Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/nRNhbYqei9ucGD8b5o8OP8Rbvgs.roa
File:                     nRNhbYqei9ucGD8b5o8OP8Rbvgs.roa (raw, json)
Hash identifier:          3wbjdmxoYusVsiFMjN9UIXpoebMcBILBgUS7qKBiEJ0=
Subject key identifier:   9D:13:61:6D:8A:9E:8B:DB:9C:18:3F:1B:E6:8F:0E:3F:C4:5B:BE:0B
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       56
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/nRNhbYqei9ucGD8b5o8OP8Rbvgs.roa
Signing time:             Thu 13 Apr 2023 09:52:46 +0000
ROA not before:           Thu 13 Apr 2023 09:52:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb00::/30 maxlen: 30

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Apr 13 09:52:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9D13616D8A9E8BDB9C183F1BE68F0E3FC45BBE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:97:39:04:c4:22:0f:fe:a8:dc:66:81:be:
                    4e:ec:05:5e:16:ec:55:1a:b6:d3:7b:5b:e1:e5:01:
                    db:00:5f:b0:91:d7:71:7f:b4:86:2b:b6:07:c5:47:
                    2c:42:2b:94:65:46:ed:20:8e:d4:62:35:10:68:0d:
                    10:2b:76:6d:48:c3:8f:2d:71:2f:f0:7c:07:8e:ed:
                    ee:a4:05:f6:3d:59:e2:c6:50:f9:40:32:a0:15:39:
                    c4:39:6a:fa:74:6d:78:ca:51:33:63:a6:fe:d7:71:
                    20:33:68:e0:a2:77:60:1a:49:a8:3b:3b:4a:c2:d4:
                    72:52:23:e5:0c:3d:d2:64:3e:70:43:67:76:1b:fe:
                    38:f7:f1:c5:8b:1c:5b:40:67:44:a9:0e:b4:ac:8e:
                    83:e9:8b:d2:a0:c4:cd:42:8a:18:b0:95:a4:95:1f:
                    0a:5e:70:9a:65:aa:2a:4a:b8:11:76:fa:b7:15:89:
                    06:e6:2f:c6:95:1d:8b:c5:16:3c:12:04:19:3e:12:
                    f2:f6:c2:0f:45:b2:18:81:b3:57:ba:fc:7d:aa:d8:
                    32:b6:ee:14:3f:bc:6a:d7:1c:1c:41:a6:b1:04:68:
                    a0:54:d8:19:52:61:ce:44:08:ae:25:33:72:4f:cd:
                    bb:fc:ad:02:33:02:ea:e5:ce:87:58:01:83:8f:77:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:13:61:6D:8A:9E:8B:DB:9C:18:3F:1B:E6:8F:0E:3F:C4:5B:BE:0B
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/nRNhbYqei9ucGD8b5o8OP8Rbvgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/30

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:a1:e2:08:23:76:41:ec:31:e2:f7:f6:71:fa:65:a9:aa:
         ec:75:00:a2:38:b8:f5:fc:e3:91:61:21:19:87:f6:72:d1:7c:
         39:3e:cc:57:a2:ff:48:5b:d0:51:0a:aa:fc:0a:a5:d5:1c:9f:
         09:30:c5:f4:06:6c:20:d3:2d:21:a9:04:c2:bf:44:5b:04:96:
         16:fc:d0:2d:48:dc:65:7d:6f:e3:6f:40:a8:11:f7:ca:a5:ee:
         4f:23:b0:3b:cd:f1:4a:ae:9f:30:d6:ea:c0:e9:5b:06:06:c6:
         28:22:87:09:cb:24:98:12:71:10:79:eb:46:60:2a:2f:35:0b:
         d1:9b:ee:75:d1:39:73:72:a3:78:e6:f6:c5:2b:a4:87:64:bd:
         c5:6f:f8:4c:aa:f5:ec:ba:22:6d:4a:b1:52:05:68:5c:ce:cf:
         92:07:1c:8f:28:ef:cd:96:47:04:4e:b7:d1:dc:84:7e:28:e2:
         61:27:cf:a0:85:e1:5f:7b:5d:c7:b9:0d:9f:df:74:1c:06:7a:
         69:ee:15:25:75:79:df:4d:94:dd:59:33:4d:d6:a5:87:e5:0b:
         60:23:90:ed:b8:0a:0c:ae:ca:52:63:31:d5:69:f0:4a:89:d3:
         72:85:69:1c:a7:6e:2a:7f:12:8a:e2:5d:f5:5d:40:34:04:de:
         f8:61:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org