Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KLxeIPcI7gbbduidPgBtohQZ3Lg.roa
File:                     KLxeIPcI7gbbduidPgBtohQZ3Lg.roa (raw, json)
Hash identifier:          z8XuBJRVu5fNuQmsByiSFVpR5apfwBTN6KINtgamQvE=
Subject key identifier:   28:BC:5E:20:F7:08:EE:06:DB:76:E8:9D:3E:00:6D:A2:14:19:DC:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0130
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KLxeIPcI7gbbduidPgBtohQZ3Lg.roa
Signing time:             Wed 24 May 2023 16:30:21 +0000
ROA not before:           Wed 24 May 2023 16:30:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.2.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=28BC5E20F708EE06DB76E89D3E006DA21419DCB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:b9:34:af:a7:b4:93:d7:ab:51:d8:21:10:
                    2a:86:0e:bb:c6:b9:48:ea:66:a6:bc:c5:df:c5:a6:
                    e5:74:23:34:cb:7a:9d:f8:cd:ae:1c:bb:b2:55:d8:
                    2d:f0:22:7a:62:a0:cf:21:d9:d3:07:0f:91:58:4a:
                    c0:0c:4a:32:5e:82:ba:2c:29:d5:7d:71:ec:e1:83:
                    c1:0a:b7:4b:a4:2d:62:c9:0a:19:1b:7f:3c:40:8c:
                    63:c7:4d:10:c2:a0:7a:ff:51:db:03:ef:0f:d6:6b:
                    6c:96:bf:11:4e:4b:e0:f1:5b:fe:fd:9e:c4:76:73:
                    31:86:8f:84:6a:23:9f:df:96:57:c3:05:f3:77:60:
                    f3:17:62:62:4b:57:89:c6:95:9c:6a:c1:47:fc:7c:
                    08:aa:94:b0:78:fd:9c:f8:0f:35:b8:84:35:0b:fa:
                    89:d5:f1:49:10:0a:d8:e3:96:e7:69:29:ff:15:1d:
                    cd:94:df:40:c3:1d:2f:a1:8f:9d:49:b5:38:44:22:
                    62:7b:23:a3:bf:dc:8f:07:42:41:a5:91:57:10:2c:
                    b3:fc:6c:4d:7d:5f:10:81:e4:fa:6f:43:43:53:6e:
                    7a:82:20:35:30:4e:4d:66:aa:49:b8:0a:36:87:b2:
                    40:29:51:10:8c:67:66:cf:0c:83:a1:a2:b6:4c:90:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BC:5E:20:F7:08:EE:06:DB:76:E8:9D:3E:00:6D:A2:14:19:DC:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KLxeIPcI7gbbduidPgBtohQZ3Lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:96:22:2f:b2:df:de:26:b2:9e:82:4f:0b:1b:b6:43:02:
         f3:6a:d0:0d:00:e1:67:cc:a6:b3:55:6e:b4:7d:37:c8:92:a4:
         bf:75:db:1f:74:65:78:f2:b0:8f:18:ab:42:0a:41:18:b6:82:
         4c:05:72:e5:e7:d0:51:d1:ae:26:4c:65:55:37:b3:8d:2e:42:
         af:28:ac:9d:9e:4c:86:5d:7e:8c:13:fd:36:f6:24:4c:b0:d0:
         c5:69:39:d4:5a:68:ad:05:bc:b3:70:a0:41:3c:8c:5e:43:44:
         ee:86:c3:76:3a:bc:87:53:c8:a3:a7:e9:46:39:b5:a8:dd:28:
         18:48:a8:e9:4a:98:2a:8d:81:e4:24:3d:28:cf:9d:c5:b4:f9:
         cf:c3:89:7a:7d:04:5f:65:be:00:c4:dc:34:7e:fc:c1:64:d1:
         26:d9:ac:81:1d:b8:75:68:2f:67:f7:bf:cf:bb:75:ad:15:a1:
         9b:b9:24:21:2e:ed:ad:0e:ed:76:36:b9:f9:fe:29:8d:d6:8c:
         82:51:73:95:92:ba:7a:83:99:77:9f:b1:85:f3:61:13:bb:cb:
         5b:cc:0e:65:63:48:c7:54:08:bf:fb:17:7e:b4:6b:36:c5:c2:
         db:22:99:25:6b:9f:f5:38:60:8a:0e:8d:77:e7:f6:8d:45:ea:
         e6:8c:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org