Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30379/4-RDAWGDdg3I0hoV8x-HU1L1lqY.roa
File:                     4-RDAWGDdg3I0hoV8x-HU1L1lqY.roa (raw, json)
Hash identifier:          U4knM5EKNmu6CyR5LYDDUOo9LknyYNHZYg9XSLsWfj8=
Subject key identifier:   E3:E4:43:01:61:83:76:0D:C8:D2:1A:15:F3:1F:87:53:52:F5:96:A6
Certificate issuer:       /CN=9670A0F485AF88A2DF9D8AE62E01EF4F50C71417
Certificate serial:       1F
Authority key identifier: 96:70:A0:F4:85:AF:88:A2:DF:9D:8A:E6:2E:01:EF:4F:50:C7:14:17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lnCg9IWviKLfnYrmLgHvT1DHFBc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/4-RDAWGDdg3I0hoV8x-HU1L1lqY.roa
Signing time:             Sat 01 Jul 2023 01:29:08 +0000
ROA not before:           Sat 01 Jul 2023 01:29:08 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     63791
IP address blocks:        2407:a2c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9670A0F485AF88A2DF9D8AE62E01EF4F50C71417
        Validity
            Not Before: Jul  1 01:29:08 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E3E443016183760DC8D21A15F31F875352F596A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:de:d6:4e:ad:6f:f5:f6:d0:ee:a2:7a:a5:
                    80:6b:2c:98:7f:dd:b0:ad:e5:36:29:9b:8a:65:6e:
                    aa:32:8a:8f:98:dd:9f:41:71:b3:ca:40:9b:ae:a5:
                    6d:07:73:b3:4c:9b:4e:dd:f4:73:b8:eb:60:64:53:
                    07:e3:3d:21:87:00:51:f2:c0:de:9b:2f:30:e4:8d:
                    9d:3b:00:3e:57:bf:cb:51:25:c0:39:8d:c4:93:9f:
                    03:c5:32:57:29:f8:62:92:5f:c7:71:a0:e0:f4:6f:
                    62:e4:ea:ce:7b:80:aa:96:b9:85:ba:90:ad:37:73:
                    45:f2:bf:8d:12:4f:58:f4:6e:f2:5f:00:88:47:39:
                    df:2e:4d:e2:60:ad:66:30:59:6c:f8:8e:b7:08:5c:
                    eb:0b:28:55:bc:24:9d:aa:97:2e:0d:8c:69:c7:fd:
                    e6:45:0e:6a:c5:00:f7:98:93:1e:6b:22:26:94:3f:
                    bc:9b:bb:18:19:68:11:99:de:7a:ef:2f:78:b4:ca:
                    c9:fb:dc:a5:83:b8:89:84:48:56:db:0c:af:bc:d4:
                    a5:83:d0:f8:95:e5:e2:7b:5f:60:71:4a:0b:03:c2:
                    68:cb:5b:85:77:c0:11:47:ba:c2:e6:fa:24:44:f8:
                    f6:f6:39:c0:df:68:69:4d:e5:4e:dc:4f:83:83:42:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:43:01:61:83:76:0D:C8:D2:1A:15:F3:1F:87:53:52:F5:96:A6
            X509v3 Authority Key Identifier:
                keyid:96:70:A0:F4:85:AF:88:A2:DF:9D:8A:E6:2E:01:EF:4F:50:C7:14:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/lnCg9IWviKLfnYrmLgHvT1DHFBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lnCg9IWviKLfnYrmLgHvT1DHFBc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30379/4-RDAWGDdg3I0hoV8x-HU1L1lqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:07:19:d6:e8:36:bb:67:e0:ec:6b:6f:d5:47:94:a8:40:
         ec:34:4d:f8:67:d7:4f:1a:ad:90:a0:89:33:4d:41:9c:ef:fa:
         e5:15:ca:d2:fc:e3:d4:a9:3d:ff:d7:1b:0f:5a:28:57:8c:93:
         ad:94:ef:5e:bb:f2:13:45:69:0c:85:7f:15:97:e6:16:41:37:
         aa:71:d5:37:15:9f:c7:63:e1:a5:03:b2:83:c8:ea:48:55:1e:
         50:02:fe:06:03:c9:05:8e:52:61:90:aa:2c:3d:f8:a6:60:d8:
         76:70:ba:d2:cd:b1:b4:04:85:95:35:9f:1a:5e:d1:93:5f:19:
         44:ea:b0:66:36:a1:c7:1b:af:2f:7e:cb:25:75:75:5c:bb:ed:
         ae:d5:be:1e:b3:c1:de:c1:6b:36:5e:1d:47:a6:d6:c9:14:2b:
         32:b0:a5:34:8e:45:a8:4d:fe:26:23:9a:db:00:e4:ae:6e:8e:
         ad:26:0a:f1:7c:9c:22:b3:c7:43:5b:89:65:75:7b:58:bb:bf:
         1b:8c:b8:d5:f0:be:0c:49:cc:e6:a5:ad:c2:6b:97:2f:4f:06:
         c0:25:66:15:94:1a:a6:ea:4e:9b:13:49:39:26:b6:dd:e2:39:
         a3:bf:79:9e:b9:fc:a4:05:1e:4e:11:be:43:90:9e:f8:3c:81:
         81:2a:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org