Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p3WkugQy2Xwja3FxN-54UKWp1JY.roa
File:                     p3WkugQy2Xwja3FxN-54UKWp1JY.roa (raw, json)
Hash identifier:          oBkFzVmLRz5REEKu80CclVwdjcBolIiNqJDXU7Sojn0=
Subject key identifier:   A7:75:A4:BA:04:32:D9:7C:23:6B:71:71:37:EE:78:50:A5:A9:D4:96
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       023C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p3WkugQy2Xwja3FxN-54UKWp1JY.roa
Signing time:             Tue 30 May 2023 17:42:30 +0000
ROA not before:           Tue 30 May 2023 17:42:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f500::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A775A4BA0432D97C236B717137EE7850A5A9D496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:a6:4a:10:9e:ba:43:b3:79:91:71:37:cc:
                    62:f0:71:19:11:f1:24:be:3e:fe:9a:34:f1:43:de:
                    25:eb:ef:f5:af:70:d2:4e:b5:76:38:30:b6:52:c5:
                    da:5e:9e:aa:02:70:ed:c8:96:6a:41:72:80:1f:0d:
                    5b:43:6b:bb:ec:83:48:7f:f0:9c:16:ea:eb:3e:ff:
                    9e:91:a4:06:28:c7:b3:6a:91:73:1f:28:65:3d:63:
                    e3:c9:b7:1f:44:54:bc:10:b5:e9:54:ef:c1:d5:16:
                    8e:c7:77:e4:20:93:99:83:d5:52:46:9f:6d:6b:57:
                    af:2c:d7:8d:16:23:67:3d:11:af:11:7a:56:04:af:
                    db:a1:87:b9:a0:49:cd:5b:0f:87:a9:70:d1:dc:44:
                    e5:93:05:9c:84:f1:16:fe:4d:fb:e8:5b:5d:57:78:
                    5e:88:08:c9:2b:09:2d:61:5a:80:96:25:af:8b:55:
                    a5:8f:75:79:f3:db:01:40:8b:95:d8:97:1a:4a:60:
                    74:8f:e7:8a:ad:fe:9f:0c:85:47:92:e0:30:4d:fb:
                    d3:a0:f3:93:eb:fb:bf:86:27:e3:fd:f7:fc:53:51:
                    f3:70:b1:95:79:a8:ad:24:4d:ba:15:8a:ec:f7:f4:
                    52:44:a2:a8:cf:6c:b0:f0:ee:5b:44:58:a2:a2:51:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:75:A4:BA:04:32:D9:7C:23:6B:71:71:37:EE:78:50:A5:A9:D4:96
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p3WkugQy2Xwja3FxN-54UKWp1JY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:e0:99:4d:a4:96:ac:6f:ca:e0:4b:ce:f1:96:d6:28:99:75:
         f9:1b:a0:15:09:19:67:5a:60:20:ec:39:4b:84:5c:b3:15:3a:
         fe:e8:4e:96:51:5d:6c:7c:35:92:0d:08:16:e0:e8:49:16:04:
         63:67:6e:03:84:7a:26:9a:ea:4b:57:b2:ea:c4:37:2a:ab:6e:
         e5:8c:c8:20:d9:3d:e9:46:f2:e1:eb:cd:64:3c:63:9d:ca:0c:
         9d:3b:bf:98:3e:66:7d:20:7e:35:40:a0:ad:f9:5f:2b:e6:a6:
         69:68:6b:5f:e2:08:b7:1e:53:93:b3:dc:9e:c6:66:3b:a9:e5:
         44:08:01:a0:42:54:4d:20:17:8b:c7:3c:32:ae:14:1e:a3:c1:
         6f:c4:5c:2d:a4:f6:f2:83:75:01:21:c9:fd:6c:91:57:c4:4f:
         c2:65:ef:99:c9:7d:45:36:4d:62:c9:ae:53:16:d1:a9:c0:da:
         79:b2:ff:e1:1a:b2:b2:8e:98:1e:6c:43:dd:95:48:7d:4c:1c:
         f3:a0:09:43:e7:f0:57:b0:da:bc:93:9a:e3:8a:1f:8d:fd:3b:
         3f:64:56:e1:df:20:4b:8c:a1:52:0d:4f:1d:82:a5:c3:09:02:
         5a:b2:5f:4f:66:9f:24:16:51:dd:6d:9d:0b:9d:f5:08:dc:e6:
         86:c5:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org