Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pd8pLOYbmAFB0ZfjXvIfs6tjCqk.roa
File:                     pd8pLOYbmAFB0ZfjXvIfs6tjCqk.roa (raw, json)
Hash identifier:          43DKL9BFZOw3QyFEfcu+pCs9A+s9aiwKe0kDiC9gwTc=
Subject key identifier:   A5:DF:29:2C:E6:1B:98:01:41:D1:97:E3:5E:F2:1F:B3:AB:63:0A:A9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       53
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pd8pLOYbmAFB0ZfjXvIfs6tjCqk.roa
Signing time:             Tue 30 May 2023 16:04:22 +0000
ROA not before:           Tue 30 May 2023 16:04:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ff00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A5DF292CE61B980141D197E35EF21FB3AB630AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:ba:be:12:37:12:ea:ce:75:de:10:82:0d:
                    c6:43:95:76:7b:7a:0c:48:ec:da:68:c0:66:38:87:
                    05:ac:77:98:57:04:92:d1:a7:2f:1e:ce:24:de:8a:
                    0c:41:fd:26:6a:3d:a2:30:94:89:64:30:68:07:3b:
                    8f:ec:49:4c:10:4d:d0:5c:c5:ac:33:6d:9f:21:ad:
                    ee:e8:c8:44:89:71:ed:8a:e8:2d:df:27:b7:a6:2f:
                    3f:44:1f:10:61:a7:d2:70:8f:52:50:32:62:ad:01:
                    d9:e6:0b:d0:ca:53:a2:40:a0:f7:a4:fd:48:55:72:
                    40:55:b7:06:6c:96:d2:f8:2b:e8:d2:22:92:81:c2:
                    1a:2c:9f:bc:ba:35:32:e5:2f:bd:77:e8:fe:f5:81:
                    c2:ca:8f:e6:30:83:82:43:d3:a7:cb:e2:cc:c2:5c:
                    b3:55:b9:7c:cd:83:93:1e:f3:1a:6e:a4:63:84:df:
                    0b:5e:b4:37:6a:b3:34:4d:ef:cb:24:ba:89:03:53:
                    c7:46:ce:20:f6:92:18:c5:8c:22:05:e9:88:d9:94:
                    68:94:d2:87:5e:76:8b:d1:f4:db:d2:9e:82:63:b9:
                    e1:7a:3d:97:b4:86:de:83:ef:50:9c:f0:6e:24:06:
                    4c:6a:87:70:b9:b4:19:74:8c:c9:77:8a:97:bb:d4:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DF:29:2C:E6:1B:98:01:41:D1:97:E3:5E:F2:1F:B3:AB:63:0A:A9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pd8pLOYbmAFB0ZfjXvIfs6tjCqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:2a:9c:ed:48:1d:e7:67:90:ef:eb:29:fe:18:7e:3c:71:38:
         04:44:72:25:4c:df:19:3a:69:6b:88:3e:12:06:ba:c6:af:ee:
         a0:33:b3:2d:4a:aa:61:dd:94:42:6b:5d:94:fc:7e:e1:b5:3d:
         9f:d7:49:bd:e3:70:51:2b:37:a4:4a:6b:30:a6:46:bf:6e:a6:
         2b:cc:e3:f7:83:9c:b0:f4:be:20:76:ab:d4:02:83:36:4f:a6:
         2a:82:79:86:d3:79:5a:36:80:c0:87:3c:87:d2:d9:66:7b:86:
         98:2a:5d:87:37:ed:e0:e6:59:9d:85:7d:2f:cf:67:ef:19:27:
         9c:26:c0:0d:33:1f:52:d0:81:9d:e4:b0:8e:59:1d:58:c5:b7:
         e8:f4:30:e3:cc:2c:a9:e0:25:fa:3d:0f:aa:85:f8:a0:c4:36:
         ac:e7:68:4a:c1:75:00:c2:cc:e3:66:af:b5:b5:97:ce:24:f6:
         1e:bd:ff:67:93:b3:b3:23:bc:12:a0:a3:a9:d8:16:4e:ef:cf:
         d2:66:71:a9:c4:ce:6b:b3:6c:1e:24:36:23:4c:9c:e7:18:de:
         f5:86:c9:c1:51:d1:e6:c1:d7:1c:c8:24:73:ad:d1:d0:ac:fa:
         10:f4:67:1e:48:c6:ea:e0:2e:02:b6:9a:5d:41:e7:1e:0c:f7:
         fb:14:fa:f7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDQyMloXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQTVERjI5MkNFNjFCOTgw
MTQxRDE5N0UzNUVGMjFGQjNBQjYzMEFBOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMbyur4SNxLqznXeEIINxkOVdnt6DEjs2mjAZjiHBax3mFcEktGn
Lx7OJN6KDEH9Jmo9ojCUiWQwaAc7j+xJTBBN0FzFrDNtnyGt7ujIRIlx7YroLd8n
t6YvP0QfEGGn0nCPUlAyYq0B2eYL0MpTokCg96T9SFVyQFW3BmyW0vgr6NIikoHC
GiyfvLo1MuUvvXfo/vWBwsqP5jCDgkPTp8vizMJcs1W5fM2Dkx7zGm6kY4TfC160
N2qzNE3vyyS6iQNTx0bOIPaSGMWMIgXpiNmUaJTSh152i9H029KegmO54Xo9l7SG
3oPvUJzwbiQGTGqHcLm0GXSMyXeKl7vUvR8CAwEAAaOCAiowggImMB0GA1UdDgQW
BBSl3yks5huYAUHRl+Ne8h+zq2MKqTAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L3BkOHBMT1libUFGQjBaZmpYdklmczZ0akNxay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBr/zANBgkqhkiG9w0BAQsFAAOCAQEAEiqc7Ugd52eQ7+sp/hh+
PHE4BERyJUzfGTppa4g+Ega6xq/uoDOzLUqqYd2UQmtdlPx+4bU9n9dJveNwUSs3
pEprMKZGv26mK8zj94OcsPS+IHar1AKDNk+mKoJ5htN5WjaAwIc8h9LZZnuGmCpd
hzft4OZZnYV9L89n7xknnCbADTMfUtCBneSwjlkdWMW36PQw48wsqeAl+j0PqoX4
oMQ2rOdoSsF1AMLM42avtbWXziT2Hr3/Z5OzsyO8EqCjqdgWTu/P0mZxqcTOa7Ns
HiQ2I0yc5xje9YbJwVHR5sHXHMgkc63R0Kz6EPRnHkjG6uAuAraaXUHnHgz3+xT6
9w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org