Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d0AV0c8b8fq1sI3btbyhGvofuAI.roa
File:                     d0AV0c8b8fq1sI3btbyhGvofuAI.roa (raw, json)
Hash identifier:          60Qua2h2RPG4rMVUXeAVVpgDySOYN6t1+OF7b8457aY=
Subject key identifier:   77:40:15:D1:CF:1B:F1:FA:B5:B0:8D:DB:B5:BC:A1:1A:FA:1F:B8:02
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01E9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d0AV0c8b8fq1sI3btbyhGvofuAI.roa
Signing time:             Tue 30 May 2023 17:38:31 +0000
ROA not before:           Tue 30 May 2023 17:38:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=774015D1CF1BF1FAB5B08DDBB5BCA11AFA1FB802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:f4:f9:59:a2:ff:66:43:b2:70:bf:a2:c2:
                    2f:64:25:a2:3c:b4:bd:df:f1:18:ba:ca:60:a3:d5:
                    a5:a2:d9:40:58:6f:cd:e0:98:d4:10:fb:94:9f:f3:
                    c0:b5:b8:f4:47:9a:9e:e9:61:7e:d2:ee:ff:f3:83:
                    6d:d2:0c:5e:68:55:55:ee:cc:be:3f:86:96:d7:2b:
                    d9:7c:a7:8a:fc:29:35:3a:7e:d7:41:53:4b:96:ed:
                    d7:5b:24:79:6e:cc:bc:32:b1:12:b1:ff:10:b8:57:
                    1d:80:b1:d7:48:5f:d9:75:44:93:3a:af:98:23:9f:
                    a4:f9:49:1c:24:56:6b:54:d1:63:09:1d:60:97:d5:
                    6d:62:33:2c:4c:0f:dc:cd:07:d3:6a:ed:4b:5c:bf:
                    6b:cc:41:de:66:2e:1e:5f:4b:f3:42:b6:61:58:55:
                    48:6e:03:9e:8e:1b:19:57:01:86:a4:1a:17:8e:68:
                    a6:52:a8:7b:74:ee:f5:55:31:01:ab:e3:28:2d:d6:
                    f4:6e:4d:70:b0:cd:22:c4:bb:b1:79:1b:e9:5f:81:
                    bc:74:83:0d:17:06:d8:ae:8c:89:ef:87:19:96:85:
                    b7:de:06:8b:44:ec:41:ee:ac:08:75:e8:d1:34:ce:
                    90:4a:96:4f:31:6a:ef:87:eb:39:f6:a9:58:5e:96:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:40:15:D1:CF:1B:F1:FA:B5:B0:8D:DB:B5:BC:A1:1A:FA:1F:B8:02
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d0AV0c8b8fq1sI3btbyhGvofuAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:33:4e:4b:d8:b0:14:b7:e9:ba:83:b9:0a:26:13:bf:ea:f6:
         02:81:a9:12:9c:b7:42:56:e1:3f:c8:1b:70:2a:eb:84:cb:a7:
         c6:ee:e7:be:ec:fb:13:04:e2:14:76:ad:fa:31:8b:1a:58:e9:
         62:e1:13:07:b0:db:7d:07:b0:db:f0:f7:3e:04:bf:2c:a9:0e:
         27:44:f0:d1:f2:ac:9c:82:cc:f8:92:2b:dc:29:76:37:21:0d:
         02:a6:3b:9a:5b:73:b0:1f:df:61:71:5d:a0:14:8e:3e:d5:ad:
         96:00:53:4c:59:39:91:8e:17:2f:ea:78:3e:57:19:0f:81:db:
         8c:35:90:ae:0e:c2:b4:f4:6c:04:e3:43:43:29:c9:a1:a4:22:
         09:5e:55:cf:1e:26:7f:23:1e:ad:e6:49:be:15:60:5e:74:1c:
         22:75:2a:e8:b3:7d:41:cb:87:c7:03:b0:3c:10:46:f3:f5:3c:
         da:14:c5:02:2b:be:15:b5:a3:82:36:42:04:db:bb:dd:02:9c:
         da:90:1d:9c:18:20:09:8d:2d:25:c1:b7:ea:db:9a:5b:5f:2d:
         2e:c8:3a:05:6e:44:04:96:25:a4:83:d8:a5:bc:43:3c:56:7f:
         3b:f5:b7:1e:06:66:9c:3c:02:95:8d:74:27:9d:52:2f:44:95:
         03:10:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org