Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wed0PV0iWvhbDpjAJLldg70Sa4U.roa
File:                     Wed0PV0iWvhbDpjAJLldg70Sa4U.roa (raw, json)
Hash identifier:          n1I4uln+qvGk1J49w2qHcFck+rAbThEnluC67hrS2Oo=
Subject key identifier:   59:E7:74:3D:5D:22:5A:F8:5B:0E:98:C0:24:B9:5D:83:BD:12:6B:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0527
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wed0PV0iWvhbDpjAJLldg70Sa4U.roa
Signing time:             Thu 27 Jul 2023 16:54:10 +0000
ROA not before:           Thu 27 Jul 2023 16:54:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.66.20.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=59E7743D5D225AF85B0E98C024B95D83BD126B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:25:59:08:1b:ee:21:0a:d8:28:ac:5e:ed:
                    c0:09:46:dd:51:4c:7c:0b:66:b1:a0:91:32:db:1d:
                    c8:8d:e6:96:fd:e2:fc:05:c1:66:1b:ad:68:ed:08:
                    0c:99:3e:7e:0a:91:1c:0c:b1:d3:97:f8:ce:d2:e0:
                    99:b0:5a:b4:ea:23:28:03:27:62:7d:eb:2a:8d:72:
                    0c:f5:d9:b3:b2:ce:87:29:77:c9:ed:58:d0:de:f4:
                    f9:ce:f4:53:99:ee:60:d5:14:87:65:f0:87:76:a6:
                    78:c7:43:0c:da:2b:0f:75:9e:0d:f5:f2:b6:db:e0:
                    c4:5a:e8:64:53:df:16:68:e6:61:36:d1:9a:4b:a3:
                    93:a7:0e:47:0d:fb:23:32:4f:a4:2a:a8:d6:d2:4e:
                    49:47:44:32:a1:9e:18:87:c8:87:4f:47:6c:37:27:
                    90:b8:7a:52:18:82:d3:d0:e7:59:0b:f6:61:5c:7d:
                    c2:19:27:92:56:95:e8:f8:d5:e5:37:2a:dd:69:2e:
                    cf:d1:97:d9:58:e0:74:15:4e:83:23:cc:48:da:31:
                    3b:e8:d6:f9:74:8b:8a:e3:94:ff:72:02:01:43:33:
                    6d:4e:9d:68:01:8e:c5:29:06:93:6e:53:b6:db:91:
                    a0:cc:79:81:a6:2b:ad:c2:93:58:bd:db:c4:e4:d9:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E7:74:3D:5D:22:5A:F8:5B:0E:98:C0:24:B9:5D:83:BD:12:6B:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wed0PV0iWvhbDpjAJLldg70Sa4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:77:16:4b:b9:20:4a:31:4b:41:6f:f0:ba:76:19:d8:7d:71:
         aa:7a:05:c4:90:b5:b0:33:ea:28:fe:ce:74:80:72:bb:99:89:
         d4:f2:28:8b:95:3a:4b:bc:78:16:bc:3f:4e:ef:2c:43:5d:3b:
         3c:d9:9c:dc:5e:65:3b:51:b6:6e:32:c5:23:1d:b3:c0:44:cd:
         39:6d:a7:5f:92:e1:ad:85:a8:dc:ff:1e:a9:99:8f:55:fe:d3:
         15:35:d8:09:78:79:d1:fe:f7:a0:49:43:65:c2:af:9b:a4:2e:
         a5:d2:a6:da:6c:6e:a1:3b:f1:d6:b5:57:50:33:f7:2c:fd:73:
         08:6c:a1:cb:8b:04:08:b0:dc:e1:31:92:d0:a6:12:2f:45:ef:
         7a:fb:d0:7a:db:3d:e2:e1:c6:09:95:63:97:77:1d:1a:86:b3:
         75:6c:dc:26:a2:8c:e6:e0:60:56:b0:20:97:59:77:f7:99:a8:
         33:f3:dd:7e:05:6a:07:4a:6a:97:6e:dc:55:fe:aa:7b:c5:6c:
         8a:14:e3:ca:da:48:a4:30:f4:13:f6:5a:36:15:a3:e1:a5:b3:
         07:82:61:54:95:d0:97:1d:4c:54:40:4d:81:ba:25:93:4d:7a:
         d1:3a:27:b4:21:96:e1:0f:92:d3:a5:f5:6d:ba:c7:44:78:5e:
         91:2f:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:20 2024 by rpki-client on console-fra.rpki-client.org