Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-68qZ0b1E6BPPvi3yQlSOgOM948.roa
File:                     -68qZ0b1E6BPPvi3yQlSOgOM948.roa (raw, json)
Hash identifier:          bdW9Qav0bzZicO6u2gYGpq1oorgM88B9VVxgWPD0zWI=
Subject key identifier:   FB:AF:2A:67:46:F5:13:A0:4F:3E:F8:B7:C9:09:52:3A:03:8C:F7:8F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-68qZ0b1E6BPPvi3yQlSOgOM948.roa
Signing time:             Wed 24 May 2023 16:40:38 +0000
ROA not before:           Wed 24 May 2023 16:40:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FBAF2A6746F513A04F3EF8B7C909523A038CF78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:6e:e9:ca:28:da:be:02:99:d8:5c:f1:5f:
                    f3:78:08:9d:b1:02:16:d5:d2:cd:23:bb:70:dc:76:
                    f9:5d:15:4b:8b:cd:4d:59:41:2e:2e:16:21:82:c6:
                    ab:66:1a:8c:57:c1:ba:09:f1:c0:65:6b:47:72:24:
                    5c:2c:bb:66:0f:cf:fd:14:d5:05:dc:4b:fc:33:bd:
                    0e:b7:0c:bf:ff:ee:a5:af:30:6e:ed:af:e0:02:19:
                    ae:68:54:ca:07:15:ff:04:6d:cb:54:55:2f:c8:91:
                    83:1b:e4:06:62:73:b9:c0:dd:cf:c0:14:5f:a0:12:
                    b1:db:22:b2:73:51:bb:9c:14:26:bb:49:0e:ce:c7:
                    15:17:41:ac:a4:d4:90:47:98:bd:73:6e:9e:df:44:
                    45:75:2d:f5:4c:7d:38:9c:ad:96:3f:2b:30:ee:5b:
                    8f:cd:8d:da:44:ff:ee:5b:1f:36:de:ae:b9:b8:41:
                    f1:a0:b5:3f:02:d5:28:ec:cb:5f:e5:b3:f8:9a:63:
                    f8:f3:a7:e8:fa:a7:98:05:56:15:a8:e2:fb:6d:8a:
                    39:28:17:07:e4:aa:63:7b:fd:30:06:d6:29:52:62:
                    da:d9:a2:7d:9a:09:ca:f5:74:e9:c9:9c:b9:29:be:
                    6f:c2:aa:2e:27:ea:e8:de:b3:0a:65:2f:aa:b9:22:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:2A:67:46:F5:13:A0:4F:3E:F8:B7:C9:09:52:3A:03:8C:F7:8F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-68qZ0b1E6BPPvi3yQlSOgOM948.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:5b:08:88:5a:81:89:a1:9e:4e:ce:f1:a6:3d:86:c2:24:70:
         4f:b5:ad:b8:0a:2e:98:3c:f9:bb:4a:46:24:71:ba:28:df:8e:
         cd:21:f9:a6:c6:ce:d4:8f:8a:ac:1a:49:8d:a0:55:e1:98:0d:
         cd:ee:ee:37:06:53:36:26:5b:b3:ca:d6:4e:6c:93:3e:20:eb:
         16:22:d7:f0:12:ad:86:e8:44:07:bc:b7:d5:9c:7b:1a:ad:7c:
         6c:0e:ea:1f:78:62:ab:a4:c7:be:eb:3b:3e:19:7c:c1:20:db:
         d0:16:fa:e0:f5:e9:da:c0:ea:83:51:b5:d3:8d:12:db:ce:1c:
         02:8f:1e:db:04:b9:c3:13:60:30:51:95:5a:41:e0:ce:52:a5:
         a8:46:09:08:11:de:0d:fa:a3:c2:c1:c4:33:bd:c0:34:42:65:
         6f:40:fe:b7:04:41:ce:7f:24:2e:05:43:81:8d:ca:c7:a0:3f:
         70:5e:50:4e:f6:20:5b:9b:1a:d4:5b:94:ec:8b:e2:4a:26:80:
         ef:d8:3d:9d:5d:f0:56:d4:65:fa:58:42:6d:a0:30:4a:4c:e3:
         28:fe:a3:f1:35:b4:cf:89:7d:14:24:12:26:5d:e4:c2:c6:d2:
         b6:4a:8f:ae:21:c6:60:94:a0:a9:e4:7f:2a:f5:81:9d:fd:b0:
         61:32:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org