Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5BAjSeHchsKnRFBJnF6pGTlrCts.roa
File:                     5BAjSeHchsKnRFBJnF6pGTlrCts.roa (raw, json)
Hash identifier:          K9mxn1x9M/vu0Yr1ZQr0UWiyrb0griuHiqFVcpSggjw=
Subject key identifier:   E4:10:23:49:E1:DC:86:C2:A7:44:50:49:9C:5E:A9:19:39:6B:0A:DB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07F0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5BAjSeHchsKnRFBJnF6pGTlrCts.roa
Signing time:             Tue 30 Apr 2024 02:10:36 +0000
ROA not before:           Tue 30 Apr 2024 02:10:36 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.0.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 02:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2032 (0x7f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:10:36 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E4102349E1DC86C2A74450499C5EA919396B0ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:5a:3e:1f:bd:ac:1a:04:67:c0:72:ae:43:
                    c8:87:c1:a3:2f:dc:7c:b9:81:ea:5a:5b:2b:e4:44:
                    b8:1b:a0:5d:c2:aa:72:b0:62:61:90:7e:79:a1:73:
                    50:ed:59:16:f8:bd:36:37:0f:33:f2:46:98:f6:44:
                    68:27:07:51:5d:e1:33:d1:a5:d7:12:a8:6c:06:89:
                    34:78:04:23:54:76:89:53:bb:b4:6b:cc:9d:53:7a:
                    a7:1e:e9:f6:61:53:97:f7:c1:3b:cd:8e:f5:c4:54:
                    7c:b6:c8:b8:13:bd:76:3f:50:3c:19:1e:40:c2:2b:
                    96:9f:70:fc:79:b8:e1:35:67:06:12:65:5a:16:f1:
                    84:3c:a7:9f:b0:79:9c:b8:d6:5e:1b:10:c4:3f:fd:
                    2c:4f:7e:35:d6:b2:81:0d:bc:d5:c9:f7:13:df:f1:
                    9c:ea:0d:de:86:cc:2a:cd:21:f1:2d:9a:f3:41:83:
                    c2:5e:b6:38:b5:6d:57:3e:10:60:af:a4:f6:9d:ed:
                    4e:b4:b5:63:40:5f:df:42:34:07:a4:2e:ab:45:d5:
                    cd:9d:79:52:ab:7f:b1:ef:b3:cc:c1:30:2e:a0:c0:
                    df:bd:53:51:70:35:98:5e:b3:1b:83:4a:86:28:65:
                    a3:94:95:91:74:dc:2d:00:74:be:36:d8:02:d2:ec:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:10:23:49:E1:DC:86:C2:A7:44:50:49:9C:5E:A9:19:39:6B:0A:DB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5BAjSeHchsKnRFBJnF6pGTlrCts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:17:a3:ab:4f:f9:f8:1d:a9:4d:1f:9e:a2:40:47:fe:12:
         b4:95:bd:ba:9d:b9:f6:18:ba:cb:fa:53:da:3c:f7:2c:f3:e8:
         11:8b:e4:7c:a2:7b:f6:4b:2b:27:05:ce:e0:2f:49:c5:9c:31:
         56:e7:4e:9e:fa:e6:a5:6d:7c:cd:04:05:50:51:df:46:b1:82:
         53:4a:58:09:5b:3f:62:b6:6e:f4:76:33:f1:7c:25:45:6f:af:
         1c:0c:8c:99:27:4d:7d:06:05:1d:1c:60:e1:d7:16:cf:73:76:
         a1:7e:0d:fc:22:36:b0:2c:c7:b8:ff:96:0a:9e:7b:35:ee:fd:
         4d:46:0b:1e:1c:c7:71:9e:d1:5b:f5:03:b7:39:2a:61:4c:e5:
         57:db:9e:bd:78:3d:58:58:ac:2f:51:14:df:2b:87:c5:b8:89:
         4d:48:1a:6a:2a:7b:77:cc:86:b2:27:2d:fc:f9:75:17:05:b7:
         27:27:8a:e1:aa:55:8c:67:25:ba:a4:2d:e1:ee:53:eb:2b:a4:
         4b:c0:2e:c6:f6:87:bd:d5:dd:6d:51:3a:94:9f:8c:87:e9:38:
         b7:57:46:56:f6:b8:6e:e0:2f:62:4c:9a:b7:14:e7:2f:ab:50:
         96:df:9d:60:dc:54:7a:3a:0b:5a:10:82:13:a5:16:71:30:b4:
         e5:43:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:19 2025 by rpki-client