Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30357/K-ZfcsNjnjCub-gi5ouOiIwnECI.roa
File:                     K-ZfcsNjnjCub-gi5ouOiIwnECI.roa (raw, json)
Hash identifier:          lg3AivKlDOxYlvGjmZEofeRI5GypI5GIDcu7YvzgYpU=
Subject key identifier:   2B:E6:5F:72:C3:63:9E:30:AE:6F:E8:22:E6:8B:8E:88:8C:27:10:22
Certificate issuer:       /CN=A147363993399A2355D9A8BC90FB61382A2E8C38
Certificate serial:       0E
Authority key identifier: A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/K-ZfcsNjnjCub-gi5ouOiIwnECI.roa
Signing time:             Tue 11 Jul 2023 03:53:52 +0000
ROA not before:           Tue 11 Jul 2023 03:53:52 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     23816
IP address blocks:        2404:a600::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A147363993399A2355D9A8BC90FB61382A2E8C38
        Validity
            Not Before: Jul 11 03:53:52 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=2BE65F72C3639E30AE6FE822E68B8E888C271022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:57:ed:d3:64:7a:6f:22:d8:91:4a:8b:6c:
                    39:63:88:91:41:87:b2:d8:ef:0f:61:e6:8b:18:60:
                    f3:7b:94:08:ee:2a:65:21:23:d7:48:5d:be:2e:d1:
                    de:a5:81:f2:11:6a:52:fc:36:47:b0:03:6f:0a:79:
                    9f:64:f8:86:8f:1e:df:2f:4b:b6:e1:3d:fc:57:66:
                    b5:d1:13:21:93:5d:b3:f9:e9:fc:cc:23:1b:4e:70:
                    ba:56:8c:15:96:63:8b:ff:bf:98:ff:e2:83:16:03:
                    00:4e:d3:04:9c:58:5c:5f:d5:14:9d:42:9b:f6:8e:
                    73:89:19:b2:d9:1f:e9:4e:e8:e3:ba:3a:08:82:57:
                    39:e3:35:3c:24:31:4d:7b:df:35:a6:1b:f4:04:fe:
                    70:55:26:ee:f6:8d:7b:e3:9d:95:27:ac:cf:93:c1:
                    92:d7:fd:8a:4a:8d:45:22:96:68:29:1d:7e:49:36:
                    55:e4:97:d0:b4:55:35:68:3c:c1:5a:98:a6:9d:83:
                    c1:23:c9:ac:91:50:8b:eb:fc:0c:54:95:4d:5c:35:
                    03:0b:a9:e2:b3:d1:ad:9c:47:27:23:e3:de:b8:64:
                    9e:56:53:27:1d:20:1e:c3:b1:b7:da:06:f0:45:19:
                    7f:76:4b:a9:bd:2f:c9:43:1c:bd:b1:ae:0b:a0:1f:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E6:5F:72:C3:63:9E:30:AE:6F:E8:22:E6:8B:8E:88:8C:27:10:22
            X509v3 Authority Key Identifier:
                keyid:A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/K-ZfcsNjnjCub-gi5ouOiIwnECI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:d2:b1:a4:be:16:0d:a7:db:37:25:f6:22:f0:eb:9d:08:
         6e:69:4c:cc:b6:e2:52:85:9d:d5:61:f0:a4:90:0a:fb:e7:ab:
         7b:94:e9:44:e3:22:0c:0a:b0:2d:4a:6c:21:b1:69:cd:f1:3a:
         f4:a2:32:c6:aa:92:41:5e:be:9d:8b:8b:3f:17:33:a8:40:7a:
         f3:e6:d9:65:4d:ae:53:68:79:1d:96:fb:d8:5f:40:88:10:d5:
         87:05:b1:01:a6:54:f6:e0:f5:ec:a8:9e:b3:6b:78:0a:b5:25:
         a8:75:12:08:02:56:7b:65:0a:0f:f2:5d:e4:fa:8c:e8:3e:8d:
         92:97:c4:ce:02:7f:2b:f1:f2:fa:95:70:aa:03:b3:a5:ca:03:
         3e:d0:43:9f:10:de:f7:6f:49:80:5d:56:ef:94:79:7f:18:cd:
         05:57:bb:cb:02:b0:0e:0c:68:da:10:6c:03:cc:e6:87:32:ac:
         ed:ea:1c:dd:ed:83:37:48:2a:91:a2:b7:0e:f3:c1:e7:c9:d4:
         8a:17:8a:d3:13:1f:e4:50:d3:78:2b:0d:6b:81:72:be:f1:92:
         77:e8:40:62:7d:97:f8:ac:5a:34:01:1b:1a:4d:e2:2e:3e:bf:
         7a:77:b1:fa:46:50:20:8c:b9:c7:99:47:b2:eb:e9:3b:43:a7:
         a8:30:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org