Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oVo0zsBoEJhEHCvBYTcq7vjc-ds.roa
File:                     oVo0zsBoEJhEHCvBYTcq7vjc-ds.roa (raw, json)
Hash identifier:          1wx/EzNr9yeWRdKHcpzOV6Byhj+nPn05AjmxRhntk30=
Subject key identifier:   A1:5A:34:CE:C0:68:10:98:44:1C:2B:C1:61:37:2A:EE:F8:DC:F9:DB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       025C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oVo0zsBoEJhEHCvBYTcq7vjc-ds.roa
Signing time:             Tue 22 Aug 2023 05:38:13 +0000
ROA not before:           Tue 22 Aug 2023 05:38:13 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:4000::/37 maxlen: 37

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Aug 22 05:38:13 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=A15A34CEC0681098441C2BC161372AEEF8DCF9DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:d8:42:ec:00:8a:ab:89:2e:50:e4:31:cb:
                    2a:08:bb:d6:6e:63:60:90:5b:ee:fd:fe:16:ab:36:
                    d3:53:70:31:85:6a:1c:ed:bb:ee:24:76:20:e0:f4:
                    fd:19:39:a3:e2:02:90:21:b4:2c:d6:ad:a8:84:1b:
                    67:5d:6d:f2:9e:c7:9e:42:a2:40:b7:67:7a:08:b6:
                    47:d7:1d:c3:7d:cd:25:07:c1:9d:12:73:12:31:80:
                    c3:4a:3b:80:68:47:3a:8e:3f:d1:e0:2c:d5:31:17:
                    d6:d6:bd:16:77:90:41:74:dd:bc:24:ed:e1:7e:ae:
                    b7:c9:da:76:bf:92:5d:00:6b:7e:7f:5b:63:e8:70:
                    b7:1d:a3:dd:96:7d:e8:eb:54:db:d7:5a:21:28:b2:
                    50:e2:06:96:83:b4:7b:f5:d3:92:8a:ad:a7:18:1b:
                    ac:83:58:84:88:c5:66:ab:47:15:bd:0b:e6:86:64:
                    64:68:8f:bb:cd:d9:5a:8f:47:65:fe:26:c9:61:e3:
                    4f:02:b4:b2:38:c6:21:04:95:5d:13:8e:29:f9:78:
                    68:c2:bb:43:5b:67:12:75:fb:0a:cf:91:ff:6a:6b:
                    06:f6:59:fa:ee:90:a4:a6:b5:9b:a8:80:ef:ab:46:
                    25:7c:fb:8d:ce:24:6a:3d:03:04:36:81:8d:54:6f:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5A:34:CE:C0:68:10:98:44:1C:2B:C1:61:37:2A:EE:F8:DC:F9:DB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oVo0zsBoEJhEHCvBYTcq7vjc-ds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:c3:9f:14:be:48:1b:7b:f8:c4:b3:c3:17:0b:bc:17:df:
         01:b3:ac:17:51:ce:bb:00:ba:79:95:cd:37:b1:08:9f:3b:34:
         0c:87:e6:d3:59:74:e3:4d:b8:24:b0:03:f1:4c:02:2d:05:b4:
         88:7b:ef:a8:93:33:44:ce:0a:4f:1d:17:80:16:e1:cf:57:99:
         cf:a7:9d:ed:db:aa:51:b1:50:c6:55:51:15:c5:68:40:4c:a1:
         f9:9e:3f:14:a2:71:1c:76:1d:bc:50:93:58:2a:55:65:3f:de:
         2c:07:dd:51:5c:cc:40:3a:2f:87:06:de:ec:10:bc:70:a2:7c:
         98:27:b2:40:26:83:16:19:7b:88:d2:52:b7:d2:30:0b:4d:7b:
         45:15:28:dc:cc:7e:a4:97:a9:8e:e9:f5:92:17:27:43:e7:23:
         98:51:3c:ba:50:c6:88:31:27:e2:e5:3e:74:5d:72:f5:67:32:
         f4:2e:32:cc:14:00:85:46:b3:96:e0:f6:e9:f2:28:dc:c6:7d:
         00:80:17:93:54:c2:eb:92:21:72:d8:88:dd:56:19:c7:bc:56:
         8d:ef:2f:7c:db:07:90:7e:d3:42:bd:bf:79:46:68:f1:8c:f3:
         80:e2:eb:42:4a:40:e9:c8:23:37:fd:85:3f:7b:b9:51:a7:c5:
         13:cb:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org