Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30420/LGk95gCrCfUsopY9U2-MEhbBhNE.roa
File:                     LGk95gCrCfUsopY9U2-MEhbBhNE.roa (raw, json)
Hash identifier:          1NxpHsDPi+qn4vpmQ7P1AKJ+1Hp9OlgWFae+r/IUARs=
Subject key identifier:   2C:69:3D:E6:00:AB:09:F5:2C:A2:96:3D:53:6F:8C:12:16:C1:84:D1
Certificate issuer:       /CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
Certificate serial:       0B
Authority key identifier: A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/LGk95gCrCfUsopY9U2-MEhbBhNE.roa
Signing time:             Sat 16 Mar 2024 17:40:58 +0000
ROA not before:           Sat 16 Mar 2024 17:40:58 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     59098
IP address blocks:        2400:f7a0:7479::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 17:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
        Validity
            Not Before: Mar 16 17:40:58 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=2C693DE600AB09F52CA2963D536F8C1216C184D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:59:75:dd:95:1e:46:2e:67:8c:1f:62:ea:81:
                    1b:2c:cf:1e:5c:fb:e3:b3:e6:6d:c0:11:0f:af:ec:
                    a4:08:d8:ac:fc:95:b5:dd:06:4b:72:fe:d3:04:f8:
                    b0:2d:6f:bb:52:45:e3:c7:3b:9b:95:4e:4a:de:66:
                    09:f5:b0:58:01:5f:e3:df:ff:51:31:fd:29:3a:53:
                    f5:55:c8:a3:76:56:fa:f3:39:1d:66:23:53:05:57:
                    71:79:86:03:3f:2e:a8:4e:dc:47:07:ab:60:ab:ba:
                    4d:27:b4:bc:a6:db:fc:1a:f6:07:ca:31:a1:0a:af:
                    13:03:d0:59:50:aa:d8:04:d9:a0:c4:28:a4:f2:ee:
                    89:7b:e6:04:19:a6:be:3a:68:9e:c7:eb:31:c7:67:
                    df:f5:20:9e:ea:12:d3:74:c5:e8:dd:4a:84:47:c4:
                    f0:83:2d:57:d4:11:59:3f:a1:54:a4:7d:80:9a:c8:
                    58:5b:b9:e3:fc:ee:11:f6:58:6d:88:c0:9c:b1:24:
                    b5:a7:e5:db:eb:46:b3:f7:25:6a:2e:9c:6e:31:e7:
                    70:0b:a7:fd:8a:0a:bc:f1:cc:fd:99:12:89:bc:76:
                    82:07:9f:1b:91:4b:6f:74:56:c6:9e:6a:9a:80:2e:
                    e3:2a:a1:e2:ed:3a:68:c9:43:3a:75:e9:65:6d:af:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:69:3D:E6:00:AB:09:F5:2C:A2:96:3D:53:6F:8C:12:16:C1:84:D1
            X509v3 Authority Key Identifier:
                keyid:A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/LGk95gCrCfUsopY9U2-MEhbBhNE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f7a0:7479::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:0f:af:9c:fa:16:c4:ee:af:7e:7e:a9:e4:40:78:46:85:
         f5:79:be:e3:78:96:16:7b:aa:44:14:15:1b:7f:18:27:40:54:
         0f:91:91:10:2c:5c:60:d4:58:ae:d9:ee:a2:87:1d:cc:94:a6:
         f5:2d:42:9c:15:e4:42:cf:28:ed:85:04:43:46:6b:ae:8b:43:
         cb:11:c6:a2:f6:e0:c3:28:fb:0f:52:d1:a3:52:7b:f5:5c:aa:
         9a:f1:7c:a0:c5:9c:e7:53:78:bd:ef:c4:5f:a3:89:2a:59:f3:
         2a:52:e3:19:64:27:ad:11:66:99:84:26:5f:76:92:f1:ac:67:
         19:1b:1e:97:fc:33:d2:0c:30:11:19:f9:90:4d:17:23:4b:f1:
         b4:57:a3:1d:1e:27:47:5d:28:7a:9f:a3:e8:56:a4:0f:25:a4:
         88:b2:68:69:44:73:af:1b:f5:a1:27:1a:43:ba:e1:fd:2d:f9:
         b5:87:df:30:25:5b:7d:b9:25:a9:88:80:2c:9f:d1:1d:b6:1d:
         28:64:ab:a5:6c:b1:d6:be:41:87:e1:c2:99:be:68:99:fb:27:
         83:86:a5:a2:ad:87:be:3e:6b:c1:95:fc:66:6a:b5:7e:78:e9:
         af:ed:a1:fb:d2:63:46:bd:ec:c1:c2:8c:02:93:2c:ff:3d:e0:
         9d:91:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 18:03:45 2024 by rpki-client on console-fra.rpki-client.org