Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CReox11adERweLMJe8HpDtdP6yA.roa
File:                     CReox11adERweLMJe8HpDtdP6yA.roa (raw, json)
Hash identifier:          fWtWdXdoKwwDkO2LcTaBvkq0doudlmnlMHboiFFCYfA=
Subject key identifier:   09:17:A8:C7:5D:5A:74:44:70:78:B3:09:7B:C1:E9:0E:D7:4F:EB:20
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       5E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CReox11adERweLMJe8HpDtdP6yA.roa
Signing time:             Mon 27 Mar 2023 16:04:32 +0000
ROA not before:           Mon 27 Mar 2023 16:04:32 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:32 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0917A8C75D5A74447078B3097BC1E90ED74FEB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:1c:78:e9:ad:61:f0:a2:00:ba:4f:42:68:
                    ac:86:77:1e:1c:9e:1e:87:12:37:1b:da:11:ff:6d:
                    fd:10:95:e4:d4:b6:3d:1b:8d:66:e8:6f:f3:41:ac:
                    09:20:ab:4d:a7:8f:aa:f9:d0:c3:c2:84:94:0e:03:
                    92:78:cd:75:98:27:93:fb:ac:a7:c6:a1:8f:6b:8b:
                    12:37:21:5e:d2:f1:e8:a0:d1:9b:74:37:f9:01:97:
                    5a:50:2f:e1:05:fc:eb:8d:fa:a8:e1:3a:4e:66:ce:
                    43:f3:29:a3:ef:37:07:f5:36:7f:a0:a1:54:29:35:
                    a6:f3:c0:3a:c3:96:c7:0d:ab:1e:76:09:40:61:b0:
                    a8:f0:ac:6b:7b:2d:39:d8:90:2d:38:da:e5:55:b4:
                    d3:ef:83:90:f9:0d:ca:6f:f5:87:35:1f:f8:9b:e0:
                    fa:ba:ad:34:39:7e:b5:d3:4c:95:b1:1d:f2:8f:15:
                    30:ad:30:cf:63:e1:48:53:5b:db:fa:25:0b:29:d2:
                    6b:bd:f5:0d:6e:11:1f:a2:d1:89:bc:c1:63:52:0f:
                    76:50:d2:e5:20:db:cb:e5:dc:8b:53:20:40:34:40:
                    85:cd:bb:38:c0:c6:8a:54:f6:f4:0c:58:cd:2e:68:
                    be:12:c7:56:37:54:23:38:01:51:ec:15:40:18:1c:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:17:A8:C7:5D:5A:74:44:70:78:B3:09:7B:C1:E9:0E:D7:4F:EB:20
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CReox11adERweLMJe8HpDtdP6yA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:1c:f2:d3:75:9b:a0:3f:f2:ef:83:7f:1e:7c:b2:8b:c9:
         f4:a1:49:0b:4b:92:45:44:21:28:f2:2c:a2:a4:1c:1e:00:cd:
         28:a3:6b:73:55:86:1b:09:a0:c7:ea:aa:58:8c:b8:e0:c0:13:
         8d:20:83:91:49:33:b2:1d:40:60:58:4c:46:8f:f4:9f:f6:13:
         b6:ad:72:9c:d3:55:e7:8c:e2:66:6b:81:e0:85:e9:6a:62:1a:
         bd:8c:d1:06:a0:e9:9d:57:e1:ac:1b:4f:d4:58:1e:6e:10:5a:
         ae:7c:5e:25:89:86:df:2f:20:b5:7b:2b:c6:e7:bb:ec:87:c5:
         a0:ce:25:ea:91:83:75:cf:e9:17:98:34:0a:4f:c5:9d:32:e9:
         f9:a6:1f:bb:92:57:d5:16:bf:2a:92:2b:b4:9f:33:74:06:61:
         ed:3a:47:f3:4c:29:20:53:5a:a1:9e:11:30:7e:fd:86:04:c9:
         70:9c:24:4e:3d:d3:a6:b4:50:d7:bc:9a:e8:3f:0a:50:6c:9d:
         62:97:82:32:93:68:68:9e:d9:bc:6a:c5:5c:97:07:82:be:5c:
         16:a2:f7:85:b7:13:dc:0a:81:e1:85:53:76:16:2d:73:b0:b3:
         48:c1:15:f3:66:f0:a1:37:fa:e5:f2:6f:d4:49:e0:0e:39:db:
         f0:0b:99:73
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MDQzMloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMDkxN0E4Qzc1RDVBNzQ0
NDcwNzhCMzA5N0JDMUU5MEVENzRGRUIyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKY5HHjprWHwogC6T0JorIZ3HhyeHocSNxvaEf9t/RCV5NS2PRuN
Zuhv80GsCSCrTaePqvnQw8KElA4DknjNdZgnk/usp8ahj2uLEjchXtLx6KDRm3Q3
+QGXWlAv4QX86436qOE6TmbOQ/Mpo+83B/U2f6ChVCk1pvPAOsOWxw2rHnYJQGGw
qPCsa3stOdiQLTja5VW00++DkPkNym/1hzUf+Jvg+rqtNDl+tdNMlbEd8o8VMK0w
z2PhSFNb2/olCynSa731DW4RH6LRibzBY1IPdlDS5SDby+Xci1MgQDRAhc27OMDG
ilT29AxYzS5ovhLHVjdUIzgBUewVQBgcq+MCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQJF6jHXVp0RHB4swl7wekO10/rIDAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvQ1Jlb3gxMWFkRVJ3ZUxNSmU4SHBEdGRQNnlBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBLdKYDANBgkqhkiG9w0BAQsFAAOCAQEASR4c8tN1m6A/8u+Dfx58sovJ9KFJ
C0uSRUQhKPIsoqQcHgDNKKNrc1WGGwmgx+qqWIy44MATjSCDkUkzsh1AYFhMRo/0
n/YTtq1ynNNV54ziZmuB4IXpamIavYzRBqDpnVfhrBtP1FgebhBarnxeJYmG3y8g
tXsrxue77IfFoM4l6pGDdc/pF5g0Ck/FnTLp+aYfu5JX1Ra/KpIrtJ8zdAZh7TpH
80wpIFNaoZ4RMH79hgTJcJwkTj3TprRQ17ya6D8KUGydYpeCMpNoaJ7ZvGrFXJcH
gr5cFqL3hbcT3AqB4YVTdhYtc7CzSMEV82bwoTf65fJv1EngDjnb8AuZcw==
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org