Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/tX9T7HC5_YVZrnhomdROoKOm4Ns.roa
File:                     tX9T7HC5_YVZrnhomdROoKOm4Ns.roa (raw, json)
Hash identifier:          2aOnl8T/f1TMtF2pCtWcwn2TLcDF0jL0OoT50ahVfig=
Subject key identifier:   B5:7F:53:EC:70:B9:FD:85:59:AE:78:68:99:D4:4E:A0:A3:A6:E0:DB
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       5A
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/tX9T7HC5_YVZrnhomdROoKOm4Ns.roa
Signing time:             Mon 01 May 2023 01:31:13 +0000
ROA not before:           Mon 01 May 2023 01:31:13 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb00::/29 maxlen: 56

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May  1 01:31:13 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B57F53EC70B9FD8559AE786899D44EA0A3A6E0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:11:60:bb:b5:3e:ff:b6:cf:7b:6a:38:6a:
                    f5:8f:1a:ba:8c:09:0c:65:43:f0:53:35:58:b3:6d:
                    1a:56:d4:9b:bd:7a:3f:44:17:52:0f:cf:a0:fe:49:
                    3c:67:10:61:db:a9:75:e1:53:b2:4c:9f:4d:09:9a:
                    94:11:2c:f2:61:c4:a9:aa:2b:45:ed:cf:04:23:10:
                    6a:56:01:a7:bd:cc:61:6f:b5:bb:7f:23:4d:1e:b2:
                    a8:dc:8d:8e:db:36:92:45:7e:d5:69:d0:70:a2:f2:
                    6e:a6:d7:13:b1:4e:65:d6:09:f5:6d:88:62:05:a9:
                    74:4b:c8:64:7b:1a:d1:40:8f:eb:63:78:b6:91:7b:
                    41:3e:26:1e:42:52:db:72:11:00:a1:dc:c1:31:b3:
                    26:12:42:c0:90:27:57:c7:e9:9f:ca:89:36:f7:47:
                    08:da:81:29:6a:f2:5b:35:f5:e4:fb:cf:75:53:dd:
                    25:fe:dc:f9:0b:6c:69:95:c3:b7:d1:f1:cd:59:f7:
                    68:eb:a4:fb:6e:69:0b:07:43:4b:dc:d1:b5:2c:94:
                    88:68:84:65:66:57:58:69:4b:6f:c3:7d:47:a4:43:
                    21:4f:94:fb:0f:67:d7:1c:82:55:c8:4d:3b:2a:65:
                    cb:9b:fe:f3:a9:06:08:ec:1b:c0:0e:5e:40:89:46:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7F:53:EC:70:B9:FD:85:59:AE:78:68:99:D4:4E:A0:A3:A6:E0:DB
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/tX9T7HC5_YVZrnhomdROoKOm4Ns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:21:e2:a5:7b:51:1b:52:d6:43:ad:5c:08:f9:f2:3f:e7:0d:
         53:b9:8a:06:a5:74:f4:bf:66:b9:b0:4e:36:04:c6:3a:0f:df:
         33:98:c2:4f:bb:28:bb:c1:83:dc:2c:a1:7e:fe:57:c0:95:8f:
         3e:93:20:08:2d:fd:35:28:39:3f:d3:35:31:b9:72:02:d8:d8:
         7e:de:e8:a0:9d:fc:b0:d9:41:01:8c:36:01:53:09:49:a0:cc:
         0d:89:2a:42:4c:28:b2:64:5c:84:20:30:28:e0:3a:b8:f0:d8:
         78:08:a2:94:36:54:f7:08:9d:55:ce:83:03:f2:79:b9:e4:5f:
         80:e4:4d:d6:9a:a8:10:d1:ea:0a:76:ef:0e:f9:7b:b9:c8:2a:
         d4:f6:5e:b0:02:1e:f1:b7:ad:b1:8c:fb:26:3a:0e:d3:57:61:
         21:a1:82:6f:90:bb:c5:53:fc:53:17:96:b6:b7:84:47:b5:a8:
         60:67:e0:e0:0a:58:d2:10:70:ad:25:35:28:8d:fc:23:67:b8:
         e0:2e:49:dd:18:56:d2:5f:8f:aa:f7:7d:46:fc:82:f9:7e:4d:
         f6:44:69:c9:2b:a3:33:34:68:51:c5:e3:b3:f7:b1:86:8c:52:
         6f:ff:07:29:69:83:53:25:0e:47:e6:56:cf:b1:a6:54:e7:87:
         fd:f5:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org