Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/naQ8A6irjFY39kOoQMiu_Y6_ZRg.roa
File:                     naQ8A6irjFY39kOoQMiu_Y6_ZRg.roa (raw, json)
Hash identifier:          Y7Nfb8TvCV4ZoBYvmvZ018mB1X7dCxOccqtatODeP6c=
Subject key identifier:   9D:A4:3C:03:A8:AB:8C:56:37:F6:43:A8:40:C8:AE:FD:8E:BF:65:18
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01D6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/naQ8A6irjFY39kOoQMiu_Y6_ZRg.roa
Signing time:             Tue 30 May 2023 17:38:26 +0000
ROA not before:           Tue 30 May 2023 17:38:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9DA43C03A8AB8C5637F643A840C8AEFD8EBF6518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:d8:18:be:9c:f7:ad:ab:33:1c:2a:c4:c4:
                    dd:dd:6a:a1:04:04:4f:4f:ed:7e:ec:8c:b9:d9:17:
                    26:ea:b4:ab:f8:8b:85:2c:ea:b7:52:9c:85:14:27:
                    dc:90:34:9c:37:a3:9a:81:b6:1e:60:e2:d8:ef:9a:
                    df:60:6f:c9:f3:e8:79:45:df:3f:07:9b:e0:a7:48:
                    21:74:d4:eb:33:68:3b:d4:f5:5d:db:fa:e4:f9:61:
                    27:d2:6a:70:59:46:65:50:3a:01:90:5f:a4:55:02:
                    e4:61:df:fa:c0:2f:5b:97:70:96:cb:15:07:f2:e4:
                    68:ff:4b:48:fe:fa:45:00:47:76:cb:55:a7:ba:ad:
                    96:38:9a:c4:56:33:e7:8a:0c:82:b0:76:31:f9:10:
                    fe:77:4a:9b:d2:2a:f8:fa:a4:e6:62:a6:16:49:0a:
                    fa:16:79:6e:e3:c9:e9:ae:23:99:43:bb:a6:33:30:
                    5b:87:3c:13:ca:ee:ac:d7:19:5f:27:91:64:40:78:
                    7e:67:ab:53:b1:d8:d7:bd:e8:19:de:60:8d:17:7f:
                    2d:36:95:15:89:4f:a1:57:ae:a3:89:c7:2d:b7:01:
                    03:3c:2f:5b:0b:40:4a:af:9c:07:63:88:5d:7a:df:
                    f2:83:fb:74:bf:3c:b8:ea:b0:30:50:9f:8d:35:de:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A4:3C:03:A8:AB:8C:56:37:F6:43:A8:40:C8:AE:FD:8E:BF:65:18
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/naQ8A6irjFY39kOoQMiu_Y6_ZRg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:51:8f:a2:4f:f2:ae:28:d0:cb:52:ef:61:03:d0:2d:26:75:
         40:5c:59:97:1a:d4:fc:a6:b0:d3:f8:a8:ff:19:e6:13:70:e8:
         c7:00:ef:e5:6c:99:83:ee:d7:8b:bb:01:13:60:2f:43:2a:d6:
         8a:af:04:14:46:c9:93:96:12:db:4c:0a:4d:a6:a4:9b:97:6d:
         97:c4:c7:92:84:9e:1f:0e:9f:cb:85:41:1b:47:37:56:38:08:
         8a:e9:da:85:30:89:38:11:f0:00:5e:a7:b1:40:56:94:6d:79:
         06:c6:61:ad:61:1a:ca:34:76:f6:eb:85:9f:46:fd:9b:11:b5:
         5c:e8:79:48:b6:11:d9:53:a6:3c:4e:52:d6:4f:7d:46:12:21:
         f5:83:88:87:ff:a6:e6:66:d6:16:92:af:1d:b7:d8:99:52:e8:
         06:85:28:d2:1b:6e:46:55:2c:0c:a1:7e:59:db:63:21:c1:a4:
         cd:f1:cf:04:43:aa:c6:45:c2:be:0b:14:74:7b:ff:8f:a1:6a:
         85:d3:bd:ad:d4:b9:dc:b1:19:f6:74:eb:70:20:14:d9:22:17:
         03:3c:dd:62:a8:e9:6c:16:9b:04:19:a0:28:81:c0:f6:b3:4d:
         2a:40:45:37:61:ca:e5:36:f5:50:f3:94:48:e5:69:0f:10:e9:
         89:1d:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org