Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30305/e-Qkyd8fGyEJ7VprVeDTTCU4MHk.roa
File:                     e-Qkyd8fGyEJ7VprVeDTTCU4MHk.roa (raw, json)
Hash identifier:          IP+erEgMtS76J04CHk1UP8MoG/XJ5bfAzSqr7opEfsQ=
Subject key identifier:   7B:E4:24:C9:DF:1F:1B:21:09:ED:5A:6B:55:E0:D3:4C:25:38:30:79
Certificate issuer:       /CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4
Certificate serial:       11
Authority key identifier: F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/e-Qkyd8fGyEJ7VprVeDTTCU4MHk.roa
Signing time:             Wed 11 Sep 2024 06:06:49 +0000
ROA not before:           Wed 11 Sep 2024 06:06:49 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        2402:c600::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 06:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4
        Validity
            Not Before: Sep 11 06:06:49 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7BE424C9DF1F1B2109ED5A6B55E0D34C25383079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:a5:cb:d4:00:99:c8:be:e8:b4:62:59:9f:
                    31:c2:ab:6c:f2:e2:77:69:a1:3a:b0:e3:8c:31:57:
                    4e:bb:d2:e3:75:aa:5e:4f:68:3f:6e:8f:cc:56:7d:
                    17:48:7c:36:01:3c:b6:f0:d6:43:43:78:f0:5a:28:
                    65:b5:be:27:30:92:be:11:fd:bf:c9:d1:8d:4f:e6:
                    7b:6e:80:1b:c8:01:8d:91:4c:96:34:de:79:2b:86:
                    6a:b5:9c:91:72:da:05:1f:2a:cb:e5:00:d7:f3:e9:
                    23:f3:b0:ae:a5:69:62:92:99:97:3b:6f:36:40:d0:
                    a3:3f:a9:4a:ec:64:d3:9d:39:f2:f1:95:f4:0e:f7:
                    9c:c3:e6:10:28:c3:78:0b:99:03:28:2b:b9:29:b7:
                    72:99:85:66:1c:00:d0:40:af:c7:76:d1:91:4f:f1:
                    1f:04:d4:c4:43:65:49:d9:18:8e:df:6f:46:50:f5:
                    db:87:a0:38:a8:05:65:5d:03:9b:15:43:34:97:0b:
                    95:a7:de:ec:06:73:0f:72:f4:3a:6f:87:0c:6d:7f:
                    04:71:d4:3d:b8:1e:67:29:c6:50:22:62:9b:e6:79:
                    a2:45:61:18:ce:9f:d2:c6:fb:cd:d0:2f:c2:fb:22:
                    1e:91:65:60:da:16:68:a2:a9:45:8a:31:9d:bb:4d:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:24:C9:DF:1F:1B:21:09:ED:5A:6B:55:E0:D3:4C:25:38:30:79
            X509v3 Authority Key Identifier:
                keyid:F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/e-Qkyd8fGyEJ7VprVeDTTCU4MHk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:e2:98:82:c9:cb:0e:73:95:20:37:82:ee:aa:12:ea:e4:38:
         51:fb:45:c4:b0:5b:e9:c4:c2:f1:b1:85:5b:96:35:c4:4c:d7:
         cb:fe:f9:aa:02:d3:6d:05:41:44:e9:af:e5:7e:f8:d0:68:c9:
         bc:28:4f:19:c6:6d:e5:1f:37:31:77:3f:39:39:c7:b4:11:96:
         ac:ed:ed:a7:2b:0a:c8:a6:2c:59:36:e7:13:82:30:a2:c7:58:
         8e:63:0a:fa:38:89:58:5a:90:cb:ad:3f:68:a4:ff:d0:14:79:
         81:b4:aa:75:d6:ac:e0:d1:79:67:60:7c:38:35:8b:c1:bd:4e:
         85:3a:fd:ad:52:d9:30:8a:e2:d2:82:82:8b:7f:a0:53:73:3f:
         dd:1e:1a:0e:8b:4d:13:b3:c3:40:b7:26:6a:9d:b8:f1:93:ba:
         8a:e2:ad:62:94:42:f6:4c:d2:bc:8a:bb:d4:10:75:33:76:9a:
         72:7a:3d:2e:ca:76:73:fb:a7:4b:12:c1:8b:5f:6a:a0:42:e6:
         aa:67:5d:4e:c3:98:c1:89:5b:99:bf:5d:0a:dc:5e:48:67:9f:
         4d:d1:b3:2b:f5:67:74:63:d5:15:8f:26:31:b4:a4:d5:24:c3:
         99:1e:03:48:81:dc:56:67:5c:66:b8:71:3c:fe:bd:eb:a1:4e:
         d5:d3:2c:5e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOTcw
MjE2N0QxQ0FGMzY4OTE2NDJDOEJCNjIwNkVCRDQwN0Q0QUE0MB4XDTI0MDkxMTA2
MDY0OVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoN0JFNDI0QzlERjFGMUIy
MTA5RUQ1QTZCNTVFMEQzNEMyNTM4MzA3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMFZpcvUAJnIvui0YlmfMcKrbPLid2mhOrDjjDFXTrvS43WqXk9o
P26PzFZ9F0h8NgE8tvDWQ0N48FooZbW+JzCSvhH9v8nRjU/me26AG8gBjZFMljTe
eSuGarWckXLaBR8qy+UA1/PpI/OwrqVpYpKZlztvNkDQoz+pSuxk05058vGV9A73
nMPmECjDeAuZAygruSm3cpmFZhwA0ECvx3bRkU/xHwTUxENlSdkYjt9vRlD124eg
OKgFZV0DmxVDNJcLlafe7AZzD3L0Om+HDG1/BHHUPbgeZynGUCJim+Z5okVhGM6f
0sb7zdAvwvsiHpFlYNoWaKKpRYoxnbtNeKECAwEAAaOCAikwggIlMB0GA1UdDgQW
BBR75CTJ3x8bIQntWmtV4NNMJTgweTAfBgNVHSMEGDAWgBT5cCFn0crzaJFkLIu2
IG69QH1KpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDUvLVhBaFo5SEs4MmlSWkN5THRpQnV2VUI5U3FRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLVhBaFo5SEs4MmlSWkN5THRpQnV2
VUI5U3FRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA1L2UtUWt5ZDhmR3lFSjdWcHJWZURUVENVNE1Iay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAsYAMA0GCSqGSIb3DQEBCwUAA4IBAQAN4piCycsOc5UgN4LuqhLq
5DhR+0XEsFvpxMLxsYVbljXETNfL/vmqAtNtBUFE6a/lfvjQaMm8KE8Zxm3lHzcx
dz85Oce0EZas7e2nKwrIpixZNucTgjCix1iOYwr6OIlYWpDLrT9opP/QFHmBtKp1
1qzg0XlnYHw4NYvBvU6FOv2tUtkwiuLSgoKLf6BTcz/dHhoOi00Ts8NAtyZqnbjx
k7qK4q1ilEL2TNK8irvUEHUzdppyej0uynZz+6dLEsGLX2qgQuaqZ11Ow5jBiVuZ
v10K3F5IZ59N0bMr9Wd0Y9UVjyYxtKTVJMOZHgNIgdxWZ1xmuHE8/r3roU7V0yxe
-----END CERTIFICATE-----
Generated at Tue Oct 1 08:29:41 2024 by rpki-client on console-fra.rpki-client.org