Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tHfiXCF1ZKRPQMREJNAfTTwhx4M.roa
File:                     tHfiXCF1ZKRPQMREJNAfTTwhx4M.roa (raw, json)
Hash identifier:          ac9KZj+HlOt6ysMbhXMpiPGpwE/13218R0FTYgtnKZc=
Subject key identifier:   B4:77:E2:5C:21:75:64:A4:4F:40:C4:44:24:D0:1F:4D:3C:21:C7:83
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       E5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tHfiXCF1ZKRPQMREJNAfTTwhx4M.roa
Signing time:             Tue 30 May 2023 16:12:22 +0000
ROA not before:           Tue 30 May 2023 16:12:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c300::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B477E25C217564A44F40C44424D01F4D3C21C783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:39:61:cd:5c:1d:78:d2:de:70:e6:1e:77:
                    2f:1a:99:32:98:e3:1f:ce:e6:7a:fb:66:8a:ed:80:
                    04:99:02:9a:54:aa:22:54:f5:ba:b2:35:1c:38:d7:
                    1f:e1:0d:0b:4a:21:79:b8:de:73:6d:73:a7:ad:83:
                    31:4f:4e:c4:f3:8e:59:84:33:7a:8d:e5:1e:3a:52:
                    b2:d6:2f:0d:9f:bf:92:31:55:95:da:a9:e5:fc:e7:
                    a5:be:78:9a:fb:99:55:2a:6e:3e:a7:d9:58:7a:db:
                    21:41:ab:96:a4:4d:e1:80:69:b1:fa:25:c6:fa:e8:
                    80:43:83:e7:b8:d2:4d:d9:51:b1:49:87:1f:fa:ac:
                    24:20:31:3c:e7:e8:b6:ef:1b:f6:4e:30:70:3a:55:
                    89:36:d9:d8:03:59:7c:1b:01:0e:49:52:e2:b8:2a:
                    5f:15:75:b0:c8:ad:09:ce:c2:13:e5:6c:ae:dd:26:
                    6a:3e:d1:c0:f8:7e:7d:3c:3c:96:f0:e1:c3:98:88:
                    6c:a9:0b:fc:17:2b:0c:7a:3c:2a:09:c0:ff:44:e2:
                    4e:c8:52:f2:2f:92:62:c3:a4:ac:ee:71:1f:5c:98:
                    2d:a8:4c:bf:ff:73:17:69:25:de:b4:61:7d:e5:ba:
                    b6:ad:57:e9:e5:30:2c:80:a1:f8:3d:0d:f7:8d:67:
                    9f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:77:E2:5C:21:75:64:A4:4F:40:C4:44:24:D0:1F:4D:3C:21:C7:83
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tHfiXCF1ZKRPQMREJNAfTTwhx4M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:55:ee:b8:6d:e9:2a:a5:37:8f:f5:35:ed:50:dc:47:af:16:
         7e:05:d8:81:a4:13:64:20:64:ca:1a:ec:a3:77:20:58:4f:8d:
         c1:10:53:0f:aa:cf:7e:89:0e:d2:75:94:37:78:04:b3:b4:16:
         bf:d2:16:83:13:e5:80:30:4a:3f:36:e3:db:ca:b2:65:69:90:
         ed:ff:e9:0e:71:7c:8c:9e:4d:d6:25:2c:f6:6f:8d:5b:ea:6d:
         8c:f0:0f:1b:40:64:13:15:e2:d4:26:08:7c:0a:54:4f:62:bb:
         72:81:57:f8:cc:a0:59:29:58:db:cc:38:9a:f4:e6:88:1f:4a:
         3d:53:17:23:b5:20:ff:e8:f1:c9:6d:a2:dd:86:41:2f:fd:a1:
         00:ec:d8:60:a6:30:4a:9e:b8:e3:f7:55:f9:58:47:05:02:ae:
         02:e2:4e:f8:99:3f:bf:d5:55:db:e9:d0:ae:c7:5f:79:2b:3c:
         9e:1d:a3:4c:f1:c2:a7:c1:c0:d6:ff:c2:5b:4f:96:ed:dc:88:
         8e:ef:4d:06:21:4e:3e:d6:04:1e:1d:1b:14:f6:f8:02:70:4d:
         d0:c2:01:6e:67:0c:3c:12:f4:e4:b1:47:2e:1b:60:3b:78:4a:
         a6:62:ff:1f:1d:47:46:37:da:d1:57:c8:cd:77:fb:3b:31:63:
         ad:ed:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org