Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/0LK9ROD43xPRWimfGIs3Jtik-Vw.roa
File:                     0LK9ROD43xPRWimfGIs3Jtik-Vw.roa (raw, json)
Hash identifier:          yEyt0+krhpnDtv/uQXdzDEWpSoh3ydUuP3JJ6MMBFAs=
Subject key identifier:   D0:B2:BD:44:E0:F8:DF:13:D1:5A:29:9F:18:8B:37:26:D8:A4:F9:5C
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       0F
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/0LK9ROD43xPRWimfGIs3Jtik-Vw.roa
Signing time:             Tue 12 Sep 2023 01:17:59 +0000
ROA not before:           Tue 12 Sep 2023 01:17:59 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     17682
IP address blocks:        2402:1580:296::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Sep 12 01:17:59 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=D0B2BD44E0F8DF13D15A299F188B3726D8A4F95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:0a:c1:4f:1a:a1:4e:56:c0:a3:d5:c3:35:
                    e3:ab:fc:8d:09:df:25:5e:47:0d:34:6d:26:95:fd:
                    3b:d9:39:35:df:bb:82:43:7e:d3:6e:3d:3e:d6:71:
                    9a:9b:00:0b:f5:47:f5:e9:07:3e:39:df:63:6f:b9:
                    80:3b:99:bd:a5:69:47:35:0d:9c:0d:d6:20:e4:97:
                    4e:fa:b9:c7:e1:02:95:1f:69:84:8a:0f:b4:82:88:
                    66:c0:f6:9e:68:02:ee:26:de:1c:59:2b:04:23:ac:
                    86:d8:21:a5:12:7b:0a:14:b6:b1:f2:f1:27:44:0f:
                    8e:51:48:fc:74:22:38:20:85:d8:c3:ff:d8:39:8a:
                    4b:5d:5a:34:0c:62:6d:bd:67:58:ee:ba:ce:08:23:
                    c1:97:03:ee:e1:9e:68:48:11:43:c0:31:81:be:0f:
                    04:88:7c:86:46:75:67:99:d7:16:a1:98:df:50:d9:
                    d3:cd:e7:5e:d7:55:12:c8:76:6e:78:8c:10:5b:64:
                    4f:ab:6b:17:af:19:0f:8e:a4:d1:7c:0e:7f:a2:ca:
                    22:0d:e4:b2:1d:44:48:ea:ea:66:a4:73:26:79:92:
                    57:53:75:aa:2b:71:e7:ff:58:40:4c:41:31:5d:74:
                    20:12:7d:40:7d:2f:3f:2c:9e:a1:a0:3b:72:48:ff:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B2:BD:44:E0:F8:DF:13:D1:5A:29:9F:18:8B:37:26:D8:A4:F9:5C
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/0LK9ROD43xPRWimfGIs3Jtik-Vw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1580:296::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:0a:bc:ab:7f:69:8c:cc:5d:7d:d6:0f:dd:ed:b0:10:0b:
         43:75:06:5e:6f:7c:b4:9e:f2:c3:c8:83:df:bd:58:d7:b9:36:
         d2:72:da:6c:32:46:26:13:42:1f:60:a5:e2:33:57:82:22:2e:
         75:5b:56:d2:7a:9a:74:bd:d5:84:7e:a6:b9:43:f1:8c:c2:d3:
         e6:5a:f5:85:c4:98:c2:6c:0e:b1:82:71:0d:c5:2e:27:4a:cf:
         d7:f5:20:70:8a:ff:b9:0e:5d:1e:9b:43:8c:5c:30:39:85:e7:
         49:e3:1d:db:2a:d2:be:f8:b8:ec:cc:e6:78:7e:6e:1a:9f:7a:
         ab:cd:28:6a:c5:16:2a:37:8c:e0:22:42:1e:c1:b1:78:f4:05:
         6b:34:09:40:ed:12:05:01:01:51:44:eb:a4:48:0d:d2:ca:ba:
         4b:34:44:4f:23:f8:56:39:09:62:3f:f1:d5:e7:6d:d5:96:27:
         6b:a8:20:e4:d2:ce:17:c2:aa:45:b2:81:36:88:7e:2e:71:8d:
         f7:1f:8a:4a:08:f6:d4:ba:fd:ff:4f:58:aa:90:17:7e:91:60:
         c4:ec:31:95:99:41:c1:65:41:97:0b:40:1b:e8:03:a4:c5:ab:
         01:03:53:cc:6e:10:6b:8d:c4:19:f1:b0:00:fa:7e:e9:11:16:
         bb:77:f1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org