Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bkX_v-HJLtkawi1pmrYbPi5LSzk.roa
File:                     bkX_v-HJLtkawi1pmrYbPi5LSzk.roa (raw, json)
Hash identifier:          jr/Wa2RYAoqtXnhcF58B32jUl5CHrFdYbJzfMNy2vXw=
Subject key identifier:   6E:45:FF:BF:E1:C9:2E:D9:1A:C2:2D:69:9A:B6:1B:3E:2E:4B:4B:39
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01E1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bkX_v-HJLtkawi1pmrYbPi5LSzk.roa
Signing time:             Tue 30 May 2023 17:38:29 +0000
ROA not before:           Tue 30 May 2023 17:38:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4500::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6E45FFBFE1C92ED91AC22D699AB61B3E2E4B4B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:3f:92:18:c2:bc:fc:a3:23:d1:b6:74:de:
                    5d:13:5d:ab:a9:32:17:19:04:f6:c3:11:8b:39:de:
                    d3:ce:76:4b:5a:77:0a:ea:c1:9a:8e:60:99:76:a2:
                    22:34:40:cf:cc:c1:fc:46:d8:60:16:1b:2d:fd:3b:
                    d8:12:92:e5:cf:60:b4:a4:87:14:f5:93:7a:ce:92:
                    08:73:d5:a9:1d:ca:b6:5a:71:7d:50:f7:28:2e:b7:
                    7d:08:b3:68:fc:fa:ff:3e:7d:53:ec:a2:94:2d:e2:
                    b6:e9:97:0c:65:12:32:08:f9:34:4e:46:c3:26:e4:
                    28:13:91:d9:b6:c2:19:51:46:c4:82:63:d4:a8:a9:
                    47:0b:d7:b9:26:ee:06:2f:22:7b:98:db:b3:ac:1f:
                    49:4e:96:b7:96:33:95:6d:30:07:0d:3f:e9:3b:e0:
                    b3:08:8c:62:47:12:9f:63:24:8f:21:e9:8a:60:be:
                    d8:29:c8:33:d9:d2:b4:9a:ff:ca:df:2b:10:fb:68:
                    94:5a:2f:c7:e3:7f:9b:99:98:15:8f:50:93:98:e6:
                    0c:2d:75:53:6e:ef:06:3c:07:b8:4f:87:e9:fd:34:
                    1c:05:b3:f3:37:7c:47:74:34:f9:db:17:99:32:e6:
                    e2:77:75:c0:0d:fe:3e:b8:4b:0d:52:87:67:2f:f0:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:FF:BF:E1:C9:2E:D9:1A:C2:2D:69:9A:B6:1B:3E:2E:4B:4B:39
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bkX_v-HJLtkawi1pmrYbPi5LSzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:da:bb:fc:a3:7e:6c:7d:b6:66:cd:bf:6b:bb:b6:5c:82:
         8f:18:cc:a3:d8:20:da:44:8c:64:5f:0e:57:36:18:a6:f7:bd:
         cc:f4:1f:51:57:3d:3c:71:d3:2f:ee:b8:b6:90:26:96:14:be:
         8f:1d:40:3e:fe:33:0e:e4:44:d2:de:3d:e9:b2:41:86:c1:da:
         c2:d0:92:83:1a:6d:34:72:b9:c1:55:e7:dd:00:3c:7e:02:68:
         b8:a8:a7:92:c4:50:6d:1f:2e:20:67:56:18:90:c5:0c:41:02:
         b6:0d:2d:dc:0c:03:34:49:57:d2:cc:79:41:b9:37:dd:74:f6:
         2e:48:a9:42:83:e2:b9:45:e6:92:9f:b6:24:bb:69:9b:a8:1a:
         66:88:e4:de:12:e0:dd:e3:ef:90:0a:89:34:de:44:9d:a0:bc:
         6e:a5:5f:fd:29:42:78:2b:25:ac:ca:d6:29:18:71:69:0d:2e:
         66:58:8b:50:c0:47:72:93:ca:78:f9:7a:37:df:c9:b3:7f:9e:
         5c:7d:de:02:25:4b:b9:14:01:99:72:56:41:a5:8e:6f:64:cd:
         41:53:ab:a1:6c:5f:74:9c:ce:cb:5d:8b:e3:48:ca:6c:5e:d3:
         b4:cd:12:b1:b9:78:0e:0c:b3:8f:0b:5d:31:99:95:f1:9c:ee:
         1e:b0:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org