Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mg2NuR6FBNj911Xb9UtrriXoX50.roa
File:                     mg2NuR6FBNj911Xb9UtrriXoX50.roa (raw, json)
Hash identifier:          W2BfvqIxn8ia8UhBkORKaYzn/fqWqEEiPUn/xEkV3ZY=
Subject key identifier:   9A:0D:8D:B9:1E:85:04:D8:FD:D7:55:DB:F5:4B:6B:AE:25:E8:5F:9D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01A7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mg2NuR6FBNj911Xb9UtrriXoX50.roa
Signing time:             Tue 30 May 2023 17:36:24 +0000
ROA not before:           Tue 30 May 2023 17:36:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9A0D8DB91E8504D8FDD755DBF54B6BAE25E85F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:6f:33:9b:f2:8d:c1:d4:33:10:69:1f:0d:
                    ed:2f:f9:9f:57:be:6c:db:7e:20:7d:51:49:da:30:
                    ed:7b:d2:f8:7f:26:83:bc:b4:89:5c:86:ee:40:82:
                    e6:b0:a0:b6:d8:17:5b:1b:12:41:43:c2:91:85:4e:
                    a4:ca:64:fa:f6:19:ec:b3:d6:bb:1c:fb:59:6f:6d:
                    c7:a6:f2:7d:5c:78:19:28:90:54:18:7a:46:da:8d:
                    22:a8:ee:27:92:07:d8:a3:82:16:97:6c:cf:13:8a:
                    4e:ba:82:44:f3:d0:89:e0:d6:82:c8:d5:6f:46:ac:
                    1d:ec:76:53:c7:ff:11:66:46:6f:fd:cb:48:dd:3b:
                    d8:da:da:97:6e:b4:30:ae:7c:19:0a:5c:00:6f:1f:
                    f8:9c:9f:de:9d:60:69:18:6c:51:4b:9c:da:de:d4:
                    24:12:23:c5:c6:84:12:5a:0b:10:84:e6:64:6e:19:
                    c6:28:f1:8f:70:64:37:bc:ab:93:49:af:8b:c9:47:
                    ae:77:77:01:71:4b:e9:5b:8b:6f:2d:f7:5f:e8:cb:
                    02:44:fe:ed:20:66:d7:f2:49:e9:d2:a5:92:11:4b:
                    39:07:9b:29:97:68:b6:52:61:63:5b:28:5a:17:b2:
                    10:f0:1f:29:88:5c:fa:9d:1f:0f:f4:32:43:a1:4f:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:8D:B9:1E:85:04:D8:FD:D7:55:DB:F5:4B:6B:AE:25:E8:5F:9D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mg2NuR6FBNj911Xb9UtrriXoX50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:46:e4:74:14:c4:93:19:59:5a:f6:04:a1:96:d0:30:c4:32:
         da:c5:25:d9:79:7a:f5:8b:8c:b2:42:64:e6:a0:ef:ac:43:70:
         6e:23:fc:ca:6b:87:1d:01:97:d4:d6:e3:b9:33:e5:68:d2:29:
         30:5f:25:58:5f:c3:84:b3:f7:9e:9b:91:a2:b7:33:00:66:35:
         59:94:aa:09:59:75:12:00:46:a6:e3:15:99:be:e4:c3:b7:2f:
         ba:67:27:c5:fd:7f:7f:cb:48:76:82:3c:12:48:2f:52:5f:12:
         1e:af:f4:6d:f3:0f:a2:ef:66:90:77:f5:ee:80:55:25:ee:3e:
         78:1f:81:80:0c:69:a9:4c:f0:a3:58:8f:ef:87:48:f8:a4:82:
         2d:33:53:bc:7f:59:0f:38:d4:75:fb:80:f1:19:b3:ac:bb:e8:
         77:02:0e:3c:7f:16:3c:b9:c3:1a:e5:7a:13:a3:81:f2:7e:e3:
         69:f8:12:67:43:38:05:8e:17:a0:09:9d:c2:17:7c:93:00:48:
         1e:e8:01:a9:99:ef:c9:9e:42:65:6c:db:a7:15:6d:d3:5a:82:
         7c:e4:92:c8:41:32:15:0a:bc:24:19:5b:1d:87:41:60:ee:65:
         57:ad:69:6d:ce:9a:8a:59:df:97:39:ef:76:25:a6:ee:d9:f7:
         d5:50:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org