12:ef:31:fb:6d:0c:37:94:26:dd:bf:f7:
         24:d7:08:de:4f:7a:26:7c:5f:6b:60:67:58:94:02:ba:7b:65:
         41:73:ed:8b:98:a5:54:26:41:0b:1e:8f:2b:c7:23:3e:0d:31:
         75:c6:9a:6f:f0:43:f1:b6:43:ca:7f:7e:2b:f1:fe:53:3d:5a:
         bb:7b:e6:27:4c:7b:0e:8d:51:33:b3:04:0e:48:a7:54:ba:87:
         81:7c:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org