Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-D1xCA-sTJeu2MvbfW0FIY16_D0.roa
File:                     -D1xCA-sTJeu2MvbfW0FIY16_D0.roa (raw, json)
Hash identifier:          muXnj5stwDMSJlAvjGDAvjJLs4QIAuJWCP1iJeVLXpY=
Subject key identifier:   F8:3D:71:08:0F:AC:4C:97:AE:D8:CB:DB:7D:6D:05:21:8D:7A:FC:3D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01B7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-D1xCA-sTJeu2MvbfW0FIY16_D0.roa
Signing time:             Wed 24 May 2023 16:37:09 +0000
ROA not before:           Wed 24 May 2023 16:37:09 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:37:09 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F83D71080FAC4C97AED8CBDB7D6D05218D7AFC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:cd:43:9d:ac:f3:92:7e:e1:df:dc:de:78:
                    79:1d:b3:44:d4:aa:84:05:e0:88:09:57:38:a3:53:
                    34:84:7e:f9:d2:2c:cc:7b:1d:e7:ad:75:e4:98:1b:
                    76:ba:77:82:03:c5:b2:2a:7c:67:2c:46:b9:79:7b:
                    08:16:8f:54:17:49:79:77:75:63:fd:2b:d5:b3:68:
                    b6:e5:a2:11:32:56:34:86:59:4e:8a:75:ea:06:c3:
                    af:56:aa:bb:b5:87:84:25:17:28:35:f0:b7:b3:ce:
                    7b:c5:01:f8:96:bd:60:76:f3:fc:b5:a1:0f:59:80:
                    94:92:8d:44:7e:6a:3b:a9:57:4b:6e:34:26:a1:61:
                    e9:eb:8c:e6:b2:8b:7c:18:0e:10:41:45:19:38:b4:
                    72:17:78:7e:eb:9f:59:2c:69:95:69:60:6a:2b:0c:
                    04:0d:94:70:86:4e:63:2c:31:5d:ce:9f:ae:e4:4b:
                    99:98:df:bc:ca:4d:38:35:60:68:6d:c3:2e:f2:d5:
                    ad:7c:a9:0e:da:66:9b:1d:6f:10:69:9b:71:f3:de:
                    af:cd:8e:70:3d:29:34:0f:75:87:a9:f8:32:1a:23:
                    8a:f7:c4:92:b0:da:90:5c:74:0d:c7:48:70:66:19:
                    3e:57:14:d6:82:f5:0b:93:61:76:16:77:2f:6d:05:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3D:71:08:0F:AC:4C:97:AE:D8:CB:DB:7D:6D:05:21:8D:7A:FC:3D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-D1xCA-sTJeu2MvbfW0FIY16_D0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:57:16:2a:c6:f4:c6:b8:fb:e1:7a:23:5c:60:e7:b1:31:9e:
         9e:b9:4d:c7:ab:c5:8a:d2:9c:54:88:58:91:e3:5a:e0:a4:15:
         3e:2b:91:cc:56:a2:24:96:f5:cb:bf:39:60:5e:5a:d7:30:c1:
         b4:bc:92:32:bd:a9:62:cb:da:34:ad:2b:d8:d8:97:42:50:c9:
         97:8f:2d:6b:cb:43:a4:54:20:fb:67:9e:37:0f:c9:66:99:f6:
         5f:22:59:ff:20:7d:a8:9c:01:95:ff:95:b6:e1:99:fe:12:20:
         fa:84:08:f6:0d:73:80:f2:97:09:bc:9c:22:88:c2:45:d2:25:
         2b:01:55:99:72:ea:2b:0e:a6:e7:f9:59:2f:c5:02:6a:a3:23:
         4f:b2:9c:81:15:aa:f2:e4:b4:5d:ad:34:f2:73:e5:00:9c:0d:
         a8:c2:bb:d8:a8:96:c9:eb:f2:54:26:33:98:db:f4:7c:a4:01:
         8d:a5:5d:54:cf:b2:69:c7:08:d8:d4:27:11:8b:9d:03:5b:56:
         8e:a1:74:bf:53:c8:84:7f:52:e5:d3:f1:ec:3f:2a:45:c4:66:
         d1:ea:fa:95:14:e9:eb:3c:94:13:f5:f0:19:a2:cb:23:ab:79:
         4f:e0:f4:80:97:e5:ed:24:ae:9f:0a:58:cd:e5:72:3a:96:14:
         39:6c:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org