Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30371/wACNoSQjeHVVZuJ4anUMOLv_gb0.roa
File:                     wACNoSQjeHVVZuJ4anUMOLv_gb0.roa (raw, json)
Hash identifier:          Ap81cR5wxYwMSBaTyYeDAL8ROdYCDJk6c+5cAn7QpB4=
Subject key identifier:   C0:00:8D:A1:24:23:78:75:55:66:E2:78:6A:75:0C:38:BB:FF:81:BD
Certificate issuer:       /CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Certificate serial:       03
Authority key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/wACNoSQjeHVVZuJ4anUMOLv_gb0.roa
Signing time:             Wed 04 Oct 2023 12:42:57 +0000
ROA not before:           Wed 04 Oct 2023 12:42:57 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131976
IP address blocks:        2406:e240::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
        Validity
            Not Before: Oct  4 12:42:57 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C0008DA1242378755566E2786A750C38BBFF81BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:09:56:28:cd:33:18:2b:bb:83:bf:a7:18:47:
                    4d:1e:c2:46:8d:86:cc:b3:3b:d5:c1:c0:9f:fb:ae:
                    3b:a8:b3:92:f3:42:bb:98:c1:f0:1e:5b:18:02:12:
                    5e:3d:fe:9e:71:f2:c3:a2:3a:1d:ab:ce:3c:7f:0c:
                    b5:26:52:c8:3c:b9:be:02:29:37:b5:0e:ff:26:e5:
                    b2:08:2b:55:48:e0:93:d1:b6:05:de:33:de:64:51:
                    e8:30:32:e5:d5:5e:26:16:c4:fb:d0:c3:ce:87:5d:
                    cb:3d:94:1d:05:56:08:0c:a6:d3:15:23:c3:a0:59:
                    a0:85:9d:19:3c:58:70:05:98:e3:55:79:7a:16:49:
                    40:4b:71:b1:8e:24:79:d2:51:43:54:4e:68:09:a7:
                    2f:fc:4d:1b:78:65:3d:04:16:2a:b6:37:3b:82:19:
                    57:41:81:02:55:d1:10:f6:a2:e3:ce:21:29:fe:61:
                    d1:19:7f:2b:58:6e:61:1d:0a:ae:86:6c:51:0c:70:
                    ad:b6:13:c4:2f:a1:8d:13:ae:03:2d:ac:b7:46:a9:
                    c5:f4:88:b8:cf:d9:c3:19:c5:34:6d:e2:6d:3c:ef:
                    42:6b:75:c5:0c:29:f2:ba:c9:61:c8:f0:78:96:f3:
                    ed:1a:4b:3b:aa:ab:63:15:57:7f:56:7f:ad:4e:47:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:8D:A1:24:23:78:75:55:66:E2:78:6A:75:0C:38:BB:FF:81:BD
            X509v3 Authority Key Identifier:
                keyid:43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/wACNoSQjeHVVZuJ4anUMOLv_gb0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e240::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:d4:e9:b5:69:f6:74:41:7a:6c:48:74:87:25:34:13:b8:
         de:58:4d:22:fa:6b:e3:4e:db:88:13:ba:e1:7a:b0:a7:e1:24:
         55:c5:83:86:c3:b3:67:62:e3:6a:fb:73:19:16:ea:20:6a:2b:
         dc:3a:0e:4a:46:e2:13:a4:3d:5e:08:a7:b8:24:6c:14:17:1f:
         d0:c6:45:71:24:09:33:e3:06:49:9a:99:d0:27:7d:56:f1:13:
         b1:27:24:01:f7:ff:e5:62:3a:6a:65:bb:83:8f:c2:f0:48:9a:
         cf:c7:3a:78:b0:23:ad:70:48:86:f5:c8:a6:6a:3a:01:56:23:
         ed:97:30:de:42:92:a8:a7:5f:e1:81:aa:b0:a7:38:ff:12:30:
         05:89:df:62:4c:88:99:a8:27:54:76:8b:67:a4:bd:aa:d2:c4:
         52:b3:68:34:79:da:25:8d:e6:0d:8f:79:ed:22:f2:30:5d:d1:
         a6:0e:b8:72:29:58:9d:f1:2f:8e:4a:62:86:c3:84:25:5d:8b:
         57:24:c5:54:a5:d5:00:26:b1:10:80:bb:60:53:b5:89:38:57:
         29:72:08:ed:a3:fe:b9:fc:34:58:aa:b5:51:ec:3f:c3:ef:58:
         b1:35:da:13:e1:2f:30:2f:4c:3b:2b:ec:3e:cf:34:1e:91:ef:
         9e:db:47:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzk4
MzdBRDkzRDkyNDcxRTIwMjREMDZFQ0ZEQ0FFRThGNjREMUMzMB4XDTIzMTAwNDEy
NDI1N1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQzAwMDhEQTEyNDIzNzg3
NTU1NjZFMjc4NkE3NTBDMzhCQkZGODFCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAP4JVijNMxgru4O/pxhHTR7CRo2GzLM71cHAn/uuO6izkvNCu5jB
8B5bGAISXj3+nnHyw6I6HavOPH8MtSZSyDy5vgIpN7UO/yblsggrVUjgk9G2Bd4z
3mRR6DAy5dVeJhbE+9DDzoddyz2UHQVWCAym0xUjw6BZoIWdGTxYcAWY41V5ehZJ
QEtxsY4kedJRQ1ROaAmnL/xNG3hlPQQWKrY3O4IZV0GBAlXREPai484hKf5h0Rl/
K1huYR0KroZsUQxwrbYTxC+hjROuAy2st0apxfSIuM/ZwxnFNG3ibTzvQmt1xQwp
8rrJYcjweJbz7RpLO6qrYxVXf1Z/rU5H+fMCAwEAAaOCAiswggInMB0GA1UdDgQW
BBTAAI2hJCN4dVVm4nhqdQw4u/+BvTAfBgNVHSMEGDAWgBRDmDetk9kkceICTQbs
/cruj2TRwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNzEvUTVnM3JaUFpKSEhpQWswRzdQM0s3bzlrMGNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUTVnM3JaUFpKSEhpQWswRzdQM0s3
bzlrMGNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzcxL3dBQ05vU1FqZUhWVlp1SjRhblVNT0x2X2diMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkBuJAAAAwDQYJKoZIhvcNAQELBQADggEBAKB51Om1afZ0QXpsSHSH
JTQTuN5YTSL6a+NO24gTuuF6sKfhJFXFg4bDs2di42r7cxkW6iBqK9w6DkpG4hOk
PV4Ip7gkbBQXH9DGRXEkCTPjBkmamdAnfVbxE7EnJAH3/+ViOmplu4OPwvBIms/H
OniwI61wSIb1yKZqOgFWI+2XMN5CkqinX+GBqrCnOP8SMAWJ32JMiJmoJ1R2i2ek
varSxFKzaDR52iWN5g2Pee0i8jBd0aYOuHIpWJ3xL45KYobDhCVdi1ckxVSl1QAm
sRCAu2BTtYk4VylyCO2j/rn8NFiqtVHsP8PvWLE12hPhLzAvTDsr7D7PNB6R757b
Rzw=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org