Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30162/RAl0dtiGMpdgb_VNOU_LdbFP6OA.roa
File:                     RAl0dtiGMpdgb_VNOU_LdbFP6OA.roa (raw, json)
Hash identifier:          YLZD8AGg6tsaNCtP36YOotLiYl4d1xWRn/oslVBwEOw=
Subject key identifier:   44:09:74:76:D8:86:32:97:60:6F:F5:4D:39:4F:CB:75:B1:4F:E8:E0
Certificate issuer:       /CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
Certificate serial:       1E
Authority key identifier: 7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/RAl0dtiGMpdgb_VNOU_LdbFP6OA.roa
Signing time:             Fri 01 Sep 2023 01:30:16 +0000
ROA not before:           Fri 01 Sep 2023 01:30:16 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     24295
IP address blocks:        2404:ca00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
        Validity
            Not Before: Sep  1 01:30:16 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=44097476D8863297606FF54D394FCB75B14FE8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:76:34:32:b4:79:3a:32:4a:31:d7:4a:a9:
                    79:16:81:68:b5:08:a4:e6:6f:73:c3:69:4e:df:7f:
                    de:97:9d:27:4d:6c:20:5a:52:01:d0:0d:e1:67:fb:
                    9f:82:4b:6a:af:30:17:64:37:04:c2:4b:3b:81:ce:
                    f9:37:6e:d2:32:96:20:77:35:e7:3b:fa:c8:7f:ba:
                    ec:af:e7:68:e6:66:c3:7c:a3:c7:e0:20:2d:7d:b8:
                    cb:b3:83:0b:4d:f0:8e:25:1b:76:3b:02:2c:f3:3d:
                    f1:57:64:e8:ef:92:72:52:59:40:19:10:db:31:f3:
                    b2:9c:07:70:33:b9:00:3a:e5:0a:a3:69:b7:92:eb:
                    44:16:b3:18:61:26:a7:a5:ae:a1:cd:72:e2:62:42:
                    76:9d:4f:aa:af:6b:9b:61:34:55:d7:2f:54:3b:b1:
                    26:80:c6:59:b7:5a:59:46:96:8e:d0:45:07:ca:1d:
                    b0:5f:65:c6:92:54:3d:c2:82:a6:0d:8d:27:c1:fa:
                    05:b0:81:05:4e:3b:22:ec:9f:a5:57:97:94:16:1c:
                    18:9b:f6:fa:c5:f4:5d:23:08:96:5e:6a:3f:64:54:
                    a2:50:e7:72:d2:7a:57:20:a5:63:6a:16:b5:5f:95:
                    c4:97:64:f8:5e:2a:80:78:3f:f5:d3:cb:5c:f3:0c:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:09:74:76:D8:86:32:97:60:6F:F5:4D:39:4F:CB:75:B1:4F:E8:E0
            X509v3 Authority Key Identifier:
                keyid:7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/RAl0dtiGMpdgb_VNOU_LdbFP6OA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:ad:d9:01:a6:53:0e:df:5b:82:68:fa:55:65:3a:d3:56:
         2d:4f:9f:f8:bd:d1:46:32:a1:74:e4:ca:fa:d4:9f:e2:8e:4f:
         57:b7:bc:95:06:76:65:3f:fa:d7:33:32:ef:64:0b:ad:e2:1c:
         af:92:da:c7:5a:0f:14:ac:37:62:a3:6f:bc:ab:d0:37:f2:d9:
         97:b8:32:e7:36:a9:14:ff:19:2a:79:46:bd:af:39:08:56:8d:
         1e:88:6b:87:43:3b:cf:e7:a7:c2:3f:58:3f:98:17:66:b4:4b:
         75:87:68:5e:0c:aa:1e:ca:61:87:9c:6f:93:d8:4f:b2:9a:1c:
         0a:ca:d0:6d:ea:47:a2:6e:0a:99:51:45:0f:05:45:e9:4d:e2:
         71:cd:41:9f:bc:23:96:bb:79:6e:0d:eb:68:b7:da:33:05:3d:
         80:b3:fb:10:db:bf:0b:a3:c2:dc:2b:4c:d6:16:cc:4f:0d:eb:
         3c:13:00:74:7d:fc:73:42:b9:db:2b:ce:4e:79:57:9c:55:52:
         0c:77:30:eb:14:3d:f5:8c:30:9b:06:64:c4:b8:da:cd:ad:58:
         b0:84:22:d7:71:b6:1c:ec:f3:44:76:a4:03:7a:38:92:56:2d:
         3a:3d:f0:05:af:b6:16:78:13:6d:5e:d8:b9:1b:6a:26:3e:9e:
         31:04:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org