Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30132/57to20vgSbWyhQ7wwYontlZvnD0.roa
File:                     57to20vgSbWyhQ7wwYontlZvnD0.roa (raw, json)
Hash identifier:          k9h4W1QOanG+jY49YGpf14/v7qWAiepQ26e0Reh9T54=
Subject key identifier:   E7:BB:68:DB:4B:E0:49:B5:B2:85:0E:F0:C1:8A:27:B6:56:6F:9C:3D
Certificate issuer:       /CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
Certificate serial:       0E
Authority key identifier: 93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/57to20vgSbWyhQ7wwYontlZvnD0.roa
Signing time:             Sat 13 May 2023 05:46:12 +0000
ROA not before:           Sat 13 May 2023 05:46:12 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10019
IP address blocks:        2401:3200::/32 maxlen: 128

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
        Validity
            Not Before: May 13 05:46:12 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=E7BB68DB4BE049B5B2850EF0C18A27B6566F9C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:9d:72:78:a3:4a:5f:08:37:03:e3:5b:6d:
                    0b:3f:58:77:14:b5:d1:52:0e:2c:53:e4:b1:1b:18:
                    bc:6e:98:fd:cd:b2:60:c6:ff:8c:5c:76:55:f9:87:
                    40:0d:c6:17:86:bf:b4:d0:58:67:b4:f2:9a:67:ff:
                    a7:c2:29:f7:4d:a1:b3:16:9f:89:8f:67:72:97:9b:
                    21:f1:94:97:3f:c0:e1:8a:11:51:c6:a4:ef:ed:94:
                    a5:bf:a1:24:1b:b6:08:ca:b7:5c:04:bf:95:7b:c4:
                    06:8b:ed:d0:74:82:b2:11:8c:56:d3:8f:25:c1:f0:
                    47:7a:cb:02:89:82:36:c3:38:fe:70:c0:9b:95:a1:
                    20:19:1e:e3:cf:91:89:8b:3d:ec:81:0f:9e:31:1d:
                    12:cf:9e:cf:30:68:da:78:3d:e8:ca:be:2f:9a:44:
                    b8:24:53:bf:a7:da:f1:53:2c:34:cb:ea:bd:a3:78:
                    c9:c3:d5:64:d7:d7:7d:92:ea:6c:cb:85:7f:8f:75:
                    af:46:c1:a0:9e:01:0e:7f:ba:bb:f5:c5:ff:1a:9f:
                    94:6e:f1:d2:6d:98:e1:6d:36:5c:fd:cd:01:b0:8f:
                    e8:a2:c7:fa:2f:a0:28:e9:c1:4e:d6:97:8d:70:eb:
                    dc:9c:f9:99:2f:95:cd:7c:52:18:a6:cc:9e:39:a9:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:68:DB:4B:E0:49:B5:B2:85:0E:F0:C1:8A:27:B6:56:6F:9C:3D
            X509v3 Authority Key Identifier:
                keyid:93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/57to20vgSbWyhQ7wwYontlZvnD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:a3:ff:95:82:06:80:74:3d:c7:b8:68:db:a3:5a:d2:01:
         ed:22:93:c3:8b:83:0e:99:0a:72:91:94:22:58:5a:79:a1:df:
         28:6c:56:dc:65:10:ea:de:da:e0:1b:c4:44:a0:ce:76:f0:ab:
         28:5c:89:41:b6:b5:13:b0:68:e2:49:18:22:4b:a9:81:7a:1a:
         d0:4f:aa:af:0a:39:78:b7:fd:01:52:65:f8:00:28:9c:e8:d8:
         79:13:03:ba:b3:96:1c:e8:3f:42:14:cc:c5:90:80:5a:8e:2e:
         27:7b:e4:02:54:83:ff:48:3f:bc:a0:75:20:10:89:34:6e:4e:
         e0:60:9c:92:2e:a9:80:8f:df:de:df:67:25:4f:eb:4e:4d:ae:
         39:3b:15:0f:fa:a7:1f:7c:3d:3a:46:e7:a2:96:ac:32:89:be:
         04:50:39:c3:5b:9c:80:c0:c3:2a:ca:82:aa:f8:e4:60:fb:d2:
         3e:45:44:f2:32:68:93:27:ed:c2:ad:c5:65:9f:a0:8e:8a:d5:
         24:21:58:4f:df:8e:e9:35:cf:84:2a:78:72:78:c4:ab:c3:b4:
         bc:04:59:b0:60:e1:36:df:37:2a:dc:42:ee:93:ac:21:f7:7b:
         1d:d3:7f:9a:7e:d9:88:63:5f:dc:6a:0f:4a:b8:db:42:5a:c1:
         09:99:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org