Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wtnSOi3AKjl60YaYhqUJ3cKtZFQ.roa
File:                     wtnSOi3AKjl60YaYhqUJ3cKtZFQ.roa (raw, json)
Hash identifier:          u/Ps70WwjW2OlKAzif/R62LvU0OdTyjQHpby6uvpX/A=
Subject key identifier:   C2:D9:D2:3A:2D:C0:2A:39:7A:D1:86:98:86:A5:09:DD:C2:AD:64:54
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       99
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wtnSOi3AKjl60YaYhqUJ3cKtZFQ.roa
Signing time:             Tue 30 May 2023 16:08:16 +0000
ROA not before:           Tue 30 May 2023 16:08:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1400::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C2D9D23A2DC02A397AD1869886A509DDC2AD6454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:67:ee:69:1d:4a:27:b1:6d:b3:ec:c6:db:
                    58:8f:67:a1:02:cb:8d:8f:93:76:5f:b6:d1:9b:b4:
                    72:5e:dc:e2:1f:26:a6:a4:98:74:90:c0:6d:04:e8:
                    8e:65:af:a2:99:a5:71:4b:01:a2:34:8e:ec:b8:b1:
                    59:31:b3:3d:76:e7:4f:e0:e0:4a:8a:aa:69:fe:59:
                    91:5f:b9:91:89:6d:5c:3f:eb:e8:32:b3:de:cd:19:
                    03:30:0f:08:36:e9:19:7d:93:85:0e:77:82:e6:44:
                    da:46:73:7f:6f:a8:9f:e6:47:b5:4e:3d:a9:c0:ec:
                    29:4e:94:e6:8c:cf:c4:74:6c:ed:69:cb:22:03:3d:
                    ab:88:85:35:3c:9e:99:2c:32:32:30:a0:a3:c6:af:
                    48:98:b1:4a:ff:44:d8:15:56:4c:76:b0:21:85:02:
                    f1:2f:c0:cf:bf:97:89:3e:45:40:1d:21:61:81:82:
                    87:c8:bf:82:02:63:27:b2:5b:fd:32:11:22:99:98:
                    82:bc:c9:cf:15:ea:d7:63:54:78:df:a8:12:0d:cb:
                    92:07:38:31:4f:d8:40:9f:c1:e4:80:24:80:47:5d:
                    48:d0:f3:d3:58:d5:2d:3e:b1:40:aa:99:d7:0d:d0:
                    06:34:8e:4c:df:d4:89:82:31:21:47:b7:99:c5:5e:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:D2:3A:2D:C0:2A:39:7A:D1:86:98:86:A5:09:DD:C2:AD:64:54
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wtnSOi3AKjl60YaYhqUJ3cKtZFQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:e6:23:59:0b:b9:e2:0a:09:02:64:0a:56:82:ba:9d:83:1a:
         05:76:8d:5d:4f:ef:5c:53:82:93:20:d5:17:f8:ea:35:86:44:
         44:ff:20:2f:f0:a0:11:d6:c2:ed:78:5a:ad:d3:a8:b3:6b:7f:
         6d:59:7f:c0:12:87:17:4d:ef:c9:a7:dd:00:1e:f4:b1:41:d3:
         d8:49:5a:7d:12:09:b1:7e:35:96:a0:56:e5:1b:88:48:1d:80:
         3d:10:13:d7:43:dc:ae:4c:79:dd:ca:2e:fc:6c:1f:bc:93:26:
         f3:5f:6e:52:21:4a:9c:88:47:23:b7:e2:aa:47:e5:91:21:d0:
         b7:9c:93:3c:3a:45:e5:b6:82:43:ab:e0:1c:45:66:56:2a:98:
         74:b5:44:c1:f8:cb:2d:bb:87:1c:85:9e:56:90:42:a6:93:3c:
         0e:17:59:c2:5f:1b:92:4b:dc:df:08:c2:42:f7:53:00:67:1a:
         38:ce:2c:14:38:83:4c:7f:2b:00:02:4c:ca:7d:dd:1f:c5:ed:
         90:a3:2c:7d:db:5a:d8:0e:7b:b5:d7:a3:72:f5:e5:9d:87:9a:
         be:68:ca:b9:c3:6f:2f:cc:94:20:2c:e1:1b:80:dc:16:1a:db:
         ef:9e:48:9d:18:96:1d:67:6a:f7:0d:c2:38:84:36:1c:e2:c8:
         7a:be:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org