Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/w-oZhrbtwMEr5H6PaH-6RMF7zJg.roa
File:                     w-oZhrbtwMEr5H6PaH-6RMF7zJg.roa (raw, json)
Hash identifier:          enXPWEoCIhHmRtuChKfj7UMTDeRwUx2SH2cpqv7cdrE=
Subject key identifier:   C3:EA:19:86:B6:ED:C0:C1:2B:E4:7E:8F:68:7F:BA:44:C1:7B:CC:98
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0209
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/w-oZhrbtwMEr5H6PaH-6RMF7zJg.roa
Signing time:             Tue 30 May 2023 17:40:25 +0000
ROA not before:           Tue 30 May 2023 17:40:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C3EA1986B6EDC0C12BE47E8F687FBA44C17BCC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:28:56:2e:13:08:30:62:2e:c4:bf:12:37:
                    a2:93:5c:59:00:c0:c7:28:e6:b4:e0:b7:08:27:65:
                    93:e6:b5:f7:6c:5a:41:98:d0:2b:91:c9:71:03:9c:
                    b5:31:52:7c:ad:66:56:8c:53:3c:27:2f:37:36:30:
                    3d:13:b5:a4:b2:58:50:1d:4d:f8:ba:0e:ed:51:ea:
                    e7:95:dc:4d:b7:5c:76:35:7c:07:0d:88:a1:d1:1f:
                    0b:02:e9:7c:3c:b6:de:69:2b:0d:f9:2b:1c:9d:ea:
                    d8:ee:fe:9d:94:2a:82:12:92:74:2c:1a:2d:78:39:
                    78:9a:94:a2:3f:96:93:96:fe:7a:f5:7d:e7:a7:3c:
                    f0:ca:0c:dc:d0:73:a2:fc:27:50:f5:ab:1d:cc:d6:
                    11:69:dd:8c:43:8e:e9:ed:50:0e:cc:1f:4a:8b:a1:
                    29:68:1a:66:9f:66:77:fd:98:60:a4:46:b3:bf:87:
                    b0:63:81:2d:a6:2b:37:3c:47:08:1d:d8:bf:86:d7:
                    b0:50:54:af:48:78:d9:a9:c6:04:b3:a0:2b:89:5b:
                    2d:7b:39:5d:7c:be:2c:0b:14:4f:e5:43:48:6c:de:
                    d4:50:e2:99:c1:44:7e:5b:dc:e5:e7:4d:cf:6c:93:
                    d1:32:45:41:dc:f5:26:53:49:f5:8c:a1:c2:67:2b:
                    e5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:19:86:B6:ED:C0:C1:2B:E4:7E:8F:68:7F:BA:44:C1:7B:CC:98
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/w-oZhrbtwMEr5H6PaH-6RMF7zJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:ce:b7:ab:44:49:2d:4e:66:8e:21:41:51:40:34:47:ef:39:
         57:aa:c7:89:78:ff:71:72:10:27:59:74:05:5e:c3:39:d8:ee:
         dc:f3:0f:7a:e8:2b:63:5e:79:1f:da:87:8e:a2:69:24:75:03:
         ca:c0:1c:f8:27:c2:8e:41:69:17:41:07:66:47:9f:7d:89:9a:
         fb:7b:33:cb:99:83:fc:88:50:ed:06:91:d0:96:86:fe:0d:17:
         d0:7f:e9:6b:29:44:d9:ae:57:e3:bf:16:73:b7:bf:f0:21:08:
         2c:1e:e3:e6:a1:e2:b7:3c:f9:90:d4:dd:2c:d9:af:89:a0:ca:
         47:f5:36:ae:ac:a0:c9:0f:9c:f9:85:b8:75:44:ea:5c:a3:83:
         58:e5:8d:c5:06:34:26:47:87:e3:17:21:01:5a:7b:76:4a:ce:
         d6:1a:b9:ed:42:7f:82:49:3c:bf:cd:4b:8c:b5:b6:5f:e0:a9:
         33:97:7b:5e:a8:4a:6c:7f:11:5b:0e:54:12:ef:1f:07:be:7b:
         68:22:8b:19:6b:3a:85:95:e7:5b:aa:5f:c3:a2:d8:35:37:38:
         b5:1a:6c:3f:d6:f4:59:4f:c3:52:0a:01:9b:aa:2c:13:fd:b6:
         b4:c2:f9:47:b9:50:68:39:07:c2:bf:5d:72:22:45:70:46:6f:
         40:1e:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:30 2024 by rpki-client on console-fra.rpki-client.org