Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N1-cyIuYvCoC2FbVBI6GXghmmdU.roa
File:                     N1-cyIuYvCoC2FbVBI6GXghmmdU.roa (raw, json)
Hash identifier:          oJcGFm5aKtebZl9QgfwT2FX6W5F9S96e7ltUGlg1+yY=
Subject key identifier:   37:5F:9C:C8:8B:98:BC:2A:02:D8:56:D5:04:8E:86:5E:08:66:99:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0707
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N1-cyIuYvCoC2FbVBI6GXghmmdU.roa
Signing time:             Tue 30 Apr 2024 01:52:54 +0000
ROA not before:           Tue 30 Apr 2024 01:52:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.4.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:52:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=375F9CC88B98BC2A02D856D5048E865E086699D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:46:c2:df:be:bb:7a:63:8d:51:b6:9c:95:
                    e0:e0:5e:60:ca:25:0f:02:be:1a:f4:da:a6:28:fa:
                    c7:fc:f4:1d:19:75:fc:a8:d4:68:69:3f:40:d2:b3:
                    d1:3a:ac:a3:ad:19:16:11:2e:82:38:e2:57:8e:95:
                    68:ed:4e:76:21:ec:0e:f2:34:d9:60:b5:13:95:c7:
                    6f:96:9e:f2:30:79:92:6b:ef:ff:4d:b2:0b:34:0a:
                    c3:f2:f0:0a:3b:28:a7:5d:8c:76:7f:16:bc:f5:34:
                    a2:16:6c:1b:dc:4e:76:fb:24:4e:5f:8d:19:30:f9:
                    ab:2d:16:ea:57:62:44:c5:12:94:48:9a:2d:10:1d:
                    af:5a:48:fa:ff:56:b4:11:0c:31:b7:88:8a:f0:28:
                    07:a0:fe:f1:2e:c7:18:01:e5:06:83:b6:2d:95:bb:
                    e4:49:5d:f3:2d:ca:ef:36:68:e1:cb:e0:32:6c:9d:
                    85:75:58:5d:8c:17:5a:3f:9d:b4:2f:73:b8:81:15:
                    4b:64:17:28:b9:92:1b:e5:a2:0a:85:c1:47:98:b5:
                    2a:36:46:1d:69:3c:43:94:eb:5e:aa:ac:87:62:35:
                    e8:a9:8f:8c:a0:4e:d6:a2:86:5f:e7:c1:15:ad:37:
                    42:d8:72:82:25:b7:8a:5a:69:2b:73:dc:aa:9e:29:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5F:9C:C8:8B:98:BC:2A:02:D8:56:D5:04:8E:86:5E:08:66:99:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N1-cyIuYvCoC2FbVBI6GXghmmdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:4b:c2:5b:4b:eb:d4:da:78:86:49:d0:1b:a1:b0:a6:50:
         8f:b7:fe:bb:bd:24:de:80:e8:96:46:a0:8d:ee:09:74:fc:8e:
         2e:13:79:cb:e4:4b:e8:f1:53:bf:a2:35:98:23:90:e1:27:9a:
         fe:10:7d:ea:80:ec:b1:e3:2c:29:56:ec:c0:28:80:11:bb:04:
         24:80:87:4a:c4:e2:65:0f:68:78:a9:8d:b4:a3:6a:85:c5:dc:
         d9:fa:41:f7:49:f8:0e:63:fa:e7:c4:63:87:d4:f3:09:60:2f:
         b9:f0:c0:62:d8:c5:5e:d5:e6:ed:15:db:fa:4a:e6:63:1d:72:
         b6:94:8e:81:6a:04:4c:69:57:4e:62:f9:47:e5:10:86:a5:59:
         d9:3d:04:ac:a6:64:03:98:b0:fc:a4:ac:76:fb:21:cc:ee:a2:
         c6:34:3f:50:63:e1:82:80:a4:40:bc:d7:75:d5:ec:e4:fe:e7:
         9c:4f:d6:ba:34:49:c8:b2:52:61:85:bc:b2:5d:d7:e6:88:fe:
         c5:be:8f:9f:82:09:49:82:13:bf:26:ba:3a:70:37:88:79:f5:
         d1:8b:6a:6d:4c:f3:39:82:ea:0f:0e:43:be:28:fa:a0:d9:8a:
         30:06:13:85:0e:15:1d:ed:6f:1c:8d:a8:4b:96:9d:70:74:85:
         27:45:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:03 2025 by rpki-client