Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cM6PZsgUAIDk2JzkUaTgZxMrrC8.roa
File:                     cM6PZsgUAIDk2JzkUaTgZxMrrC8.roa (raw, json)
Hash identifier:          Q+kLlEvcqzp/+cNZpVPm3bb8YaPGQD82pTlxZHFUJC4=
Subject key identifier:   70:CE:8F:66:C8:14:00:80:E4:D8:9C:E4:51:A4:E0:67:13:2B:AC:2F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       98
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cM6PZsgUAIDk2JzkUaTgZxMrrC8.roa
Signing time:             Tue 30 May 2023 16:08:16 +0000
ROA not before:           Tue 30 May 2023 16:08:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cf00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=70CE8F66C8140080E4D89CE451A4E067132BAC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:39:f8:c7:c1:47:c6:5b:be:c1:8e:ce:c4:
                    6a:39:b4:0e:34:95:14:58:29:f4:17:60:0d:7d:32:
                    d1:71:e5:07:68:a6:cc:b2:eb:74:07:0b:3d:e3:30:
                    dd:d3:a4:2a:26:0f:0b:74:3a:ab:d2:92:89:37:49:
                    d1:27:76:df:56:22:79:6a:7b:e7:64:21:c9:32:1c:
                    60:a7:da:b9:47:d2:b1:80:62:32:46:af:f8:ea:c9:
                    9f:6e:fc:c0:b2:86:00:90:1b:5b:78:69:89:91:fe:
                    47:8e:a5:63:ef:68:53:f5:24:38:83:58:5e:27:d1:
                    f4:50:0f:bf:31:28:4c:af:b4:8d:fd:40:29:42:86:
                    dc:e3:b5:3d:03:51:4b:37:3c:cb:c5:09:e5:f6:a5:
                    16:01:d9:6f:bf:1a:ba:e4:65:52:26:a8:05:b3:f5:
                    c9:37:d2:e0:1b:34:ca:c0:6f:af:bc:c7:82:3c:dc:
                    90:0a:34:b2:65:69:2a:e9:83:59:60:36:9d:08:c9:
                    ca:a3:49:a9:a4:00:66:39:9b:ca:15:8e:20:76:63:
                    62:ce:1d:f0:f9:d4:30:e1:e4:49:34:7a:08:90:84:
                    e2:9f:e5:0f:82:4e:33:22:89:b3:c7:79:f2:14:26:
                    57:a4:18:34:8f:fe:eb:b8:c7:27:6e:73:b4:11:a8:
                    3d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CE:8F:66:C8:14:00:80:E4:D8:9C:E4:51:A4:E0:67:13:2B:AC:2F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cM6PZsgUAIDk2JzkUaTgZxMrrC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cf00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:65:6d:04:19:29:f6:0a:ea:9e:df:9a:b2:00:69:78:94:
         68:06:65:c5:2c:41:fc:a4:ee:8a:10:9a:37:3e:6a:bf:b4:4d:
         49:7b:ab:52:20:cf:d9:76:ef:f6:59:49:76:5e:71:75:97:2a:
         8b:b4:88:3f:7f:8f:bb:d3:21:59:19:62:09:3b:54:20:3d:50:
         66:6f:56:92:8b:d3:82:5d:de:0d:99:9c:c8:e6:15:b5:5a:bc:
         c2:1a:fc:5f:15:fe:0c:4f:63:0a:6f:f8:0f:a0:08:d5:6e:79:
         ad:79:50:3f:b6:dc:de:90:a9:88:25:87:92:4c:fb:4c:f2:05:
         97:d2:fe:9a:11:35:49:aa:c1:d9:d0:dd:74:0f:4b:d0:92:bd:
         11:72:86:fc:e4:af:b4:44:5a:4f:19:62:07:89:9f:d0:7e:6f:
         87:1d:22:44:53:73:e6:9c:00:d2:0e:74:90:99:00:e3:16:02:
         ad:36:9b:31:08:e2:08:4c:92:f3:e2:b8:37:83:e3:2f:1b:c4:
         1d:c2:6d:5a:d2:84:50:bc:47:20:73:34:71:cf:c4:40:72:76:
         2e:94:65:4e:d5:71:41:78:b2:7b:63:54:14:6f:09:0d:b8:68:
         d0:6c:60:b2:48:7e:b5:38:96:c2:1d:c4:d1:f4:0b:2f:97:e0:
         cc:32:7a:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA4MTZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDcwQ0U4RjY2QzgxNDAw
ODBFNEQ4OUNFNDUxQTRFMDY3MTMyQkFDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8Gjn4x8FHxlu+wY7OxGo5tA40lRRYKfQXYA19MtFx5Qdopsyy
63QHCz3jMN3TpComDwt0OqvSkok3SdEndt9WInlqe+dkIckyHGCn2rlH0rGAYjJG
r/jqyZ9u/MCyhgCQG1t4aYmR/keOpWPvaFP1JDiDWF4n0fRQD78xKEyvtI39QClC
htzjtT0DUUs3PMvFCeX2pRYB2W+/GrrkZVImqAWz9ck30uAbNMrAb6+8x4I83JAK
NLJlaSrpg1lgNp0IycqjSamkAGY5m8oVjiB2Y2LOHfD51DDh5Ek0egiQhOKf5Q+C
TjMiibPHefIUJlekGDSP/uu4xyduc7QRqD0bAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUcM6PZsgUAIDk2JzkUaTgZxMrrC8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9jTTZQWnNnVUFJRGsySnprVWFUZ1p4TXJyQzgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa88wDQYJKoZIhvcNAQELBQADggEBAHr6ZW0EGSn2Cuqe35qy
AGl4lGgGZcUsQfyk7ooQmjc+ar+0TUl7q1Igz9l27/ZZSXZecXWXKou0iD9/j7vT
IVkZYgk7VCA9UGZvVpKL04Jd3g2ZnMjmFbVavMIa/F8V/gxPYwpv+A+gCNVuea15
UD+23N6QqYglh5JM+0zyBZfS/poRNUmqwdnQ3XQPS9CSvRFyhvzkr7REWk8ZYgeJ
n9B+b4cdIkRTc+acANIOdJCZAOMWAq02mzEI4ghMkvPiuDeD4y8bxB3CbVrShFC8
RyBzNHHPxEBydi6UZU7VcUF4sntjVBRvCQ24aNBsYLJIfrU4lsIdxNH0Cy+X4Mwy
elI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-fra.rpki-client.org