Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/Z4QCD-O3li0GO2I0gJrZPoxrVEk.roa
File:                     Z4QCD-O3li0GO2I0gJrZPoxrVEk.roa (raw, json)
Hash identifier:          Q+hoiQ7GAktUv2i0uIFEFXWSdiFpfZD9WL5Y+ak4+lQ=
Subject key identifier:   67:84:02:0F:E3:B7:96:2D:06:3B:62:34:80:9A:D9:3E:8C:6B:54:49
Certificate issuer:       /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial:       07
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/Z4QCD-O3li0GO2I0gJrZPoxrVEk.roa
Signing time:             Sat 22 Jul 2023 11:39:41 +0000
ROA not before:           Sat 22 Jul 2023 11:39:41 +0000
ROA not after:            Sun 21 Jul 2024 08:56:38 +0000
asID:                     63771
IP address blocks:        2401:7640::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 08:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
        Validity
            Not Before: Jul 22 11:39:41 2023 GMT
            Not After : Jul 21 08:56:38 2024 GMT
        Subject: CN=6784020FE3B7962D063B6234809AD93E8C6B5449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:62:86:29:4f:25:1b:4c:b4:7a:f1:d4:6c:f3:
                    f8:03:a5:7b:43:ee:5e:b7:f5:6a:24:1f:a6:df:31:
                    d7:08:ab:01:b9:b6:68:27:df:0b:63:e2:60:fe:8b:
                    b1:56:3e:ce:b7:2c:f5:eb:4a:ce:c3:b9:16:77:09:
                    e2:dc:c7:c5:58:8a:f9:da:76:1f:6c:eb:ce:1a:9c:
                    5f:15:50:7f:dc:bb:c6:5f:9a:38:12:a1:29:18:e9:
                    40:b0:c2:05:02:4e:90:ed:31:a8:94:ee:e0:02:51:
                    1e:1a:16:93:85:f1:03:70:43:6e:3c:02:6c:3d:f8:
                    10:2d:21:23:b9:9f:f3:f4:b0:a0:9e:b2:dd:ef:73:
                    e5:e3:fa:a1:9d:89:c2:ea:34:3c:fe:05:3c:57:14:
                    e1:b1:30:4d:74:8d:c9:25:29:b8:d6:50:a3:8c:a0:
                    d5:f0:6c:f9:82:d4:0c:b4:b6:cd:c9:c9:54:a7:f1:
                    47:67:35:46:e4:7c:3a:06:cc:7d:82:45:49:78:62:
                    6a:da:53:80:f7:6a:96:40:a1:7f:e2:5e:e1:9f:d9:
                    b5:b0:ff:61:80:7c:df:e5:32:25:53:19:b8:1f:82:
                    94:9c:5f:44:e6:c5:ad:df:bc:2a:ac:d8:05:c9:ec:
                    52:c5:52:d9:7d:00:d5:52:41:46:57:b0:23:05:17:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:02:0F:E3:B7:96:2D:06:3B:62:34:80:9A:D9:3E:8C:6B:54:49
            X509v3 Authority Key Identifier:
                keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/Z4QCD-O3li0GO2I0gJrZPoxrVEk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:df:08:30:7b:87:31:24:95:ee:bb:0f:f9:fa:74:19:2a:83:
         4d:d3:7b:d3:dc:70:3a:7d:19:6f:bd:0b:54:e0:81:95:90:be:
         9d:dc:4b:fd:69:d5:b7:3e:10:d3:0d:f3:f2:39:29:c9:10:e9:
         1a:e1:9d:71:f0:53:8a:ac:46:d2:8c:15:19:b3:ba:c2:b3:e8:
         de:5a:da:28:74:5f:a6:8e:83:23:2a:f6:b3:97:61:1c:37:4b:
         54:bb:20:95:03:d7:18:84:f9:d2:78:7e:0a:57:c4:e7:01:f3:
         06:d3:32:75:e6:79:86:ac:bb:6c:b0:a2:04:ae:dd:a2:3b:44:
         5b:72:61:ae:23:40:11:6a:a0:82:ec:a1:67:3e:cc:1f:e5:91:
         b8:30:ee:6a:14:3e:32:81:10:7f:c7:c6:93:b3:89:1c:52:17:
         1f:3b:6c:d6:46:f8:77:c2:3c:68:ed:b3:b8:a6:61:41:85:03:
         d6:c7:3b:3e:f9:ff:37:42:66:ce:58:19:cc:14:53:fa:97:f8:
         bd:74:30:74:fc:07:d0:20:35:b0:c6:56:7d:8f:ce:a9:7f:1e:
         1c:93:ef:80:3e:91:45:b9:21:91:ef:9f:b0:1b:e8:91:0e:ae:
         c8:45:f2:b5:54:4a:30:16:c9:58:04:3b:69:9c:94:a2:59:77:
         0e:18:4d:3c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Njk1
OTVFQzRBMEMzMUQ3NEJBODk2M0MyRUNBN0VCNDgyMjUxRjc0MB4XDTIzMDcyMjEx
Mzk0MVoXDTI0MDcyMTA4NTYzOFowMzExMC8GA1UEAxMoNjc4NDAyMEZFM0I3OTYy
RDA2M0I2MjM0ODA5QUQ5M0U4QzZCNTQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPVihilPJRtMtHrx1Gzz+AOle0PuXrf1aiQfpt8x1wirAbm2aCff
C2PiYP6LsVY+zrcs9etKzsO5FncJ4tzHxViK+dp2H2zrzhqcXxVQf9y7xl+aOBKh
KRjpQLDCBQJOkO0xqJTu4AJRHhoWk4XxA3BDbjwCbD34EC0hI7mf8/SwoJ6y3e9z
5eP6oZ2Jwuo0PP4FPFcU4bEwTXSNySUpuNZQo4yg1fBs+YLUDLS2zcnJVKfxR2c1
RuR8OgbMfYJFSXhiatpTgPdqlkChf+Je4Z/ZtbD/YYB83+UyJVMZuB+ClJxfRObF
rd+8KqzYBcnsUsVS2X0A1VJBRlewIwUXNg8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRnhAIP47eWLQY7YjSAmtk+jGtUSTAfBgNVHSMEGDAWgBRmlZXsSgwx10uoljwu
yn60giUfdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDMvWnBXVjdFb01NZGRMcUpZOExzcC10SUlsSDNRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnBXVjdFb01NZGRMcUpZOExzcC10
SUlsSDNRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzAzL1o0UUNELU8zbGkwR08ySTBnSnJaUG94clZFay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAXZAMA0GCSqGSIb3DQEBCwUAA4IBAQB03wgwe4cxJJXuuw/5+nQZ
KoNN03vT3HA6fRlvvQtU4IGVkL6d3Ev9adW3PhDTDfPyOSnJEOka4Z1x8FOKrEbS
jBUZs7rCs+jeWtoodF+mjoMjKvazl2EcN0tUuyCVA9cYhPnSeH4KV8TnAfMG0zJ1
5nmGrLtssKIErt2iO0RbcmGuI0ARaqCC7KFnPswf5ZG4MO5qFD4ygRB/x8aTs4kc
UhcfO2zWRvh3wjxo7bO4pmFBhQPWxzs++f83QmbOWBnMFFP6l/i9dDB0/AfQIDWw
xlZ9j86pfx4ck++APpFFuSGR75+wG+iRDq7IRfK1VEowFslYBDtpnJSiWXcOGE08
-----END CERTIFICATE-----
Generated at Sun Jul 7 09:46:34 2024 by rpki-client on console-ams.rpki-client.org