Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/RQx8Ac5B8_PWQDk0LmdwfnYI2hY.roa
File:                     RQx8Ac5B8_PWQDk0LmdwfnYI2hY.roa (raw, json)
Hash identifier:          uDkXo1OocI5AZnSKb70bUxYxBDVGCGv0HsJQwVAnH3A=
Subject key identifier:   45:0C:7C:01:CE:41:F3:F3:D6:40:39:34:2E:67:70:7E:76:08:DA:16
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       06
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/RQx8Ac5B8_PWQDk0LmdwfnYI2hY.roa
Signing time:             Tue 05 Sep 2023 05:43:29 +0000
ROA not before:           Tue 05 Sep 2023 05:43:29 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     150368
IP address blocks:        2401:d20:1010::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 11 Jan 2024 01:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Sep  5 05:43:29 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=450C7C01CE41F3F3D64039342E67707E7608DA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:74:38:59:78:cd:a7:34:0a:39:d1:1e:5f:
                    b4:6a:c8:6f:03:a7:09:a2:cb:35:4e:12:57:30:af:
                    5d:43:be:e7:9e:4f:a1:2b:c5:0f:05:51:e0:c2:b3:
                    7f:d5:d9:67:d8:7c:6b:63:71:cb:ca:42:e4:80:ea:
                    b3:70:e2:27:fd:9d:1d:fa:5e:48:60:0f:84:a5:d5:
                    47:94:08:1e:4d:27:78:8f:1e:4f:5f:07:99:d6:82:
                    c4:c3:9a:de:db:1d:18:b8:7f:f9:3b:a1:db:14:13:
                    08:50:9e:d0:01:ae:11:d3:18:cd:14:3d:6d:10:1c:
                    ce:9d:09:b2:04:d9:85:dd:3e:d6:12:15:d2:3e:5f:
                    19:a5:82:b4:d8:9e:22:64:7e:71:bf:c0:e4:54:18:
                    a7:db:7e:b8:d7:35:8b:1c:29:a4:fa:cb:85:cf:aa:
                    9d:c8:a2:50:06:b5:c3:99:25:3e:db:c9:e9:cd:ca:
                    ea:40:b8:12:1d:82:08:83:56:71:76:f7:2c:15:7d:
                    d0:74:f0:ca:11:82:2e:14:4a:e0:30:85:3b:0c:c0:
                    ab:f4:28:fb:4a:3d:e1:2e:e9:cc:8d:0f:d0:d9:55:
                    aa:5c:92:89:9e:c3:19:37:b1:4b:93:22:5b:4b:f6:
                    bc:25:a2:c8:68:0c:4d:1f:24:ab:be:71:ae:11:1d:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0C:7C:01:CE:41:F3:F3:D6:40:39:34:2E:67:70:7E:76:08:DA:16
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/RQx8Ac5B8_PWQDk0LmdwfnYI2hY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1010::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:5a:7e:09:2c:b8:11:70:53:78:81:1c:76:33:54:00:33:
         3b:73:72:55:52:73:24:d4:d1:1e:6d:c3:38:e3:e8:3e:0f:b1:
         96:b6:98:15:39:48:3f:75:dd:cd:4b:b7:6d:e6:4c:5f:75:b9:
         ee:ed:0a:e9:98:df:88:ab:65:5c:de:48:ae:50:ea:bb:89:4c:
         35:5a:3a:c5:36:b5:dc:9c:ae:a2:bb:46:93:60:c1:a8:05:77:
         30:7b:46:59:cf:d3:66:02:ab:22:ec:06:81:fb:2c:bd:66:6d:
         82:85:a1:6e:8e:9f:7e:e5:5f:4e:55:08:5e:80:6e:e8:0f:63:
         25:b8:80:3f:86:53:4a:6b:de:f4:66:5e:d8:3c:ae:05:85:1b:
         26:8f:84:f9:0d:6a:87:a5:c1:48:74:62:66:f8:a9:bd:d0:40:
         15:99:3e:1d:81:33:15:91:ec:6e:df:5a:fb:c6:ff:9b:02:9c:
         46:12:2a:a1:f9:18:2b:6b:9f:0d:e9:f6:34:f7:fd:25:8b:19:
         45:93:c5:77:06:de:35:cb:99:5e:76:38:c3:cb:0d:03:11:78:
         d4:d6:55:d1:a9:bb:4c:05:8c:fa:c2:b0:90:45:ca:92:f7:e8:
         c4:be:6f:f1:25:7e:27:94:42:76:16:68:70:1a:66:8c:e9:14:
         5d:de:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 05:08:34 2024 by rpki-client on console-fra.rpki-client.org