Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/H_mPhs_9RhmbaXlWPfvkIkO0TAs.roa
File:                     H_mPhs_9RhmbaXlWPfvkIkO0TAs.roa (raw, json)
Hash identifier:          upk83c/7QH6rKwXzCN55+sZH5rN0MoGw2ianLn9AmZ8=
Subject key identifier:   1F:F9:8F:86:CF:FD:46:19:9B:69:79:56:3D:FB:E4:22:43:B4:4C:0B
Certificate issuer:       /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial:       05
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/H_mPhs_9RhmbaXlWPfvkIkO0TAs.roa
Signing time:             Sat 22 Jul 2023 09:31:42 +0000
ROA not before:           Sat 22 Jul 2023 09:31:42 +0000
ROA not after:            Sun 21 Jul 2024 08:56:38 +0000
asID:                     63771
IP address blocks:        2401:7640::/31 maxlen: 48

Validation:               Failed, certificate revoked on Sat 22 Jul 2023 11:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
        Validity
            Not Before: Jul 22 09:31:42 2023 GMT
            Not After : Jul 21 08:56:38 2024 GMT
        Subject: CN=1FF98F86CFFD46199B6979563DFBE42243B44C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:4a:8d:13:09:e6:6c:64:3d:f9:58:9b:ac:
                    4b:c5:ac:1f:a5:7f:dc:bd:0c:bc:50:84:41:11:44:
                    9f:a5:8f:60:27:ed:02:8d:ff:fe:e5:70:f2:88:a7:
                    76:69:a0:8b:6d:71:45:de:80:12:11:85:55:fa:54:
                    cf:33:c5:12:aa:95:af:b5:b3:dc:d2:49:11:2f:7c:
                    be:d0:72:44:f5:dd:62:23:e1:7b:f2:f8:1b:25:10:
                    0b:2d:4a:5a:96:4d:07:84:cb:78:37:60:af:c7:cd:
                    ec:c2:85:78:39:64:05:7c:7b:b5:8d:59:c9:2b:42:
                    db:f9:6e:d3:02:de:d7:80:8a:b3:51:2c:91:b2:e5:
                    66:50:04:9c:ac:bd:cd:92:d9:26:ca:f8:cc:5d:ba:
                    2e:fb:4d:f1:74:0d:37:43:4d:c6:d5:d0:c6:ae:36:
                    73:2c:89:94:11:ab:b2:3f:a4:f4:f1:06:c9:8c:7b:
                    14:24:15:2d:5d:89:fa:9c:20:ab:3a:d0:96:5e:a0:
                    77:5c:23:f4:db:3d:4c:85:2d:ae:2f:e0:8c:85:f1:
                    bc:9b:bc:57:4f:f2:a6:c1:cd:6f:8f:20:8a:09:69:
                    e0:9b:5c:25:c3:18:a7:2a:e4:c0:1e:a0:6f:1c:21:
                    44:24:bf:f1:6c:0e:95:25:33:fa:fc:d5:1a:65:ff:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F9:8F:86:CF:FD:46:19:9B:69:79:56:3D:FB:E4:22:43:B4:4C:0B
            X509v3 Authority Key Identifier:
                keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/H_mPhs_9RhmbaXlWPfvkIkO0TAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7640::/31

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:8e:e1:8e:b4:49:ee:64:d0:37:55:91:98:f3:82:c9:12:
         87:05:7b:90:55:f1:d2:c0:3e:df:1f:85:70:70:91:7e:c1:68:
         73:5d:ee:ba:93:a1:c0:b5:49:6a:83:6b:72:3d:f0:71:7d:8b:
         24:6a:7d:1d:98:7e:7b:9b:40:5e:d7:fd:53:56:45:a0:47:e9:
         d6:e2:82:f6:74:ac:e5:89:19:2a:17:88:b4:53:2e:76:86:01:
         ba:66:ca:6d:5c:a2:9a:a7:78:d3:a5:87:6c:1e:2e:3c:69:91:
         bd:e9:f9:4a:76:5f:1d:8a:3a:f4:74:66:e1:31:f3:f4:39:b9:
         ee:23:57:16:ff:b8:ce:fb:7d:f6:c0:94:ee:97:48:b8:fd:6e:
         d4:8c:00:d4:78:97:32:44:70:d0:26:01:11:c5:ed:c7:64:e2:
         8a:c8:f4:fc:78:68:70:b7:0a:04:03:cc:66:f6:c7:28:bb:4e:
         af:5c:ee:80:03:68:49:53:41:70:9a:89:b9:ac:89:6b:3a:ad:
         d5:9a:87:d7:42:c3:64:bd:d0:26:46:44:a0:2e:b9:af:af:14:
         f8:ae:b7:7f:a5:a5:50:cf:54:90:40:86:9c:78:4c:76:a7:cc:
         f4:fa:b1:1a:d6:05:fc:15:a3:0b:56:67:35:e4:b8:27:c9:be:
         3b:7a:dc:e1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Njk1
OTVFQzRBMEMzMUQ3NEJBODk2M0MyRUNBN0VCNDgyMjUxRjc0MB4XDTIzMDcyMjA5
MzE0MloXDTI0MDcyMTA4NTYzOFowMzExMC8GA1UEAxMoMUZGOThGODZDRkZENDYx
OTlCNjk3OTU2M0RGQkU0MjI0M0I0NEMwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzBSo0TCeZsZD35WJusS8WsH6V/3L0MvFCEQRFEn6WPYCftAo3/
/uVw8oindmmgi21xRd6AEhGFVfpUzzPFEqqVr7Wz3NJJES98vtByRPXdYiPhe/L4
GyUQCy1KWpZNB4TLeDdgr8fN7MKFeDlkBXx7tY1ZyStC2/lu0wLe14CKs1EskbLl
ZlAEnKy9zZLZJsr4zF26LvtN8XQNN0NNxtXQxq42cyyJlBGrsj+k9PEGyYx7FCQV
LV2J+pwgqzrQll6gd1wj9Ns9TIUtri/gjIXxvJu8V0/ypsHNb48giglp4JtcJcMY
pyrkwB6gbxwhRCS/8WwOlSUz+vzVGmX/578CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQf+Y+Gz/1GGZtpeVY9++QiQ7RMCzAfBgNVHSMEGDAWgBRmlZXsSgwx10uoljwu
yn60giUfdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDMvWnBXVjdFb01NZGRMcUpZOExzcC10SUlsSDNRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnBXVjdFb01NZGRMcUpZOExzcC10
SUlsSDNRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzAzL0hfbVBoc185UmhtYmFYbFdQZnZrSWtPMFRBcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQEkAXZAMA0GCSqGSIb3DQEBCwUAA4IBAQBtnI7hjrRJ7mTQN1WRmPOC
yRKHBXuQVfHSwD7fH4VwcJF+wWhzXe66k6HAtUlqg2tyPfBxfYskan0dmH57m0Be
1/1TVkWgR+nW4oL2dKzliRkqF4i0Uy52hgG6ZsptXKKap3jTpYdsHi48aZG96flK
dl8dijr0dGbhMfP0ObnuI1cW/7jO+332wJTul0i4/W7UjADUeJcyRHDQJgERxe3H
ZOKKyPT8eGhwtwoEA8xm9scou06vXO6AA2hJU0Fwmom5rIlrOq3VmofXQsNkvdAm
RkSgLrmvrxT4rrd/paVQz1SQQIaceEx2p8z0+rEa1gX8FaMLVmc15Lgnyb47etzh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org