Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yxRFBtLuyUoQtBM3zRyoMdhmKpA.roa
File:                     yxRFBtLuyUoQtBM3zRyoMdhmKpA.roa (raw, json)
Hash identifier:          tJJbpq6f4RKvbLNmnXzkHvB2ssBHU4Lw8QO/okTZLvU=
Subject key identifier:   CB:14:45:06:D2:EE:C9:4A:10:B4:13:37:CD:1C:A8:31:D8:66:2A:90
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01F9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yxRFBtLuyUoQtBM3zRyoMdhmKpA.roa
Signing time:             Tue 30 May 2023 17:40:19 +0000
ROA not before:           Tue 30 May 2023 17:40:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CB144506D2EEC94A10B41337CD1CA831D8662A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:42:59:57:a4:52:c5:ac:87:c1:74:15:fb:
                    a4:fc:08:cf:47:ed:2b:a7:a2:c1:a1:49:e0:4c:67:
                    8d:21:21:cf:df:d6:92:4f:d8:7f:f5:00:01:5a:8c:
                    e4:63:22:eb:a3:ed:c3:dd:c9:d4:a9:cb:72:1c:37:
                    81:f6:98:42:1e:b1:00:7b:11:20:cf:94:77:d6:6f:
                    a1:12:67:5b:f5:40:46:8c:9e:57:09:ac:15:ff:75:
                    f0:a7:1f:55:9b:1d:d3:14:e1:f8:ff:1d:67:02:7e:
                    5d:a9:a3:c4:6f:1d:60:63:be:81:0b:db:cd:ba:83:
                    96:10:4f:90:45:d6:4b:8c:00:5f:47:f8:ce:28:49:
                    c3:d5:df:f3:4a:dc:67:d5:fe:06:e3:11:fa:04:cb:
                    ee:a3:b9:48:c8:70:c1:17:40:5e:cd:b8:18:a2:0e:
                    b7:5e:50:a9:f1:99:5d:20:8d:1b:04:56:8c:79:74:
                    cf:68:f2:17:0c:7b:22:83:9b:b5:05:f2:a5:56:94:
                    85:5b:e0:d0:a0:cd:46:b9:cb:c4:01:00:37:cb:b0:
                    2e:de:21:78:f5:dd:89:e0:72:86:df:f1:4b:bf:70:
                    4c:5a:8b:a9:65:3d:3f:29:54:09:fc:dd:32:5c:e2:
                    34:3b:02:70:07:9d:c4:ff:dd:d3:89:c4:00:3b:a8:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:45:06:D2:EE:C9:4A:10:B4:13:37:CD:1C:A8:31:D8:66:2A:90
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yxRFBtLuyUoQtBM3zRyoMdhmKpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:ae:9f:d6:6e:77:0c:68:60:76:34:a2:53:a3:d1:41:80:
         b7:4a:d2:fa:9f:5d:19:31:f7:15:56:7c:b9:e4:60:ef:37:c6:
         b6:8f:66:6e:1a:ae:80:f1:23:ac:c6:10:f7:ef:b2:7d:f4:ee:
         eb:d6:1d:58:1d:e1:d0:1e:25:34:85:11:ae:ac:1d:79:4a:92:
         f0:b6:a3:42:0f:2a:f7:55:a9:c4:69:48:e6:ac:5b:48:cb:dd:
         f8:0e:4f:29:3f:70:f7:1f:68:d1:30:eb:cc:58:53:51:e9:b1:
         72:46:85:19:ab:4e:0d:c6:82:6e:b1:f6:b2:2a:66:49:96:f2:
         6d:89:e4:47:dd:1c:70:24:3c:4e:5c:5b:c5:4f:4d:4f:33:19:
         e5:32:dc:9e:c8:e9:c1:8f:51:59:92:74:26:4e:9a:80:3f:b3:
         c3:f3:27:2f:db:ae:18:bb:98:7c:49:d3:73:a0:52:b4:9a:51:
         0f:00:ae:26:4f:8c:9c:f8:f4:38:e3:d9:31:76:fd:bd:84:dd:
         8b:70:cd:d8:f7:69:ae:ff:4f:a4:c8:14:8d:7d:54:46:65:bd:
         e3:46:40:09:5b:1b:83:f6:ec:ab:cd:0b:e1:42:ef:01:54:46:
         f7:c0:e3:b1:09:a7:cc:fa:91:33:91:93:7d:d0:15:5a:df:ba:
         9b:7b:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org