Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4aOTYC9UWqjWn5SmgLR05IHUi7g.roa
File:                     4aOTYC9UWqjWn5SmgLR05IHUi7g.roa (raw, json)
Hash identifier:          ZCW2d4uZr6pe8nqSov2vL+yItQOuUEGcE0qoUoys8oM=
Subject key identifier:   E1:A3:93:60:2F:54:5A:A8:D6:9F:94:A6:80:B4:74:E4:81:D4:8B:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05F3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4aOTYC9UWqjWn5SmgLR05IHUi7g.roa
Signing time:             Thu 29 Feb 2024 01:35:41 +0000
ROA not before:           Thu 29 Feb 2024 01:35:41 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 04:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523 (0x5f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:41 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E1A393602F545AA8D69F94A680B474E481D48BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:24:c8:32:7f:91:b1:45:57:18:21:e1:cd:
                    7f:5c:09:f2:d8:b5:11:92:63:74:60:1d:10:9e:23:
                    2f:ec:34:a0:c6:30:6b:68:ac:57:61:f4:38:31:c7:
                    ed:95:70:47:5c:47:a2:24:fe:49:fc:bb:53:11:b8:
                    5b:fc:86:cd:8a:41:26:45:ec:0e:4c:d1:24:b3:44:
                    45:bc:ce:99:38:86:d7:77:73:35:c4:51:bf:82:b4:
                    a4:ca:f2:33:ff:41:5f:42:5a:ca:89:87:2d:28:8d:
                    35:ef:57:39:b4:dc:40:23:b0:6f:c4:42:8f:c1:0b:
                    60:b7:c2:09:e4:c0:19:a8:4d:29:8c:da:5f:fb:79:
                    f7:b3:3c:73:c8:7d:c6:2c:7a:67:c5:b7:c0:94:b7:
                    51:b5:15:2b:5b:1b:48:48:7e:84:71:e9:31:d2:6a:
                    06:02:97:a3:bb:81:2d:b6:f6:4b:01:a2:7b:29:cb:
                    54:95:90:96:3e:d0:6e:0d:89:b6:d3:f4:cf:7d:56:
                    26:90:49:53:2d:42:ad:1c:1a:1b:88:dc:2d:3e:35:
                    ad:be:ca:55:1d:81:b9:59:05:bc:81:3e:db:26:5e:
                    db:a1:bf:b4:69:f9:b5:76:47:8c:4f:45:8c:38:12:
                    dc:89:91:57:b2:39:7f:6a:cb:0c:78:7f:a8:91:ae:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:93:60:2F:54:5A:A8:D6:9F:94:A6:80:B4:74:E4:81:D4:8B:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4aOTYC9UWqjWn5SmgLR05IHUi7g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:28:60:ea:5a:bc:be:57:d5:08:53:17:9d:83:c1:2c:6a:12:
         69:11:47:cf:2c:62:1b:60:c1:34:cf:0a:0b:10:ed:8b:ad:b6:
         f6:08:d5:cc:47:d2:e8:0e:f0:02:c1:30:b8:66:20:15:9e:7a:
         46:e1:6f:86:79:b9:1f:ee:4a:12:8b:46:a8:39:7d:20:a7:1d:
         65:e7:05:b7:8d:1e:66:9d:e9:3a:28:9f:86:25:95:b1:0e:4e:
         bd:ac:e3:6a:39:c4:70:5e:ca:ff:fb:2f:26:ae:8f:93:19:18:
         5c:fd:5d:01:4f:f0:0c:b7:32:9b:19:8b:a5:40:04:ee:e5:90:
         ed:5f:c9:4b:bb:9f:73:10:2c:10:87:9b:4a:e0:b8:be:a2:03:
         bb:86:64:15:43:c9:3b:ec:4f:e5:ab:20:20:27:ec:5f:47:d3:
         11:51:c1:31:2b:f8:7f:d5:af:ce:63:49:b0:68:fc:06:cd:33:
         00:45:e6:c2:20:39:59:2c:e5:44:7b:5c:da:3c:2d:94:5c:f5:
         ea:aa:78:56:d1:dc:0d:9c:d3:64:c1:63:0c:c3:78:5d:57:01:
         5c:b4:94:c6:27:cf:d8:59:9e:02:52:33:4b:53:dd:4a:cf:bc:
         39:de:30:20:f5:3f:b1:28:cd:ca:ea:c8:41:ac:41:47:b8:3f:
         76:fa:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 07:44:10 2024 by rpki-client on console-fra.rpki-client.org