Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j9S1TRD6oJ1D77UWHtXYhEYaDng.roa
File:                     j9S1TRD6oJ1D77UWHtXYhEYaDng.roa (raw, json)
Hash identifier:          NSJNizgVifru2BIFZ09MKw8Xcv2ZOpDecm48dhZvhQU=
Subject key identifier:   8F:D4:B5:4D:10:FA:A0:9D:43:EF:B5:16:1E:D5:D8:84:46:1A:0E:78
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0248
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j9S1TRD6oJ1D77UWHtXYhEYaDng.roa
Signing time:             Thu 01 Jun 2023 16:30:56 +0000
ROA not before:           Thu 01 Jun 2023 16:30:56 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2000::/37 maxlen: 37

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 16:30:56 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8FD4B54D10FAA09D43EFB5161ED5D884461A0E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:38:9f:1a:33:61:d4:e0:08:ff:b1:f8:54:
                    6f:b7:70:3e:f9:50:ea:ae:03:13:a7:7c:d1:2b:a8:
                    3d:9f:2c:62:57:8f:df:89:46:6e:de:6a:22:56:98:
                    92:d7:75:35:f7:46:5d:db:c7:6e:7a:bb:6d:a0:13:
                    95:be:2c:50:ce:96:df:45:49:ba:26:ad:82:53:6b:
                    06:16:fe:39:bf:eb:5f:17:69:57:19:d5:0f:75:90:
                    7a:d0:40:3d:71:26:72:28:fd:3c:06:f0:ee:83:1e:
                    ab:f6:4a:51:04:d6:99:26:af:bf:40:f6:95:ba:e1:
                    04:87:65:b2:7c:5d:9b:72:6c:4f:4a:a9:48:64:db:
                    96:3a:05:07:90:6c:a9:bb:a3:5a:05:ff:d5:ac:f6:
                    a4:02:5b:1f:30:c4:ae:e4:1e:62:ec:b3:7a:59:38:
                    d3:0c:ec:05:36:0f:51:e2:5f:ad:0f:a4:9c:11:d2:
                    37:c5:94:19:94:80:70:85:7c:35:15:b6:71:5e:97:
                    79:0c:f4:5e:00:0e:35:13:d6:b0:f7:28:27:45:b4:
                    76:59:ee:39:ec:de:d0:e9:b9:11:aa:15:2f:4c:0b:
                    35:71:07:2e:f3:52:b8:96:d2:5b:00:ea:29:8f:77:
                    3f:96:b7:15:52:bb:f7:6e:9f:2d:00:45:e3:3b:44:
                    86:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:B5:4D:10:FA:A0:9D:43:EF:B5:16:1E:D5:D8:84:46:1A:0E:78
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j9S1TRD6oJ1D77UWHtXYhEYaDng.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:bf:5c:11:2d:d8:11:2f:93:e6:b8:d5:20:75:4b:60:f5:
         ab:0a:40:40:c0:16:cf:d5:d5:06:77:22:8e:a8:82:29:8d:b2:
         0b:a5:51:07:f7:12:12:33:f0:64:5f:fa:8a:e4:1d:be:01:8e:
         17:99:ac:e2:c8:02:de:41:df:8f:1d:52:14:c0:18:c3:fa:89:
         01:b5:12:0c:b8:c7:85:d5:e6:26:d8:70:92:c6:e5:5e:f1:35:
         80:c0:b8:92:57:09:4d:cd:b6:39:7c:64:07:63:5a:c7:89:2b:
         ad:2b:b5:35:b4:85:ec:8e:c8:b5:1f:b2:e1:d7:02:13:38:d1:
         b0:d0:24:26:65:dc:6a:63:80:ed:ff:7d:ad:c6:5a:3c:d9:2a:
         4b:ff:21:06:58:73:25:cb:1a:d9:5c:da:f0:bb:27:f6:71:c9:
         7e:00:41:05:be:75:94:78:0c:00:f3:32:6c:ad:3e:f5:2b:c5:
         91:08:87:95:73:fc:b7:16:12:14:58:6f:b0:0c:dc:d1:fb:93:
         25:af:ad:2d:46:2f:73:a3:56:29:d5:69:a6:31:0a:dc:1c:e6:
         ae:c6:ad:a0:d7:e1:19:0c:66:69:a7:cb:fb:10:29:71:d9:e9:
         51:92:59:b5:39:a9:a4:dc:7e:1e:3b:06:f3:0e:18:2d:09:c2:
         3b:b1:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org