Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jc-EeoXmFH8U3aT0DoRRYCrNh4k.roa
File:                     jc-EeoXmFH8U3aT0DoRRYCrNh4k.roa (raw, json)
Hash identifier:          sauiFUwe7km/wtroOOXoEbvk2veDw1+LkoeORtwItLc=
Subject key identifier:   8D:CF:84:7A:85:E6:14:7F:14:DD:A4:F4:0E:84:51:60:2A:CD:87:89
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       019A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jc-EeoXmFH8U3aT0DoRRYCrNh4k.roa
Signing time:             Tue 30 May 2023 17:34:32 +0000
ROA not before:           Tue 30 May 2023 17:34:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6f00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8DCF847A85E6147F14DDA4F40E8451602ACD8789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:fa:cc:92:4a:5a:ed:1b:02:7a:37:6b:79:
                    47:64:ce:ad:db:36:45:f4:5e:09:11:8f:38:44:2d:
                    b8:6f:e5:24:70:c9:a4:00:d7:4e:24:00:4d:3f:e7:
                    4d:e5:71:bf:59:51:96:d2:2c:98:9a:d9:cc:ee:cb:
                    c4:49:9f:3c:69:94:9b:5e:99:3c:68:69:87:f7:5f:
                    ab:3d:48:c0:53:28:e2:41:68:9c:fc:c5:0c:86:f2:
                    e6:9d:ec:82:f3:42:62:a5:26:03:09:e7:a3:1c:2a:
                    28:39:2a:83:c3:3d:c1:10:a5:a2:0f:24:2c:f5:b9:
                    2f:c8:e9:e7:5e:2a:f6:70:92:1b:2a:4d:57:c1:3a:
                    d4:8e:bc:1d:69:37:f4:c2:3d:7d:0d:0f:26:c5:06:
                    09:73:9f:46:8c:0d:17:73:1a:6b:c8:79:57:69:49:
                    af:7a:90:47:ba:17:82:da:ed:22:66:93:a7:df:6e:
                    f2:cd:b0:ca:bb:4a:a8:4e:97:ab:27:db:59:d1:32:
                    96:d1:17:b8:55:bb:3f:ef:7d:a2:c4:ee:17:6c:13:
                    1e:70:69:bf:27:c8:04:ec:b9:48:20:3a:08:3c:8a:
                    c5:53:2a:c5:ca:c1:49:bd:41:94:37:bd:14:49:fa:
                    44:db:00:c8:bc:75:0d:a9:ce:e3:17:ca:e2:48:40:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CF:84:7A:85:E6:14:7F:14:DD:A4:F4:0E:84:51:60:2A:CD:87:89
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jc-EeoXmFH8U3aT0DoRRYCrNh4k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:fc:b2:5f:49:b7:65:1f:11:9b:f2:51:1a:d5:af:9b:62:
         75:b0:d9:ee:89:5b:e6:31:49:14:6f:1c:75:e0:f2:2c:5e:3e:
         fd:65:8f:49:95:37:36:50:34:01:f9:63:98:b1:6f:d1:74:44:
         ff:cb:94:8a:7a:90:c9:68:31:2c:94:ad:8e:71:08:8a:84:c9:
         98:7f:54:08:ca:67:0a:9f:8b:e0:6f:1e:ac:cf:24:f8:ba:f4:
         d4:d0:b3:1b:11:df:b6:dd:59:3a:e9:53:1b:f0:48:8b:17:76:
         c8:46:3d:9b:6d:89:84:e0:66:cb:1a:8e:96:78:c8:72:bd:da:
         66:34:5f:82:41:a9:4c:ef:44:aa:93:bb:4c:eb:d3:8a:94:69:
         26:95:25:9a:d0:9b:f1:f2:de:20:e5:bd:24:a1:be:74:39:09:
         5a:8e:58:c0:71:2b:04:0b:24:18:4e:00:13:dd:ef:10:b8:22:
         98:e2:25:a8:0e:f3:b2:0d:e5:a3:d5:f0:fb:07:1f:1d:4e:cc:
         54:e3:15:2c:a8:b2:09:a3:b4:76:37:53:5b:9f:b8:2f:48:ae:
         d5:05:a5:53:92:0d:ce:93:c1:6c:e6:a1:00:16:ac:e8:14:cf:
         4c:eb:f8:da:ed:22:9a:a5:ca:e9:c9:fb:1a:0e:18:bd:1a:6b:
         f3:68:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org