Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pWd_gH1ur5ZTMkLw7b3D9ii5Qmg.roa
File:                     pWd_gH1ur5ZTMkLw7b3D9ii5Qmg.roa (raw, json)
Hash identifier:          59PoxwDX1PWhbxf9DMPVVOgnBsBP1Eqxwg5qGhOcJXY=
Subject key identifier:   A5:67:7F:80:7D:6E:AF:96:53:32:42:F0:ED:BD:C3:F6:28:B9:42:68
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       C7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pWd_gH1ur5ZTMkLw7b3D9ii5Qmg.roa
Signing time:             Tue 30 May 2023 16:10:16 +0000
ROA not before:           Tue 30 May 2023 16:10:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:dd00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A5677F807D6EAF96533242F0EDBDC3F628B94268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:a3:de:da:fd:d9:06:dd:b1:e5:fc:c0:76:
                    a0:8d:33:e1:f0:e9:56:fb:59:93:43:4b:a3:52:82:
                    49:85:b0:37:5a:8c:0b:93:13:2f:04:24:cc:7b:df:
                    ea:79:4a:82:8d:a8:6a:09:ab:34:02:8f:4f:1e:f9:
                    18:2e:cd:91:1f:37:31:7d:20:51:71:51:b6:ee:34:
                    08:8f:97:11:10:ab:09:87:b1:38:fe:2e:de:81:ab:
                    b4:2e:85:e3:7c:6a:89:21:49:7c:09:22:64:b2:84:
                    6e:54:9c:a2:23:e4:ba:d0:3d:e2:61:ec:d0:0f:11:
                    b5:66:24:0c:f4:93:7c:43:b6:5b:3b:a8:45:56:c9:
                    73:c9:46:ab:00:f5:a5:b9:d6:b1:ae:ed:f2:3d:2d:
                    fa:0d:7c:7b:28:27:f1:2c:c0:ef:9b:89:16:b3:a1:
                    31:d4:77:1e:ce:0c:61:72:41:c5:71:14:b2:5d:67:
                    e4:ba:f6:7e:1e:7a:1d:c6:fd:74:d6:a8:6a:6a:5e:
                    04:22:9a:02:49:15:6b:d5:d7:b3:28:44:5e:54:20:
                    02:fe:cb:a3:ef:c8:8f:00:77:41:6e:25:75:85:4f:
                    4b:a4:c9:ef:b8:81:18:2b:d4:b7:58:48:83:4a:c9:
                    e1:42:6c:a7:88:42:65:d7:8d:46:36:32:74:85:89:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:67:7F:80:7D:6E:AF:96:53:32:42:F0:ED:BD:C3:F6:28:B9:42:68
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pWd_gH1ur5ZTMkLw7b3D9ii5Qmg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:dd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:07:8b:6e:42:15:c9:33:fd:37:8b:37:61:6c:8c:9d:6a:
         61:6e:8c:cf:0f:fa:d0:bd:f5:2f:c1:87:90:c0:1e:81:e5:f7:
         62:91:f0:68:e3:db:39:79:fe:de:5f:69:42:0b:f1:12:4b:7a:
         60:6f:02:95:60:b2:32:79:0f:db:07:4f:1b:3a:d1:aa:6b:88:
         53:26:ff:ea:c6:7f:ce:5d:69:75:0a:3e:2b:ee:1d:e0:87:5f:
         34:c4:58:1c:6a:4c:03:ef:7c:c7:ea:d2:32:b7:64:d2:e2:6a:
         15:2f:7f:ae:dd:4a:86:94:f2:c0:40:21:6c:02:b2:31:c9:0c:
         d0:73:bb:fe:b6:b8:33:d0:c3:a5:39:fb:5e:a0:88:48:3f:f2:
         38:19:fa:f2:bf:28:12:57:7c:09:62:32:9c:1a:3b:e2:65:5d:
         64:6d:b5:e7:1e:ba:99:91:a6:bd:68:27:e9:38:a5:c0:ce:0a:
         cd:06:c0:ef:1e:22:70:c1:93:c2:87:7b:25:3e:b7:b3:b9:b4:
         ee:9d:02:4f:1a:41:f2:01:9c:ad:cc:e9:13:7f:fe:78:cb:c5:
         47:7d:e1:b8:34:97:66:02:c8:14:f6:96:6f:57:53:55:e6:9c:
         a4:7d:ef:50:bc:be:a5:35:65:e3:91:7b:20:f1:81:5f:de:9a:
         bc:f8:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org