Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iWfEabTVO1mj02wQLRwU_lG0YgA.roa
File:                     iWfEabTVO1mj02wQLRwU_lG0YgA.roa (raw, json)
Hash identifier:          l6b+0ChT/prIJBxiH5RqwFjB5XQFHOdxfu8nDEvJMwc=
Subject key identifier:   89:67:C4:69:B4:D5:3B:59:A3:D3:6C:10:2D:1C:14:FE:51:B4:62:00
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       A1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iWfEabTVO1mj02wQLRwU_lG0YgA.roa
Signing time:             Tue 30 May 2023 16:08:19 +0000
ROA not before:           Tue 30 May 2023 16:08:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3900::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8967C469B4D53B59A3D36C102D1C14FE51B46200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:df:25:7c:45:ee:fd:f7:98:9f:c7:51:f4:
                    08:79:95:6c:c9:5b:b4:7f:71:97:89:88:8c:61:4d:
                    6d:a7:dc:2d:ce:41:2d:a5:23:24:98:ff:bd:0d:e6:
                    0b:1f:db:5e:a6:1a:38:a3:6b:59:81:35:c6:e2:7a:
                    38:0c:28:3b:b7:04:c5:d9:5f:d2:4d:a6:ec:14:95:
                    2e:77:6c:c5:49:0a:a2:2f:1b:06:65:f7:b5:e5:78:
                    b7:f9:77:bf:92:4b:0f:dc:82:e6:1b:8c:02:9e:fd:
                    94:0c:96:c4:65:f3:d3:43:62:25:46:4e:73:b3:6c:
                    0d:4f:59:47:60:31:92:e6:94:3e:45:5f:c2:fe:07:
                    3e:69:bd:9f:8d:f6:a2:6d:55:b6:0b:17:dc:94:dc:
                    91:58:54:ff:49:b6:e4:09:ce:8c:ed:21:fd:fe:ad:
                    bb:99:3f:f5:ba:25:10:19:0c:bb:57:96:4b:d5:70:
                    e1:9b:d8:00:dd:cd:d8:04:75:ad:83:f7:fa:1c:74:
                    35:a7:3b:2a:00:ae:7a:da:af:fd:13:8a:7e:a4:65:
                    e9:27:ce:62:81:94:a6:92:9a:7c:d2:8b:84:e8:e7:
                    b6:ea:a2:09:47:75:d6:b9:cf:14:65:d6:ee:dc:9f:
                    d4:b3:98:bb:78:07:63:89:78:7a:17:6b:f8:5e:37:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:C4:69:B4:D5:3B:59:A3:D3:6C:10:2D:1C:14:FE:51:B4:62:00
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iWfEabTVO1mj02wQLRwU_lG0YgA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:21:cc:7d:06:c0:aa:a1:cb:51:b0:29:dc:f6:92:a2:ec:bc:
         62:7f:be:eb:6b:e5:ac:17:4f:16:9f:84:74:16:3b:63:17:5d:
         47:26:1e:36:14:0a:9a:45:73:51:64:14:99:0c:99:ae:fd:90:
         9a:19:12:da:88:95:7e:0e:d1:a8:b2:3e:4d:da:6f:4c:1d:33:
         88:a8:b9:5d:42:aa:51:91:7a:9e:a5:5a:17:9b:97:cc:61:04:
         79:99:c3:96:50:28:99:de:12:5f:c5:93:cb:2b:7f:74:69:a2:
         25:e1:66:13:aa:ca:59:00:39:cf:f0:f8:75:22:1d:f3:a9:60:
         8f:28:9c:01:bb:ac:73:6e:c9:e0:27:96:8e:15:24:e7:a7:72:
         88:3a:6e:9b:34:cb:fe:c7:3d:b7:e3:13:ff:22:db:08:1c:d0:
         af:02:b8:47:44:de:75:4f:95:60:eb:e6:73:38:07:d1:ef:6c:
         e3:80:23:62:b6:68:e2:99:e6:22:62:67:7c:3d:a6:36:3b:44:
         fe:a3:b8:1e:c7:fd:3e:3a:dc:63:14:a5:33:cd:ac:b0:d2:35:
         ff:85:80:56:b0:e9:b0:6e:f1:4f:3f:9a:1c:95:bf:3a:da:e1:
         40:ad:9c:cd:87:e2:d4:8c:68:9c:5d:07:33:ef:bd:b6:4d:f6:
         8b:a9:78:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-fra.rpki-client.org