Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/W1o1SeB8sLLcw2uua12vnW68DnI.roa
File:                     W1o1SeB8sLLcw2uua12vnW68DnI.roa (raw, json)
Hash identifier:          mT3INX3t+QzsaA8aQYgfmrFMABkiVdUW0R2XGAigRsU=
Subject key identifier:   5B:5A:35:49:E0:7C:B0:B2:DC:C3:6B:AE:6B:5D:AF:9D:6E:BC:0E:72
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0551
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W1o1SeB8sLLcw2uua12vnW68DnI.roa
Signing time:             Thu 27 Jul 2023 16:56:13 +0000
ROA not before:           Thu 27 Jul 2023 16:56:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.128.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=5B5A3549E07CB0B2DCC36BAE6B5DAF9D6EBC0E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:74:0b:c8:88:e3:d2:31:e0:45:e3:c6:15:
                    40:46:56:5a:c6:cb:11:5c:c5:2f:cd:41:52:83:02:
                    54:16:98:f4:97:dc:d5:1d:63:5e:29:da:2c:e9:dc:
                    58:5d:39:78:12:93:4e:2b:1f:42:ba:67:08:91:27:
                    43:11:db:a0:50:48:2d:48:b7:11:0c:57:79:00:35:
                    2a:96:0a:50:a9:af:55:f5:f3:68:fd:81:05:18:53:
                    7e:29:52:b8:01:47:af:57:b2:fc:3b:a9:67:0f:99:
                    3c:f9:5c:54:8a:c2:31:c2:82:21:be:6a:da:55:62:
                    03:5a:0b:96:f2:aa:94:b5:3b:dc:94:d7:f6:6a:bf:
                    2a:e3:27:68:0d:7e:66:3e:46:d6:92:6e:d0:58:00:
                    9b:c6:9c:f8:03:9b:6e:66:78:0f:84:69:49:2a:61:
                    c3:5b:b9:e2:58:65:a5:5c:1e:97:1d:da:2c:59:31:
                    46:64:06:2a:b6:1a:f6:6f:50:1a:c1:a2:9d:ef:0c:
                    ee:4d:cd:5b:59:ca:69:31:6d:03:ff:aa:1b:29:5c:
                    85:6a:97:35:e5:df:7e:28:8d:8d:86:c4:40:f3:ec:
                    dd:b9:9e:31:b7:e6:74:33:39:b9:d0:91:07:12:8e:
                    ac:05:68:06:6f:d0:dc:50:ef:31:4a:ce:ea:04:8c:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5A:35:49:E0:7C:B0:B2:DC:C3:6B:AE:6B:5D:AF:9D:6E:BC:0E:72
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/W1o1SeB8sLLcw2uua12vnW68DnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:35:90:c4:92:fa:09:60:66:50:dc:63:7e:de:a8:5e:16:0c:
         10:1b:56:9a:2b:9b:3f:50:81:77:fb:ff:44:6a:da:38:77:2e:
         ce:52:92:a7:99:84:23:55:4c:07:fb:9f:89:77:d6:e4:0f:77:
         29:74:49:94:84:42:2c:f1:8a:32:cd:76:f4:50:45:36:fb:e0:
         f0:07:9f:ce:dc:22:9b:83:b3:84:3e:97:af:17:6d:32:20:ed:
         a8:e4:e3:9a:42:8c:67:07:6c:a2:62:b9:e3:8a:7c:ef:27:f0:
         8f:17:6c:bf:3a:c8:ea:f2:40:e5:52:8c:de:e6:46:55:cb:b8:
         0f:23:19:b5:5a:1f:b6:18:35:e0:43:e1:2d:9a:ce:da:65:f9:
         27:8a:25:41:7a:19:35:a0:4f:42:2f:a1:e4:fe:36:d3:a4:0c:
         f4:cb:0f:d1:db:e4:e4:7f:4f:5c:48:59:f2:ca:30:66:cb:e1:
         96:fc:a0:57:ad:77:3f:b1:a2:b3:ac:4d:59:89:d5:59:7e:a0:
         aa:bc:02:6a:4d:e0:6c:bc:17:75:18:2e:2d:41:ee:09:46:bf:
         9b:ed:8d:54:4c:ac:45:e3:93:01:bd:1f:9e:5e:79:07:a2:b2:
         57:38:e9:e0:63:d2:e3:9c:0c:71:40:3b:90:05:61:33:dd:2c:
         05:b8:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:47 2024 by rpki-client on console-ams.rpki-client.org