Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30140/9Fq35icECdvaVTSBYUWqFywD7dc.roa
File:                     9Fq35icECdvaVTSBYUWqFywD7dc.roa (raw, json)
Hash identifier:          JpSWfO7+F2Iz8Oz9kGWM11fk+bbIO3UKrnT65T2GuBw=
Subject key identifier:   F4:5A:B7:E6:27:04:09:DB:DA:55:34:81:61:45:AA:17:2C:03:ED:D7
Certificate issuer:       /CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D
Certificate serial:       2B
Authority key identifier: A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/9Fq35icECdvaVTSBYUWqFywD7dc.roa
Signing time:             Tue 01 Aug 2023 01:28:57 +0000
ROA not before:           Tue 01 Aug 2023 01:28:57 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     17948
IP address blocks:        2402:d600::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D
        Validity
            Not Before: Aug  1 01:28:57 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F45AB7E6270409DBDA5534816145AA172C03EDD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:ae:6f:0d:2c:a6:33:93:40:2d:14:d5:8f:
                    f3:86:8e:32:03:ac:8b:2a:5a:79:c6:91:48:a3:77:
                    d3:4a:51:34:c4:5a:e0:1a:b5:29:af:fa:93:c0:9f:
                    f0:36:18:da:d8:aa:0b:ab:51:a2:92:9d:f7:0b:94:
                    df:8d:ea:4d:e0:31:f1:46:1c:47:69:33:1a:12:a5:
                    da:6c:62:e8:ab:2f:f7:9f:70:2c:96:19:c0:b8:5b:
                    7f:06:ca:d4:e5:79:af:4b:4f:54:de:6d:db:a5:53:
                    16:c9:90:96:07:d5:8b:32:25:a8:23:a0:be:e9:71:
                    ef:e8:4f:0e:92:5d:74:3f:52:1c:03:0a:19:99:5f:
                    f8:28:32:6b:d5:96:ad:84:a7:ce:60:9f:3b:84:1f:
                    d1:b5:d7:dc:8a:b7:50:ed:69:dc:c6:8f:9d:d7:e1:
                    8f:4e:2f:4c:53:93:bf:e8:ab:05:af:87:f2:a0:b7:
                    fd:33:8e:d8:3f:d2:bb:7f:01:84:93:69:d6:68:d6:
                    8c:04:2a:8f:8c:e2:88:c8:43:9f:ec:df:11:2f:5c:
                    a8:6d:0a:66:43:7c:22:37:be:8b:7f:86:63:d8:03:
                    60:3f:81:fa:67:ea:fb:ff:48:06:5b:23:8b:b6:81:
                    7c:ae:9e:d6:20:9c:07:ba:86:01:5c:01:27:ae:23:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5A:B7:E6:27:04:09:DB:DA:55:34:81:61:45:AA:17:2C:03:ED:D7
            X509v3 Authority Key Identifier:
                keyid:A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/9Fq35icECdvaVTSBYUWqFywD7dc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:57:e0:2e:0c:0e:ab:84:f5:c8:5e:e7:9e:85:81:a5:da:
         b7:b2:d2:4c:a5:6a:ed:cb:37:a9:c1:ec:32:fb:24:ae:05:e1:
         54:c2:21:2e:24:ea:83:05:d5:21:cc:28:7f:f3:04:43:e2:3a:
         c9:94:f2:1a:19:2e:c6:3e:d2:a0:b1:9a:d0:72:ce:61:61:3c:
         d9:b7:f0:c4:60:1e:65:90:90:3b:b8:5b:24:a5:04:c7:7c:7f:
         45:20:17:41:06:59:b9:c9:23:82:3f:ea:7d:5f:88:7b:6d:cb:
         4b:89:cc:55:e8:29:bb:db:44:1a:53:0e:a7:23:7f:7e:a3:cf:
         25:a3:00:9e:8e:0c:42:43:f2:cf:fc:bc:95:94:50:e9:97:c4:
         ce:b4:de:d3:2f:d2:b5:12:df:0e:d8:a8:df:a6:93:88:26:62:
         0f:a2:de:b2:f5:e3:79:01:cf:c3:d7:72:f6:46:03:11:4b:4d:
         53:64:a0:69:1d:48:40:e5:73:97:d0:e8:68:be:7c:47:f4:21:
         7b:8c:8c:4c:f1:81:5b:29:ce:1f:aa:d4:e8:c0:44:5b:a3:d1:
         b5:99:e4:d6:28:81:b5:27:47:44:5b:18:08:4f:4d:fb:70:17:
         db:53:3a:31:f6:f2:06:05:9a:7f:71:eb:d0:13:ee:d8:87:10:
         08:71:dd:6b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjhF
Q0EyOUQwNkNCNEMwMDYxMUJBNEFEODUyNkYwNDkwQ0M2RTdEMB4XDTIzMDgwMTAx
Mjg1N1oXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoRjQ1QUI3RTYyNzA0MDlE
QkRBNTUzNDgxNjE0NUFBMTcyQzAzRURENzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKjIrm8NLKYzk0AtFNWP84aOMgOsiypaecaRSKN300pRNMRa4Bq1
Ka/6k8Cf8DYY2tiqC6tRopKd9wuU343qTeAx8UYcR2kzGhKl2mxi6Ksv959wLJYZ
wLhbfwbK1OV5r0tPVN5t26VTFsmQlgfVizIlqCOgvulx7+hPDpJddD9SHAMKGZlf
+Cgya9WWrYSnzmCfO4Qf0bXX3Iq3UO1p3MaPndfhj04vTFOTv+irBa+H8qC3/TOO
2D/Su38BhJNp1mjWjAQqj4ziiMhDn+zfES9cqG0KZkN8Ije+i3+GY9gDYD+B+mfq
+/9IBlsji7aBfK6e1iCcB7qGAVwBJ64jlq0CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBT0WrfmJwQJ29pVNIFhRaoXLAPt1zAfBgNVHSMEGDAWgBSmjsop0Gy0wAYRukrY
Um8EkMxufTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNDAvcG83S0tkQnN0TUFHRWJwSzJGSnZCSkRNYm4wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcG83S0tkQnN0TUFHRWJwSzJGSnZC
SkRNYm4wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTQwLzlGcTM1aWNFQ2R2YVZUU0JZVVdxRnl3RDdkYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAtYAMA0GCSqGSIb3DQEBCwUAA4IBAQAMs1fgLgwOq4T1yF7nnoWB
pdq3stJMpWrtyzepwewy+ySuBeFUwiEuJOqDBdUhzCh/8wRD4jrJlPIaGS7GPtKg
sZrQcs5hYTzZt/DEYB5lkJA7uFskpQTHfH9FIBdBBlm5ySOCP+p9X4h7bctLicxV
6Cm720QaUw6nI39+o88lowCejgxCQ/LP/LyVlFDpl8TOtN7TL9K1Et8O2KjfppOI
JmIPot6y9eN5Ac/D13L2RgMRS01TZKBpHUhA5XOX0OhovnxH9CF7jIxM8YFbKc4f
qtTowERbo9G1meTWKIG1J0dEWxgIT037cBfbUzox9vIGBZp/cevQE+7YhxAIcd1r
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org