Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBzYLcqOh5aFd7oHHglqN4i2uFc.roa
File:                     SBzYLcqOh5aFd7oHHglqN4i2uFc.roa (raw, json)
Hash identifier:          xZ8nvINFKO6pDp47/kjIBGcx/IypOJxr7S9wNu+BMho=
Subject key identifier:   48:1C:D8:2D:CA:8E:87:96:85:77:BA:07:1E:09:6A:37:88:B6:B8:57
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       026D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBzYLcqOh5aFd7oHHglqN4i2uFc.roa
Signing time:             Tue 30 May 2023 16:34:17 +0000
ROA not before:           Tue 30 May 2023 16:34:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=481CD82DCA8E87968577BA071E096A3788B6B857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:1a:85:d2:2c:47:9a:c1:75:36:12:f7:6c:
                    e8:20:33:3f:a8:70:ca:0f:6b:be:ee:72:08:de:dd:
                    75:b7:3c:39:0e:37:f4:9b:97:49:c5:0b:40:a1:e2:
                    eb:4c:8e:b1:15:e9:c7:23:99:3d:76:9e:8f:6a:56:
                    4d:3f:4d:25:27:c7:7b:a0:dc:d9:2c:fd:10:66:0b:
                    9f:75:66:f6:77:19:b4:5b:b8:0e:f8:78:fe:87:66:
                    08:ed:71:78:7b:87:aa:32:88:ae:61:68:05:cc:36:
                    da:16:ce:12:2b:18:d3:ee:2d:ac:25:2e:66:91:12:
                    ff:6c:4f:0c:cc:9d:e8:20:99:53:f3:23:8e:bb:94:
                    5f:03:76:01:9b:45:0a:8f:e2:f4:1f:2b:f4:72:0f:
                    62:45:5c:09:1c:14:21:36:af:d2:fe:80:91:7c:f5:
                    04:aa:52:f4:22:e1:fc:b2:22:1b:1a:ef:84:cc:d3:
                    7d:61:34:17:36:50:cb:95:52:c8:fd:7c:22:f2:b0:
                    79:de:e2:93:b2:1c:de:c0:1c:d9:aa:52:06:c4:03:
                    a2:e5:59:0e:68:c5:95:ed:0a:da:47:b9:67:72:5b:
                    e0:5e:1b:3f:a9:e6:b9:5d:84:db:1d:d8:a5:88:9a:
                    af:29:7b:fa:be:4e:8a:b7:d4:b8:77:2b:7d:08:41:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:D8:2D:CA:8E:87:96:85:77:BA:07:1E:09:6A:37:88:B6:B8:57
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBzYLcqOh5aFd7oHHglqN4i2uFc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:22:d0:ea:e8:52:42:26:dc:9d:1d:18:0d:f5:19:c1:b2:1d:
         51:e0:4b:e9:ef:47:fe:a1:fe:19:f1:75:72:15:bb:6c:5a:1e:
         d2:bd:9c:2c:ee:bd:1e:f8:49:a7:cc:17:c1:d7:a7:9f:bc:cf:
         d3:d3:e7:ed:fb:e7:bf:6d:c2:b5:a7:bf:6e:54:e6:07:5d:f9:
         84:6e:7d:b0:20:53:db:29:28:f0:3a:64:1c:ef:a2:b2:52:e5:
         50:97:0b:63:a8:ee:c9:bf:fa:9b:dd:b7:26:fa:91:e1:8e:27:
         e0:1d:ee:d0:cb:14:84:31:bc:59:b8:9b:eb:ce:ee:64:41:3e:
         74:10:46:ca:9b:85:c8:a0:06:bf:7d:da:2d:18:ac:96:b4:26:
         9d:8f:21:0b:d3:ae:ef:a6:25:06:9e:6e:f5:e7:26:39:24:13:
         e9:9f:c8:53:37:c0:67:73:ce:c5:cf:57:5b:60:1f:4b:e6:31:
         d4:21:f2:1e:34:c2:c5:1c:34:52:e1:19:3c:4f:44:f3:d0:05:
         06:dc:15:90:9e:1a:d4:e9:02:88:2d:02:5d:92:c0:83:08:55:
         a5:6d:3b:d3:1b:13:0f:34:ee:6d:15:f8:c2:9f:7a:38:60:ec:
         e1:29:27:31:12:fd:96:95:95:d6:1b:2d:ac:af:03:b5:f4:e9:
         25:e8:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org