Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30188/JE6-7h8SL8gbuiQEEx95FUNUez0.roa
File:                     JE6-7h8SL8gbuiQEEx95FUNUez0.roa (raw, json)
Hash identifier:          GkaYknu3LKRD3diHuvAEnxOqvNlqLMiY/8ZxZdqY8WM=
Subject key identifier:   24:4E:BE:EE:1F:12:2F:C8:1B:BA:24:04:13:1F:79:15:43:54:7B:3D
Certificate issuer:       /CN=157E088BE15A585F688D86A671D88F0150C3EDBA
Certificate serial:       10
Authority key identifier: 15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/JE6-7h8SL8gbuiQEEx95FUNUez0.roa
Signing time:             Thu 27 Apr 2023 01:48:51 +0000
ROA not before:           Thu 27 Apr 2023 01:48:51 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        2400:df00::/32 maxlen: 128

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157E088BE15A585F688D86A671D88F0150C3EDBA
        Validity
            Not Before: Apr 27 01:48:51 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=244EBEEE1F122FC81BBA2404131F791543547B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:ed:6e:db:4c:fc:27:0f:24:30:70:2d:4b:
                    9f:9d:a1:f4:89:7c:bb:8f:85:4b:74:68:06:03:40:
                    b3:e7:15:fd:d6:0a:48:e1:66:38:c1:8a:ad:a9:a3:
                    b1:31:50:c7:f7:7a:01:d9:e8:87:96:59:93:6e:1c:
                    17:7a:b8:eb:0b:a4:97:db:a2:91:fe:89:86:41:ec:
                    17:31:76:8c:4f:14:c1:f2:b7:e4:68:ee:e5:18:a1:
                    59:b8:f7:3f:9a:a1:1a:28:f7:33:0d:58:dc:82:e2:
                    8f:e0:02:fa:28:8a:02:be:33:5b:ee:f7:25:27:14:
                    2d:23:9b:c3:ac:65:9f:05:44:e7:bb:9f:23:21:06:
                    61:e4:dd:ae:d6:4b:b9:cd:2f:78:e4:9c:ad:8c:01:
                    4a:a2:0e:4b:80:6f:10:65:31:ed:02:bb:cf:e8:a1:
                    de:99:e4:2a:97:d1:37:c0:04:1f:93:3d:44:aa:fc:
                    b5:ce:ee:a9:ec:fa:d3:e2:73:30:22:f0:5f:ab:df:
                    d5:28:0b:d3:b0:ad:e2:2c:e0:77:37:1b:8f:82:a3:
                    6e:53:2d:56:a9:52:c3:b5:22:e5:14:81:e6:3c:ef:
                    be:c2:00:da:62:59:da:c7:15:7a:13:82:52:d1:55:
                    a3:c0:9c:f3:5b:fa:aa:f5:59:60:cf:a3:6d:8a:b0:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4E:BE:EE:1F:12:2F:C8:1B:BA:24:04:13:1F:79:15:43:54:7B:3D
            X509v3 Authority Key Identifier:
                keyid:15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/JE6-7h8SL8gbuiQEEx95FUNUez0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:df00::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:07:97:3a:1c:11:fc:66:59:2f:dd:ea:4c:06:3c:69:36:07:
         33:74:ea:4f:d1:b1:e4:51:0c:ed:e1:7f:28:1a:d3:77:c8:15:
         b2:cb:d4:38:c2:98:db:6d:8c:dc:8d:a7:d7:8d:56:53:c7:03:
         64:2f:c1:09:3b:78:58:03:0f:24:5c:b1:13:83:16:77:e9:45:
         da:f8:2d:90:d2:70:45:22:c9:56:a2:1e:3f:3e:c6:63:35:c6:
         47:51:ef:d1:55:4e:97:cb:9a:06:68:fd:7c:e2:64:3f:ff:f3:
         05:60:1e:bf:06:d1:f7:65:47:b8:48:4d:85:d9:a5:be:f0:a9:
         42:db:8a:b7:03:33:a9:1b:04:e5:c4:d6:b1:fc:37:77:4e:ba:
         4b:b8:62:0d:cf:0c:71:6d:a8:01:cc:8a:23:37:f8:46:66:b3:
         7e:ab:32:8c:66:11:51:49:f2:f8:2c:47:8a:07:26:47:4b:e4:
         35:c5:68:cb:b8:ff:43:b4:55:18:38:f0:c0:86:d8:19:1a:f8:
         af:55:f9:10:f2:cb:23:44:75:1d:4c:86:0d:d8:0c:fa:8e:ec:
         82:ce:7c:85:c1:0b:d2:e5:11:d7:80:fe:10:0d:49:b3:39:da:
         5b:ea:2f:5b:fe:43:76:e6:fb:04:de:96:11:03:36:43:ad:df:
         f0:38:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org