Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/TYhJismEiVqmkTEOXWVo_VG3EWA.roa
File:                     TYhJismEiVqmkTEOXWVo_VG3EWA.roa (raw, json)
Hash identifier:          ckaxq7Q0ky6EmBeW1leWyd2rHUAhPs5EK9LtANLMOHw=
Subject key identifier:   4D:88:49:8A:C9:84:89:5A:A6:91:31:0E:5D:65:68:FD:51:B7:11:60
Certificate issuer:       /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial:       3F
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/TYhJismEiVqmkTEOXWVo_VG3EWA.roa
Signing time:             Thu 13 Apr 2023 09:52:42 +0000
ROA not before:           Thu 13 Apr 2023 09:52:42 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55391
IP address blocks:        2409:10::/28 maxlen: 128

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
        Validity
            Not Before: Apr 13 09:52:42 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4D88498AC984895AA691310E5D6568FD51B71160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:58:29:63:bf:cc:10:bb:5f:dd:f9:05:51:3f:
                    14:f5:9d:a0:bb:03:fc:07:fb:ab:3c:f5:f6:7c:69:
                    24:36:4d:73:dd:57:0e:dc:80:f1:1a:99:e3:2c:a0:
                    b4:bf:d0:17:61:cf:e8:10:b1:26:70:06:b5:83:d2:
                    e7:cb:7f:98:7c:5a:65:65:98:aa:36:c9:47:2e:bc:
                    48:5a:8c:8b:cb:9d:e6:c5:e1:44:87:ec:fb:bc:77:
                    ad:c1:64:3b:aa:5c:d7:b8:7a:c4:d4:36:b6:75:4a:
                    49:5c:26:58:ee:5e:40:2a:0b:30:d3:dd:9a:ee:31:
                    08:35:90:51:ba:d9:0c:8b:e5:ed:c4:45:32:9d:e5:
                    96:9a:89:29:d3:74:03:fc:ad:83:2f:94:55:fa:32:
                    ce:d5:17:31:7f:b7:1a:a2:04:b8:ef:71:87:97:aa:
                    60:49:59:10:a3:47:b6:71:f3:65:f8:df:5e:10:37:
                    89:65:14:67:59:10:d2:55:0d:6f:00:e2:ba:a6:db:
                    cd:76:c8:4a:4b:21:a3:b2:6c:17:d6:90:4f:f2:a9:
                    de:a8:b8:c1:ee:49:c7:d2:bb:14:10:0f:0d:7e:64:
                    b4:91:33:55:f3:1b:4d:ad:0a:92:13:44:80:03:72:
                    aa:21:2d:a1:22:64:a0:7f:11:9f:84:9c:b8:0c:b4:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:88:49:8A:C9:84:89:5A:A6:91:31:0E:5D:65:68:FD:51:B7:11:60
            X509v3 Authority Key Identifier:
                keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/TYhJismEiVqmkTEOXWVo_VG3EWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:10::/28

    Signature Algorithm: sha256WithRSAEncryption
         e6:33:19:d8:f7:f1:ba:cd:d8:46:2d:62:21:ac:ed:fd:53:12:
         2f:42:9a:05:40:85:a4:cf:21:55:25:2a:03:40:a0:bb:d2:a9:
         e1:d3:26:88:fe:03:a1:8f:28:2c:bc:93:c9:39:94:5c:54:27:
         3f:91:f3:9d:1b:7b:4a:48:32:e9:78:53:ce:b4:42:b0:a1:8f:
         5a:a8:fc:de:0d:d6:62:f5:3a:4f:77:e8:7a:e2:b5:d5:ed:06:
         9a:69:bf:76:8a:6e:2c:ed:a6:e2:fd:ba:52:08:97:dd:87:17:
         d7:41:10:05:e0:98:42:ec:39:b9:68:72:49:80:f0:da:e8:e7:
         46:33:6f:a7:3f:37:7a:cd:4b:61:8a:be:51:60:b5:ae:c2:b6:
         81:ff:cf:00:1a:1f:6f:4d:ec:a3:e4:06:68:57:27:17:15:22:
         ff:65:7e:4c:0d:ca:b6:e0:ae:36:bd:27:4c:52:94:86:ce:ec:
         1c:a1:ac:11:ed:83:0c:16:b9:0e:85:f0:6c:8f:6b:d3:f9:cd:
         e8:35:4d:5d:7e:e9:9b:de:79:0c:a6:1f:cd:09:ca:fc:d0:f5:
         ca:78:17:93:b6:da:b4:a7:e4:05:e3:fc:e4:c5:38:b8:08:82:
         fe:ee:e0:7c:c0:e9:67:46:40:ae:bb:7a:44:29:bf:6b:6e:d1:
         d9:f5:0a:4c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NDBE
MDRBQjk3ODgwMTg2N0Y3MTE1NDZEMTZGQjQ3NkEyNzhGQzlBMB4XDTIzMDQxMzA5
NTI0MloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoNEQ4ODQ5OEFDOTg0ODk1
QUE2OTEzMTBFNUQ2NTY4RkQ1MUI3MTE2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPFYKWO/zBC7X935BVE/FPWdoLsD/Af7qzz19nxpJDZNc91XDtyA
8RqZ4yygtL/QF2HP6BCxJnAGtYPS58t/mHxaZWWYqjbJRy68SFqMi8ud5sXhRIfs
+7x3rcFkO6pc17h6xNQ2tnVKSVwmWO5eQCoLMNPdmu4xCDWQUbrZDIvl7cRFMp3l
lpqJKdN0A/ytgy+UVfoyztUXMX+3GqIEuO9xh5eqYElZEKNHtnHzZfjfXhA3iWUU
Z1kQ0lUNbwDiuqbbzXbISksho7JsF9aQT/Kp3qi4we5Jx9K7FBAPDX5ktJEzVfMb
Ta0KkhNEgANyqiEtoSJkoH8Rn4ScuAy0/o0CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRNiEmKyYSJWqaRMQ5dZWj9UbcRYDAfBgNVHSMEGDAWgBRUDQSrl4gBhn9xFUbR
b7R2onj8mjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNTUvVkEwRXE1ZUlBWVpfY1JWRzBXLTBkcUo0X0pvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVkEwRXE1ZUlBWVpfY1JWRzBXLTBk
cUo0X0pvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTU1L1RZaEppc21FaVZxbWtURU9YV1ZvX1ZHM0VXQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQQkCQAQMA0GCSqGSIb3DQEBCwUAA4IBAQDmMxnY9/G6zdhGLWIhrO39
UxIvQpoFQIWkzyFVJSoDQKC70qnh0yaI/gOhjygsvJPJOZRcVCc/kfOdG3tKSDLp
eFPOtEKwoY9aqPzeDdZi9TpPd+h64rXV7Qaaab92im4s7abi/bpSCJfdhxfXQRAF
4JhC7Dm5aHJJgPDa6OdGM2+nPzd6zUthir5RYLWuwraB/88AGh9vTeyj5AZoVycX
FSL/ZX5MDcq24K42vSdMUpSGzuwcoawR7YMMFrkOhfBsj2vT+c3oNU1dfumb3nkM
ph/NCcr80PXKeBeTttq0p+QF4/zkxTi4CIL+7uB8wOlnRkCuu3pEKb9rbtHZ9QpM
-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org