Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5eIa5eQYI7i5n5tfJu0AdIpBXy0.roa
File:                     5eIa5eQYI7i5n5tfJu0AdIpBXy0.roa (raw, json)
Hash identifier:          HG50FWBqEQ5cv8Q2UYygSHgtFpcFVfsGOsl4yd7LSlk=
Subject key identifier:   E5:E2:1A:E5:E4:18:23:B8:B9:9F:9B:5F:26:ED:00:74:8A:41:5F:2D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5eIa5eQYI7i5n5tfJu0AdIpBXy0.roa
Signing time:             Wed 24 May 2023 16:40:34 +0000
ROA not before:           Wed 24 May 2023 16:40:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E5E21AE5E41823B8B99F9B5F26ED00748A415F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:a0:04:b9:eb:5b:ea:d6:d5:b0:f8:da:dc:
                    19:c1:4b:09:96:69:5c:b3:03:bd:6e:b7:a2:ea:db:
                    06:0c:8d:40:92:fe:fe:86:94:72:87:d7:63:0b:13:
                    80:96:94:2c:bd:8d:34:bc:94:e6:ac:67:4d:7b:56:
                    34:18:65:15:a4:0e:b4:45:ce:cb:89:b7:1b:fa:0d:
                    18:c9:1b:59:54:9a:d6:fc:70:c9:88:78:cd:01:03:
                    23:64:6a:ae:5b:5e:89:07:92:8d:74:38:ce:87:fe:
                    a5:4a:56:94:ef:93:52:63:75:03:6b:d5:4a:6f:6d:
                    45:95:64:c7:81:31:77:c5:8d:2b:b3:b7:ec:97:d7:
                    ac:8f:fb:29:30:55:9f:8e:67:f2:8f:be:78:8c:6d:
                    ec:05:02:1f:2d:a6:01:5a:a4:7b:16:f0:51:87:8d:
                    62:18:1b:30:57:66:6a:eb:09:56:13:bf:10:6d:45:
                    86:19:89:5e:9d:66:a6:aa:89:0c:11:df:1c:82:03:
                    ae:79:be:05:e5:80:8c:08:f7:9e:80:f9:6d:24:5e:
                    7a:55:f1:b8:50:e0:c7:dc:e2:82:35:8a:ad:51:8e:
                    fb:dc:a4:50:5f:64:b0:d8:4c:7b:48:91:8f:4e:ce:
                    23:18:28:d0:27:c9:44:9d:86:cf:a6:ea:2f:cc:2b:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:1A:E5:E4:18:23:B8:B9:9F:9B:5F:26:ED:00:74:8A:41:5F:2D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5eIa5eQYI7i5n5tfJu0AdIpBXy0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:76:0c:51:56:99:e8:99:93:3d:25:32:92:9b:1b:9d:60:18:
         09:47:ac:21:96:b6:9a:9d:39:5b:c0:84:46:e2:c2:8c:ad:13:
         37:1a:bb:bb:45:b3:02:e2:3f:8f:86:fd:87:1e:a7:d7:19:8b:
         7b:78:eb:c2:0e:d3:e1:86:db:73:0e:e0:a4:49:88:e0:99:6d:
         49:18:b6:68:bd:77:9a:51:ec:8c:30:7f:39:79:b6:9e:89:94:
         69:bf:ff:b6:34:89:bc:bb:f8:4c:a3:26:ec:78:f1:b3:33:25:
         1a:ad:e3:de:a3:1e:b3:8d:b5:89:06:04:2d:e4:a0:4d:ae:30:
         53:48:ea:f3:83:32:79:f0:9a:c5:34:f5:9f:eb:a6:9e:31:6f:
         a0:b2:51:bf:f4:a8:99:31:1d:7a:3d:d2:00:7a:c5:02:fe:33:
         9e:be:32:91:01:d1:1e:e1:fb:2d:7f:aa:e1:0b:dc:86:ca:f6:
         61:fa:3b:69:ab:8b:20:ae:53:fc:84:c9:21:e6:45:63:3d:e6:
         69:0f:3b:a5:5d:a1:9d:71:c3:6e:09:e1:f9:10:71:eb:e8:6a:
         7f:26:ae:91:78:55:cd:b6:f0:c4:90:3f:14:08:f2:1d:87:c7:
         be:02:85:87:db:d9:78:28:09:48:dd:dc:37:55:46:69:35:7c:
         4f:b6:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org