Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/M5WqkidF9j4QrxyYvqjftIuW8vU.roa
File:                     M5WqkidF9j4QrxyYvqjftIuW8vU.roa (raw, json)
Hash identifier:          JJjwxZ5bn435au9EyEaPHhB7cC0tKmxngjxgSkFsnAs=
Subject key identifier:   33:95:AA:92:27:45:F6:3E:10:AF:1C:98:BE:A8:DF:B4:8B:96:F2:F5
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       26
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/M5WqkidF9j4QrxyYvqjftIuW8vU.roa
Signing time:             Sun 01 Oct 2023 01:30:06 +0000
ROA not before:           Sun 01 Oct 2023 01:30:06 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131921
IP address blocks:        2406:a1c0:400::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Oct  1 01:30:06 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3395AA922745F63E10AF1C98BEA8DFB48B96F2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0e:bd:c8:2b:70:0b:c0:54:db:cc:5f:03:10:
                    d9:b5:d1:ee:6c:75:5c:b3:b7:38:0d:ab:7d:55:ca:
                    e2:d0:45:a4:3e:89:9f:4f:2a:39:3f:f4:b2:e7:b0:
                    7b:f3:66:8a:06:63:b5:68:90:cb:21:72:34:69:fe:
                    3f:33:e0:cb:c2:21:fb:9c:5c:6b:f2:b9:ef:2a:a6:
                    4f:f2:7e:85:b3:ad:b6:8f:53:9e:7c:c0:8b:08:9f:
                    6e:f2:a2:3f:6d:95:37:ba:8e:3b:e2:35:d3:e0:77:
                    34:02:03:2e:12:d6:78:94:66:65:85:c5:34:c4:19:
                    9a:81:ec:00:7f:78:35:9c:f1:4c:20:a9:0c:b7:54:
                    ff:d4:75:d1:31:8d:4a:ac:2f:43:af:20:05:71:a4:
                    86:5a:a6:ce:48:94:92:48:d3:d2:b1:d0:76:13:4f:
                    f3:7f:c6:09:e7:7e:d9:3b:1b:a4:26:92:a7:f2:63:
                    82:4d:85:c3:ed:99:47:cb:dd:98:64:55:e6:85:4e:
                    05:ba:d5:f4:93:ff:13:26:b1:f5:81:1d:c0:1b:a1:
                    3a:0d:32:2f:b2:c6:d6:a3:0e:f4:9d:93:50:b6:21:
                    5d:8d:ce:22:d3:c7:14:2b:67:a3:c4:4d:ba:19:c8:
                    42:d5:23:96:2c:fc:68:1c:b4:01:2f:95:65:9a:41:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:95:AA:92:27:45:F6:3E:10:AF:1C:98:BE:A8:DF:B4:8B:96:F2:F5
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/M5WqkidF9j4QrxyYvqjftIuW8vU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         cf:0d:b4:9e:e5:de:ad:49:ae:ec:bd:cb:40:3b:a7:73:87:4f:
         18:86:ff:ad:89:55:c1:5e:30:86:5b:81:49:89:48:4d:e7:1f:
         7e:2d:df:4f:39:fb:e4:bd:d6:60:c5:2b:4b:00:f8:42:41:61:
         bf:af:1f:fc:48:9a:7f:92:53:76:40:8f:f4:6e:eb:76:cd:e9:
         12:91:a5:a4:46:62:69:c7:b5:81:cc:7c:63:ad:98:8e:1e:29:
         76:82:df:81:4a:ae:b9:ce:50:86:7d:d7:2d:18:37:2a:c6:9d:
         f9:cb:9d:05:e1:08:1c:3d:c5:88:10:7b:d1:23:db:0b:eb:29:
         49:22:9b:99:54:33:57:53:42:be:fa:62:fe:47:eb:9e:24:41:
         c3:0b:80:03:15:c9:09:20:79:14:5b:49:40:15:ba:61:69:8e:
         d8:14:fa:4b:67:b4:e9:a1:87:d9:13:a3:ae:83:36:80:cf:bc:
         6f:75:fe:7e:24:4e:ca:23:59:bb:e5:4a:6d:34:01:5e:bd:c9:
         b2:76:dd:70:65:de:5e:44:c6:f4:7b:35:ce:46:83:48:cc:96:
         0d:e8:9f:45:03:48:31:9a:a7:f8:d8:58:a4:54:b4:92:ec:e3:
         4c:6d:2a:0e:10:11:ed:1c:ab:4d:d3:65:bc:bc:d7:7e:7e:6d:
         4c:96:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org