Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/niPNFNBw-LzF4Kb7FifoVxPmWwg.roa
File:                     niPNFNBw-LzF4Kb7FifoVxPmWwg.roa (raw, json)
Hash identifier:          0ZXaBb8W9S8GuwKyobJ+EAz416YlVf8IUZByRkH6iw4=
Subject key identifier:   9E:23:CD:14:D0:70:F8:BC:C5:E0:A6:FB:16:27:E8:57:13:E6:5B:08
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       97
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/niPNFNBw-LzF4Kb7FifoVxPmWwg.roa
Signing time:             Tue 30 May 2023 16:08:16 +0000
ROA not before:           Tue 30 May 2023 16:08:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9E23CD14D070F8BCC5E0A6FB1627E85713E65B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:94:3f:4f:57:f2:fe:2a:9e:f7:77:d4:76:6a:
                    a8:3c:7f:b4:30:2c:84:48:65:22:36:fa:4e:c3:1e:
                    29:23:7c:63:a1:74:2f:d5:61:b4:8a:fe:0d:27:33:
                    7c:3e:d2:93:0b:83:89:fb:ba:64:63:66:8d:0c:4d:
                    57:96:35:1e:38:0d:56:61:01:f5:31:a2:f6:0e:cb:
                    a8:68:b8:e0:36:81:a3:28:c2:d3:fc:5a:31:2e:e9:
                    7b:86:ed:5a:22:f3:8d:3f:b4:68:e4:a6:7b:60:eb:
                    dc:2c:c0:ca:73:de:b0:c3:b6:89:77:ef:a8:1c:a0:
                    99:75:ab:1c:4f:2a:39:0b:e6:31:b5:bf:e0:47:56:
                    02:c5:79:6b:5e:6f:2e:a4:6d:eb:46:0f:a3:c2:f8:
                    02:a5:32:f6:c7:46:a2:55:1c:c0:5f:dc:36:36:c6:
                    33:c9:d3:9d:c6:fc:0f:a4:f6:9f:43:e5:c3:43:ad:
                    0e:92:13:f7:91:63:11:f0:64:4d:61:5a:12:f7:66:
                    f6:b7:8f:1e:dc:58:97:2c:f1:99:b9:89:9f:73:f2:
                    10:85:d2:d1:8f:a0:47:4f:7e:58:9f:f2:a2:ed:f5:
                    c5:a6:b2:60:3e:32:c7:e7:e7:43:d5:ec:71:df:38:
                    4d:4c:72:ec:1c:5a:cc:0f:cd:3e:e6:9a:e3:9b:68:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:CD:14:D0:70:F8:BC:C5:E0:A6:FB:16:27:E8:57:13:E6:5B:08
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/niPNFNBw-LzF4Kb7FifoVxPmWwg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:e3:59:be:29:e5:ed:8c:a5:c0:3a:e0:ad:6c:76:b7:81:
         22:8a:46:e2:d5:89:cd:c3:cc:03:48:18:29:70:ca:74:bb:39:
         00:97:7a:f9:5d:c3:d0:13:cd:a1:15:a2:6a:73:a0:7c:2b:af:
         fb:5c:bd:f0:24:e6:e0:09:1e:eb:88:1b:9e:5d:b1:01:80:2f:
         ce:90:a4:c1:68:da:cf:33:36:67:1e:70:68:20:75:65:cc:5a:
         10:a2:b2:d2:56:03:78:c9:f9:e8:e6:10:1f:39:18:75:6d:61:
         2b:84:9e:60:7d:67:c5:41:7b:f7:d6:5d:b6:6a:f2:ae:9a:39:
         fd:fd:a9:c9:59:1a:59:5f:13:01:fd:4d:d9:9b:2c:17:1e:e0:
         fc:92:a4:d3:78:e6:d2:c7:7c:e4:5a:df:07:1e:d5:87:cc:e4:
         c9:2c:17:89:bd:9d:1f:9d:f2:56:4a:4b:09:8d:71:5e:ef:66:
         56:03:4e:65:e9:02:f9:41:ae:27:90:eb:2e:68:62:f0:29:b8:
         86:a7:2b:5d:0c:42:0d:41:80:56:86:86:14:ea:b8:7c:fa:85:
         b8:67:f2:82:92:3c:f9:3c:92:b5:63:62:58:4d:ea:17:2f:3a:
         79:a1:b0:64:ff:a8:15:00:75:92:f4:7b:b2:d1:e2:46:ba:b2:
         34:22:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org