Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/843qCCgLOuFyBBMBP8mpT7tHkPQ.roa
File:                     843qCCgLOuFyBBMBP8mpT7tHkPQ.roa (raw, json)
Hash identifier:          bG/Fwa7p5k7LUXzhdHtYLEv6u0vFMS+XLtU6DM5Ldbw=
Subject key identifier:   F3:8D:EA:08:28:0B:3A:E1:72:04:13:01:3F:C9:A9:4F:BB:47:90:F4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0258
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/843qCCgLOuFyBBMBP8mpT7tHkPQ.roa
Signing time:             Tue 30 May 2023 16:32:32 +0000
ROA not before:           Tue 30 May 2023 16:32:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.72.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F38DEA08280B3AE1720413013FC9A94FBB4790F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:f5:2c:82:4c:98:3c:e8:71:08:e9:2f:79:
                    bb:ff:7e:7b:7f:15:96:f7:d7:a5:ce:44:6c:01:7b:
                    e8:e2:30:e0:27:00:a6:ab:e9:15:94:61:98:d4:cb:
                    d5:cb:5d:5b:42:99:95:5e:db:ec:b5:82:8d:a0:2c:
                    74:07:77:51:e5:a4:29:85:14:b4:42:a3:84:b3:c0:
                    02:c8:63:dc:15:32:25:7d:a6:91:49:59:82:c6:bb:
                    ff:c3:1b:7b:e0:79:66:d8:63:04:66:54:e8:69:e1:
                    9a:b6:44:01:f5:91:07:e9:e8:ac:09:22:d3:e0:22:
                    a5:6e:91:ca:f6:9b:96:d3:ad:bf:34:d9:a2:cf:21:
                    a0:7e:e3:90:de:08:aa:69:78:a6:2b:ee:95:48:9a:
                    34:f2:25:05:52:b7:fe:3a:ae:e7:f8:5a:4f:1b:c9:
                    8d:c2:b2:fb:03:12:3b:52:56:9a:57:3e:b5:f2:94:
                    d0:79:43:bd:42:e0:da:71:eb:d4:32:07:92:01:21:
                    8c:5a:fe:44:3e:23:d1:7d:4f:96:9d:38:29:4a:c0:
                    fc:43:ab:e8:d7:84:8f:6a:02:d5:fe:5c:ac:6a:d2:
                    d3:33:01:7c:d1:91:e8:29:5b:20:ad:b4:f0:7a:09:
                    bf:29:91:91:a7:63:71:0e:86:9f:f4:95:8a:28:2d:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8D:EA:08:28:0B:3A:E1:72:04:13:01:3F:C9:A9:4F:BB:47:90:F4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/843qCCgLOuFyBBMBP8mpT7tHkPQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:20:c0:fc:15:ca:19:31:79:9f:c4:b6:22:a9:91:d9:43:5d:
         6a:42:1d:39:0d:eb:a8:d5:7b:a5:59:6b:81:a8:90:55:1b:f3:
         47:f9:dd:93:f4:40:98:82:e9:12:53:e1:c5:67:e1:e3:2c:10:
         68:23:a1:83:e8:82:d7:0a:8d:31:e4:cb:0b:ba:d8:b0:a9:49:
         df:d6:27:0e:35:e9:90:82:52:99:d2:55:a3:4d:82:2a:ea:e3:
         d4:80:10:3c:7c:90:a0:7c:d0:54:ad:94:9b:ca:c7:74:52:77:
         60:b7:e5:c2:f6:0e:3a:20:85:d6:07:bd:8f:93:7a:d2:d2:8d:
         47:3e:8a:f1:c1:46:16:a1:51:c8:bc:60:f9:d1:b7:34:16:cb:
         69:59:3b:d2:2b:83:98:e2:10:e0:83:e9:01:ab:8e:b7:f1:d5:
         a3:df:63:34:1c:a7:17:14:28:b6:f4:07:ee:23:2b:80:ab:a9:
         7b:7c:9e:53:e1:b4:27:c9:71:dd:6c:9e:35:03:3e:8e:70:66:
         28:8a:df:44:c9:cc:a6:3a:bc:a8:f8:73:0a:05:18:a1:6e:4f:
         5b:ba:4c:5b:53:c9:67:93:ab:87:1f:5b:6c:f5:27:e5:1f:28:
         b5:5e:1c:c3:84:c4:5b:d2:2e:ea:87:08:f2:12:f6:11:6d:55:
         9f:85:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org