Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qMH3X1Lvvv-QhUpNxRvD8-Sg0HY.roa
File:                     qMH3X1Lvvv-QhUpNxRvD8-Sg0HY.roa (raw, json)
Hash identifier:          tPWguCizV7zIEw4TjTkXY2DdJhnUXaDMOp2gRHWJDkY=
Subject key identifier:   A8:C1:F7:5F:52:EF:BE:FF:90:85:4A:4D:C5:1B:C3:F3:E4:A0:D0:76
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0146
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qMH3X1Lvvv-QhUpNxRvD8-Sg0HY.roa
Signing time:             Tue 30 May 2023 17:32:23 +0000
ROA not before:           Tue 30 May 2023 17:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:eb00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A8C1F75F52EFBEFF90854A4DC51BC3F3E4A0D076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:bb:07:b4:66:8c:64:9d:1e:5c:ab:33:a5:
                    a8:f2:49:f5:69:4f:e2:f8:a5:e6:a3:14:40:67:c5:
                    76:2e:ff:e5:76:60:47:96:47:ca:db:38:67:c1:db:
                    ae:d3:95:a6:c7:79:53:d8:fa:51:03:b5:9e:ba:40:
                    c4:16:9b:9a:75:70:a5:0a:64:92:30:59:8b:dd:9c:
                    22:e1:60:33:9c:77:58:c1:b1:cd:57:77:eb:1c:08:
                    d2:33:9c:de:6d:5c:ec:ec:70:f8:cd:b8:1e:7f:ca:
                    7d:71:4f:62:5f:0c:61:c8:11:db:80:f8:cb:73:df:
                    6e:15:e9:41:f9:f4:36:64:11:41:71:84:4e:e5:5e:
                    bd:6f:22:99:7f:da:f7:7c:50:4e:3a:10:12:38:84:
                    1c:2b:38:2a:99:40:20:39:03:71:20:84:8b:b6:2e:
                    7c:15:f8:0c:75:f7:42:12:9c:07:2c:72:1e:ed:ce:
                    59:1e:4c:5f:70:2b:c4:0c:ed:49:00:6a:a4:32:a2:
                    b2:a4:b1:7d:11:68:22:6a:f4:7a:24:99:5a:97:2e:
                    d6:8d:32:da:5d:17:ea:fb:d2:8f:4d:f4:34:84:5a:
                    99:69:0c:55:d6:70:3c:82:24:2a:30:9a:5f:3b:6c:
                    00:4f:25:f2:15:e8:64:4d:48:06:a1:a8:dd:80:b7:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:F7:5F:52:EF:BE:FF:90:85:4A:4D:C5:1B:C3:F3:E4:A0:D0:76
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qMH3X1Lvvv-QhUpNxRvD8-Sg0HY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:61:7f:55:e0:6d:86:aa:d1:7e:aa:9c:3a:62:f9:39:15:
         e8:39:f1:89:a0:eb:57:f2:88:d7:28:ef:37:2e:3a:71:32:33:
         ae:3c:d3:e5:96:33:49:ba:d9:77:74:79:53:2f:50:98:52:d1:
         01:82:56:3e:d8:fd:42:83:60:f8:2d:cc:e2:5e:0b:1b:a1:b8:
         68:c6:f0:61:84:3a:1c:18:e2:64:c3:22:24:f1:d2:fc:08:5c:
         f0:f8:9f:15:e3:00:5e:97:8d:8f:37:c2:ac:b9:2a:db:91:b8:
         4f:8e:fc:a2:b2:a7:1f:6b:f1:1d:fd:07:2e:04:ef:05:45:83:
         95:87:d7:46:44:d5:63:f8:6f:45:cf:81:bc:4c:98:29:63:a4:
         c2:87:46:0c:02:7e:c2:6f:fc:50:c5:c4:af:ea:76:06:93:92:
         92:e4:d4:b4:8c:a6:19:e1:e0:48:ae:6a:79:fb:78:b0:16:d9:
         65:f4:b2:35:84:12:89:53:ef:d1:1f:3e:bd:3b:26:d9:91:3e:
         01:01:32:80:fc:ba:b9:35:ea:28:9a:c0:f0:0f:94:b9:47:ff:
         07:3a:3d:c8:45:60:5d:61:93:ce:a5:18:5e:06:f1:0f:7f:91:
         4a:2d:5d:28:86:ed:43:67:ed:90:2e:e1:b8:b9:3c:ff:ec:83:
         6a:7f:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org