Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BZ2zFF7Ge7vSaezvo7XUtJSjibw.roa
File:                     BZ2zFF7Ge7vSaezvo7XUtJSjibw.roa (raw, json)
Hash identifier:          7qepX7PUS1MWDL/VhfxXT5chruBZSIXSaxtztCtyj0c=
Subject key identifier:   05:9D:B3:14:5E:C6:7B:BB:D2:69:EC:EF:A3:B5:D4:B4:94:A3:89:BC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       40
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BZ2zFF7Ge7vSaezvo7XUtJSjibw.roa
Signing time:             Mon 27 Mar 2023 16:02:09 +0000
ROA not before:           Mon 27 Mar 2023 16:02:09 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:09 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=059DB3145EC67BBBD269ECEFA3B5D4B494A389BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:cd:0c:42:a8:4a:6f:48:56:7d:9d:3b:0f:
                    4a:2a:a9:f6:d2:2a:43:b3:67:4e:6f:cc:41:b8:74:
                    df:0a:64:8b:ba:10:a3:54:a1:e4:b7:67:97:e8:32:
                    46:f8:11:8f:49:21:5c:18:5f:9c:60:79:79:3d:64:
                    04:60:64:51:58:48:d5:35:02:6f:28:2f:26:7d:50:
                    04:d8:ba:a3:47:d2:45:e0:28:2b:89:fe:3e:ed:ee:
                    7a:2a:23:4f:f5:30:4b:6b:18:84:7c:5e:2d:b2:98:
                    c2:ee:54:af:cd:b5:55:d9:af:7c:dd:3e:a5:d6:b2:
                    ab:02:c7:f5:d7:2e:dc:21:7e:c0:58:4c:0e:9b:84:
                    7f:68:86:de:c6:2e:82:0d:de:4c:80:a2:42:95:5f:
                    25:28:de:71:46:40:ed:85:5e:31:7b:13:3d:5d:dc:
                    f2:5a:86:36:f9:eb:d4:4d:40:9e:c7:7a:1e:fb:a9:
                    33:7c:cc:c1:0c:93:ea:58:b5:3c:d3:0b:d4:0b:8e:
                    ec:95:ef:06:04:28:59:d2:09:ae:d0:a8:8f:d0:3d:
                    fd:df:db:84:5d:95:18:4b:bc:89:9e:aa:4d:3f:46:
                    ec:95:82:db:2f:13:0a:14:2d:10:cd:31:95:dd:47:
                    dc:5b:1a:8e:53:39:d4:44:3d:b8:0c:09:e8:b0:5d:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9D:B3:14:5E:C6:7B:BB:D2:69:EC:EF:A3:B5:D4:B4:94:A3:89:BC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BZ2zFF7Ge7vSaezvo7XUtJSjibw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:be:dd:8e:97:51:e6:db:e3:aa:a2:3b:9f:1f:0d:a3:b4:2c:
         3b:4f:f8:7e:34:3e:b9:fe:62:04:3a:14:62:3d:f3:f2:9a:9f:
         72:8f:ce:5a:05:90:35:58:74:ce:3a:00:88:d2:94:40:35:8b:
         59:10:45:05:ea:77:19:60:38:e7:14:15:c0:22:f1:88:13:3b:
         bb:29:03:79:98:ed:6c:b1:5c:dd:76:e8:f1:02:76:85:2d:d3:
         6d:b0:49:48:1f:79:92:1c:3f:de:49:32:5e:7d:cd:36:52:00:
         ed:88:75:85:70:3d:36:f2:0d:ba:6c:04:68:09:f4:70:c0:a4:
         20:aa:a4:86:85:c3:4f:87:e9:1e:fd:41:91:3b:56:ec:41:20:
         b4:46:6b:19:52:5f:fc:7c:08:43:dd:63:07:3d:a5:0d:f1:05:
         bc:40:a4:2e:d6:6c:cf:66:cf:14:9f:43:6d:b7:9a:21:8e:14:
         8e:79:0b:26:bb:83:c9:09:f0:a0:d3:ee:ea:a4:2f:3b:64:98:
         ff:89:8a:15:b7:75:fb:f1:5b:e4:1c:14:e6:db:63:eb:0e:3c:
         ff:e2:58:62:84:b9:7b:d2:e6:d9:06:53:cf:18:03:d9:29:58:
         c6:6a:19:68:8b:3a:7b:9c:7c:46:76:d9:5a:cf:ec:b7:80:9a:
         bb:00:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org