Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yXs2jZzBUzKv_N6wHWNrg3GAucE.roa
File:                     yXs2jZzBUzKv_N6wHWNrg3GAucE.roa (raw, json)
Hash identifier:          17ad+JU8gHBY9di69ZGfxHGz0X7biZj+u5HCfokWeAM=
Subject key identifier:   C9:7B:36:8D:9C:C1:53:32:AF:FC:DE:B0:1D:63:6B:83:71:80:B9:C1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       5D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yXs2jZzBUzKv_N6wHWNrg3GAucE.roa
Signing time:             Tue 30 May 2023 16:04:25 +0000
ROA not before:           Tue 30 May 2023 16:04:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2f00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C97B368D9CC15332AFFCDEB01D636B837180B9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:13:ed:37:85:e7:4a:01:eb:ec:c5:65:ff:
                    c2:d3:9c:47:9f:67:b8:80:7f:e7:36:52:40:86:0c:
                    e4:a9:a4:26:6e:65:39:8f:2d:7a:ec:eb:84:80:f7:
                    4c:05:ec:da:11:1a:04:3d:0e:1d:c8:ad:4f:db:d6:
                    51:ce:39:cc:61:fe:32:b2:55:6b:ba:58:bf:7f:95:
                    c1:b0:64:b5:5c:a7:e9:9d:c3:9d:37:a8:dd:02:3d:
                    18:ed:ac:e5:64:86:50:15:d8:d6:77:e6:55:5c:4e:
                    b9:76:d6:e2:c6:a3:6c:1a:a0:5f:41:d2:a1:88:37:
                    ed:58:fe:f8:db:4e:92:22:46:72:40:29:b0:2f:7f:
                    43:11:7e:7e:04:9f:13:c1:d3:27:f0:a3:6a:44:3e:
                    ec:3e:0b:d6:4d:e1:d1:a0:c5:b8:2e:55:6d:41:7f:
                    29:ea:7b:57:41:16:0e:2f:2b:78:f7:95:13:60:05:
                    3a:cb:05:90:d1:e4:e8:ec:9d:28:ea:35:ef:f2:9e:
                    39:86:5c:c5:a3:ad:ab:b4:61:0e:32:c9:8e:52:38:
                    61:75:c1:7b:ad:30:92:8d:c9:68:9f:33:00:d9:94:
                    87:37:87:df:ef:47:f8:45:d2:7e:b7:a2:72:24:d7:
                    c6:12:91:fa:d6:6f:51:55:15:0c:bd:e6:41:6b:96:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:36:8D:9C:C1:53:32:AF:FC:DE:B0:1D:63:6B:83:71:80:B9:C1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yXs2jZzBUzKv_N6wHWNrg3GAucE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:41:21:f4:33:b9:7b:50:61:22:09:b2:05:71:1d:03:e9:81:
         8a:c2:e1:8b:6a:31:67:12:f2:5e:16:68:68:a4:07:d9:b0:1d:
         95:0e:86:cd:31:88:87:bf:0d:bf:4a:fc:c4:08:81:6e:96:76:
         5e:06:d7:10:e2:99:cc:50:99:73:4f:59:b0:f7:61:7e:a6:c8:
         92:6a:9b:a7:4e:3b:50:f1:d2:86:27:51:5c:ad:54:50:c5:fc:
         e3:99:64:28:c4:8a:d9:92:cb:ce:73:5f:f7:f1:ad:07:0d:04:
         ab:dd:79:a2:0b:4b:8f:6a:8b:6b:d2:b1:65:58:de:20:f1:3c:
         a4:57:9c:88:a0:13:db:b1:1c:b9:42:1d:9b:af:62:ec:e7:7b:
         77:51:98:aa:cc:3f:72:ca:1f:71:29:d3:a2:f1:a1:e3:99:5e:
         7d:f8:54:e8:33:96:cb:8b:24:ad:7a:6c:8d:11:95:64:61:71:
         21:aa:a3:9f:f0:d1:be:7f:85:58:23:fa:7b:8d:46:6d:2b:b8:
         e1:a2:2d:b8:83:d3:2a:f3:05:2e:0f:de:d0:75:06:ef:01:b0:
         1c:0e:d4:89:7f:e4:65:bf:2d:14:b3:42:07:3f:b2:92:c9:02:
         f3:5b:8c:b4:71:c6:c8:35:a5:0f:49:2f:70:38:d9:96:01:29:
         82:7f:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:13 2023 by rpki-client on console-ams.rpki-client.org