Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q41V5cmzLkVSFl-2O08tBMr6_xE.roa
File:                     q41V5cmzLkVSFl-2O08tBMr6_xE.roa (raw, json)
Hash identifier:          YWsQMNzr+et2K2HdvV4Dq0nqYacc8vNYUd8kM0rT5ow=
Subject key identifier:   AB:8D:55:E5:C9:B3:2E:45:52:16:5F:B6:3B:4F:2D:04:CA:FA:FF:11
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       B8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q41V5cmzLkVSFl-2O08tBMr6_xE.roa
Signing time:             Tue 30 May 2023 16:08:27 +0000
ROA not before:           Tue 30 May 2023 16:08:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AB8D55E5C9B32E4552165FB63B4F2D04CAFAFF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:1b:65:6f:8d:bc:fd:fe:d5:47:8f:5e:8d:
                    72:c2:12:be:7c:22:e6:3f:e0:d8:87:23:45:b4:7f:
                    e2:43:01:7f:9f:fe:68:0d:86:bb:12:b6:9b:97:0b:
                    7f:f9:60:e3:85:1f:e3:46:34:67:dc:1f:11:a3:06:
                    0b:18:08:2d:d3:d4:05:d1:60:8f:41:f5:48:da:8f:
                    20:e8:5b:0f:b6:da:e3:4c:66:d2:83:fd:21:25:d6:
                    8a:de:8e:fd:a8:7d:29:fb:8e:c5:bb:61:73:ec:b3:
                    25:b8:af:51:be:58:3a:87:78:cf:6e:0a:05:b5:49:
                    19:a0:44:fe:64:3f:70:a7:45:d7:b6:68:ce:dd:ed:
                    ae:ff:e2:b3:70:6a:87:8f:ea:fc:78:de:dd:04:7d:
                    d9:f9:06:ff:bb:e6:9f:1d:c6:e5:80:9e:81:54:33:
                    c1:23:23:dd:08:7b:76:fa:83:cb:9c:d0:1a:40:7c:
                    50:58:ca:56:72:f1:14:b5:93:ac:37:3f:c1:28:78:
                    44:01:75:aa:08:a0:74:b3:64:b6:c2:0b:a6:b6:97:
                    28:ef:d2:6f:4f:4f:dc:76:a3:e8:a4:ed:a4:81:3f:
                    97:c0:8e:b5:9c:91:da:c6:cc:44:dd:94:af:66:c2:
                    51:10:b2:fa:6c:81:20:33:a9:33:69:58:7e:26:94:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8D:55:E5:C9:B3:2E:45:52:16:5F:B6:3B:4F:2D:04:CA:FA:FF:11
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q41V5cmzLkVSFl-2O08tBMr6_xE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:e2:cd:1a:f3:25:e4:91:d9:a0:fb:87:59:8f:8a:6f:64:
         85:14:4b:87:57:d3:9b:a3:00:91:e3:a4:48:fb:7f:91:92:48:
         89:90:c5:7e:48:e0:66:7c:06:35:94:32:0f:10:8c:48:e4:aa:
         31:12:4f:3d:e9:8f:a5:9c:48:86:46:70:eb:c0:80:cf:5d:e1:
         2f:26:98:bf:bc:da:d4:bc:1f:3f:42:64:f9:11:f4:cd:d4:5c:
         26:e1:a4:c4:a3:91:bc:3d:eb:b7:04:a6:96:52:9f:33:ec:6f:
         e4:86:57:eb:aa:b9:ed:c8:4b:7d:cf:ad:5a:99:f1:b7:41:12:
         0b:f5:11:e7:96:32:27:84:74:05:b1:7d:e3:23:7f:06:74:47:
         eb:6c:a7:75:42:69:dd:b2:19:72:bb:cb:90:76:ff:6d:52:7d:
         74:59:bc:2e:79:66:2d:78:b0:75:76:51:71:36:c9:20:a1:5f:
         b0:9b:bf:e0:e6:b2:68:49:2a:a3:70:e6:78:9e:0a:48:5a:b3:
         d9:42:c8:68:c9:f4:90:e8:ed:5d:cd:9a:75:37:34:45:ca:61:
         69:b1:be:3a:74:b9:81:b3:4a:46:6b:5e:36:7a:26:38:fd:1f:
         aa:f2:de:f0:bb:c0:ea:f6:c7:24:c6:e5:ed:ef:2b:fa:06:85:
         31:74:4c:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICALgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA4MjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFCOEQ1NUU1QzlCMzJF
NDU1MjE2NUZCNjNCNEYyRDA0Q0FGQUZGMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpQBtlb428/f7VR49ejXLCEr58IuY/4NiHI0W0f+JDAX+f/mgN
hrsStpuXC3/5YOOFH+NGNGfcHxGjBgsYCC3T1AXRYI9B9UjajyDoWw+22uNMZtKD
/SEl1orejv2ofSn7jsW7YXPssyW4r1G+WDqHeM9uCgW1SRmgRP5kP3CnRde2aM7d
7a7/4rNwaoeP6vx43t0Efdn5Bv+75p8dxuWAnoFUM8EjI90Ie3b6g8uc0BpAfFBY
ylZy8RS1k6w3P8EoeEQBdaoIoHSzZLbCC6a2lyjv0m9PT9x2o+ik7aSBP5fAjrWc
kdrGzETdlK9mwlEQsvpsgSAzqTNpWH4mlOEtAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUq41V5cmzLkVSFl+2O08tBMr6/xEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9xNDFWNWNtekxrVlNGbC0yTzA4dEJNcjZfeEUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6EwDQYJKoZIhvcNAQELBQADggEBAATD4s0a8yXkkdmg+4dZ
j4pvZIUUS4dX05ujAJHjpEj7f5GSSImQxX5I4GZ8BjWUMg8QjEjkqjESTz3pj6Wc
SIZGcOvAgM9d4S8mmL+82tS8Hz9CZPkR9M3UXCbhpMSjkbw967cEppZSnzPsb+SG
V+uque3IS33PrVqZ8bdBEgv1EeeWMieEdAWxfeMjfwZ0R+tsp3VCad2yGXK7y5B2
/21SfXRZvC55Zi14sHV2UXE2ySChX7Cbv+DmsmhJKqNw5nieCkhas9lCyGjJ9JDo
7V3NmnU3NEXKYWmxvjp0uYGzSkZrXjZ6Jjj9H6ry3vC7wOr2xyTG5e3vK/oGhTF0
TFo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org