Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/82VvLnxfi8wudG0NkRouSregTNY.roa
File:                     82VvLnxfi8wudG0NkRouSregTNY.roa (raw, json)
Hash identifier:          uGFr7c+5hVvjIMzyeJJXkQuxHMk4Nw7xWjJpvcjMGS0=
Subject key identifier:   F3:65:6F:2E:7C:5F:8B:CC:2E:74:6D:0D:91:1A:2E:4A:B7:A0:4C:D6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/82VvLnxfi8wudG0NkRouSregTNY.roa
Signing time:             Thu 01 Jun 2023 16:04:38 +0000
ROA not before:           Thu 01 Jun 2023 16:04:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:04:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F3656F2E7C5F8BCC2E746D0D911A2E4AB7A04CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:5e:3c:de:4d:6f:37:97:e3:39:33:db:19:
                    33:b5:34:cc:30:3e:c0:32:c3:5c:83:51:9a:0f:dc:
                    59:95:ac:cf:16:70:9d:7d:dc:35:f7:21:a3:a8:94:
                    72:02:7e:56:e0:00:1a:e2:18:92:06:87:ee:48:04:
                    bf:be:45:1f:5d:72:af:55:d7:5b:e7:eb:be:e2:25:
                    3a:cd:c5:e1:1d:25:4f:54:01:6d:8c:b5:76:23:b9:
                    3c:a1:e4:80:9e:03:4e:a0:7d:f3:d9:c8:2e:90:0e:
                    75:b9:d1:94:c1:f5:ad:34:a4:5d:f4:26:92:74:0c:
                    74:ba:ac:97:6f:b5:cf:94:db:41:ab:83:1b:4c:6e:
                    54:1d:6d:1e:fa:c9:2d:9f:c7:75:f6:84:2f:f1:00:
                    68:46:c4:03:11:9e:dd:eb:a1:d9:c8:08:c9:c7:8e:
                    29:95:5b:7a:3c:b3:34:1a:4e:e0:9d:92:a3:e3:00:
                    8e:04:7f:fb:59:67:68:85:4f:09:51:d6:44:e7:ec:
                    ef:35:d5:52:b5:26:48:a6:31:22:05:bc:54:7f:0c:
                    83:4d:22:8d:2b:32:53:33:2a:27:cc:9c:b5:d2:a9:
                    e3:7e:6b:f7:f5:57:24:3a:c4:97:f4:d2:82:5f:18:
                    80:9a:d7:47:aa:e1:31:56:8b:6d:24:85:47:07:3a:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:65:6F:2E:7C:5F:8B:CC:2E:74:6D:0D:91:1A:2E:4A:B7:A0:4C:D6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/82VvLnxfi8wudG0NkRouSregTNY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:d6:9d:08:7a:17:5d:40:94:c4:76:0c:49:d9:03:55:1c:c1:
         d8:bd:96:e9:9d:06:74:e9:bd:11:f6:7f:05:99:58:28:7a:b6:
         ac:21:9f:b0:5f:53:20:15:3c:14:8e:d5:9c:03:52:92:f1:80:
         d0:0a:75:8c:d3:a4:98:a6:f0:1e:23:28:75:d2:61:e6:1d:31:
         91:c4:f1:c1:f6:50:0d:ef:11:bf:17:a0:55:c9:7f:4e:d6:33:
         2b:c8:9b:3e:c4:1c:d1:7c:4e:59:24:48:3c:43:af:95:ad:84:
         08:b0:72:69:f2:56:22:21:f8:76:92:b0:13:9d:2b:f4:d1:06:
         d2:7e:11:6a:20:77:c1:58:1c:5e:b8:39:d8:07:4e:4b:20:e0:
         af:d1:f0:47:26:cf:ae:8d:2d:3c:1a:17:67:f8:8e:1d:13:c8:
         cc:38:17:cb:33:29:5d:d5:20:8f:7e:0d:cb:b3:e5:a3:eb:bd:
         5a:c4:65:df:76:d4:f6:a3:93:2b:3c:8c:86:74:ca:11:81:ae:
         b3:1d:e9:56:14:75:db:1c:16:f5:e0:93:a8:db:08:7d:b6:5d:
         3e:e7:1b:d7:82:e2:af:9e:48:78:0b:85:ff:9c:73:07:a2:d6:
         a4:71:bf:87:b2:b0:f3:49:93:4a:bf:4c:34:c0:29:10:b2:ab:
         69:39:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org