Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lm5UztVQGosgnbRTVsDu_JGdkdU.roa
File:                     lm5UztVQGosgnbRTVsDu_JGdkdU.roa (raw, json)
Hash identifier:          bB3Efk0g7FP+3+8j58QEDMOoLRDZGwP8oTQgSfQ6Hcs=
Subject key identifier:   96:6E:54:CE:D5:50:1A:8B:20:9D:B4:53:56:C0:EE:FC:91:9D:91:D5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       AF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lm5UztVQGosgnbRTVsDu_JGdkdU.roa
Signing time:             Tue 30 May 2023 16:08:24 +0000
ROA not before:           Tue 30 May 2023 16:08:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5500::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=966E54CED5501A8B209DB45356C0EEFC919D91D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:9a:2a:62:c0:f9:d9:f1:76:2d:7d:69:c7:
                    92:2b:43:3b:29:ba:25:60:79:41:76:6b:83:8f:28:
                    98:0a:f4:75:9c:13:a5:95:5b:b8:b6:31:7e:29:48:
                    08:4d:e4:b1:d4:e4:c8:11:80:30:7f:f0:7e:5c:32:
                    77:92:82:27:12:cf:c3:fd:7f:94:89:63:6e:56:29:
                    17:41:c1:84:1d:5c:f3:e5:31:a1:00:5e:7a:35:ed:
                    8b:90:9a:32:2d:76:45:5b:52:4d:18:c3:e0:dc:c0:
                    e2:d2:bc:53:28:54:a3:99:10:aa:e7:f2:c3:34:db:
                    d0:32:0b:99:02:10:a2:29:49:7c:3f:b3:d4:7b:e5:
                    d4:fb:36:46:9c:fe:be:cd:00:1e:a1:6b:83:f1:86:
                    52:58:36:73:fc:24:55:24:aa:ce:bb:73:7b:a3:58:
                    73:ee:5a:fd:de:97:fa:fd:42:6f:79:8b:a7:4d:23:
                    91:cd:87:59:74:5a:5f:d2:d4:b7:43:3c:05:e0:e7:
                    23:71:60:36:51:03:2d:13:08:85:b8:cc:cb:8a:dc:
                    3c:1c:04:40:da:3f:0a:b2:52:31:ff:3d:86:2a:1a:
                    da:49:6e:7b:2e:51:12:05:45:6e:f0:ec:3a:ec:4d:
                    98:34:13:78:68:aa:4a:ed:55:58:ba:36:ac:98:33:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6E:54:CE:D5:50:1A:8B:20:9D:B4:53:56:C0:EE:FC:91:9D:91:D5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lm5UztVQGosgnbRTVsDu_JGdkdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5500::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:b2:48:ac:28:84:a0:04:99:4c:0b:e3:c0:0d:1e:8b:df:
         42:03:d6:b1:37:ff:45:1b:de:c0:d5:90:08:0c:20:eb:62:c6:
         e1:c3:ba:07:ec:55:30:4c:55:f2:2f:16:51:1d:a7:a4:0d:80:
         ea:49:e4:82:eb:3b:9d:ec:84:5d:ed:90:9a:a2:6c:18:a7:09:
         8b:64:e8:59:bd:48:7d:db:0d:72:80:0b:d5:d4:a7:26:a4:b4:
         f4:07:8c:f1:c0:15:4a:37:e2:20:b5:af:ce:e6:95:76:18:2a:
         56:45:3b:7d:b3:e9:60:f1:c5:84:f0:44:a6:51:c1:3e:83:ea:
         6b:60:15:27:5d:60:d3:56:8a:f9:4a:36:ae:00:28:a5:4b:58:
         30:6b:21:a1:28:df:23:05:f7:05:18:66:32:c5:23:ef:03:bd:
         4e:44:bc:38:40:85:15:83:f4:4e:40:6e:84:43:5d:e4:5a:3e:
         c3:4b:df:5a:24:d7:4d:c8:3b:f9:bc:a3:9b:f7:2c:95:bd:a4:
         f1:25:21:f5:b0:d8:60:48:31:1c:e0:32:d0:04:2a:d6:24:d3:
         cf:86:66:76:e7:fa:7d:fd:e0:f8:4c:a6:7f:e8:f4:75:cb:4b:
         dc:c0:9a:84:a5:ab:85:45:f4:15:fd:7a:0c:a4:b0:7e:91:f0:
         43:c5:79:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA4MjRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk2NkU1NENFRDU1MDFB
OEIyMDlEQjQ1MzU2QzBFRUZDOTE5RDkxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFN5oqYsD52fF2LX1px5IrQzspuiVgeUF2a4OPKJgK9HWcE6WV
W7i2MX4pSAhN5LHU5MgRgDB/8H5cMneSgicSz8P9f5SJY25WKRdBwYQdXPPlMaEA
Xno17YuQmjItdkVbUk0Yw+DcwOLSvFMoVKOZEKrn8sM029AyC5kCEKIpSXw/s9R7
5dT7Nkac/r7NAB6ha4PxhlJYNnP8JFUkqs67c3ujWHPuWv3el/r9Qm95i6dNI5HN
h1l0Wl/S1LdDPAXg5yNxYDZRAy0TCIW4zMuK3DwcBEDaPwqyUjH/PYYqGtpJbnsu
URIFRW7w7DrsTZg0E3hoqkrtVVi6NqyYM9EHAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUlm5UztVQGosgnbRTVsDu/JGdkdUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9sbTVVenRWUUdvc2duYlJUVnNEdV9KR2RrZFUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa1UwDQYJKoZIhvcNAQELBQADggEBABxEskisKISgBJlMC+PA
DR6L30ID1rE3/0Ub3sDVkAgMIOtixuHDugfsVTBMVfIvFlEdp6QNgOpJ5ILrO53s
hF3tkJqibBinCYtk6Fm9SH3bDXKAC9XUpyaktPQHjPHAFUo34iC1r87mlXYYKlZF
O32z6WDxxYTwRKZRwT6D6mtgFSddYNNWivlKNq4AKKVLWDBrIaEo3yMF9wUYZjLF
I+8DvU5EvDhAhRWD9E5AboRDXeRaPsNL31ok103IO/m8o5v3LJW9pPElIfWw2GBI
MRzgMtAEKtYk08+GZnbn+n394PhMpn/o9HXLS9zAmoSlq4VF9BX9egyksH6R8EPF
eQU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org