Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa
File:                     ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa (raw, json)
Hash identifier:          Sp1WWuVOsyI0f3R89RfX8bIKLD4QJFq2VXEQonK1Mjo=
Subject key identifier:   64:CE:9A:1E:76:54:1E:00:B1:2F:82:C1:DA:00:7E:84:41:C5:FD:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       021F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa
Signing time:             Tue 30 May 2023 16:30:29 +0000
ROA not before:           Tue 30 May 2023 16:30:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=64CE9A1E76541E00B12F82C1DA007E8441C5FD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:d1:e6:a5:bf:be:5b:a5:b6:53:73:ad:89:
                    d4:18:c9:19:07:9d:3a:6f:5a:7c:6f:12:49:1f:87:
                    aa:1b:ea:41:ef:4e:c9:3c:10:6a:7c:cf:f8:52:49:
                    3d:10:a0:39:70:f8:e3:44:b5:86:1d:f0:40:c3:d9:
                    fb:5b:fd:02:d2:92:46:84:9e:a3:ef:33:07:4d:7d:
                    cd:8b:82:a5:8f:95:eb:a7:f5:f5:a4:06:f8:b6:65:
                    d7:73:f9:13:08:58:11:1f:2a:42:ea:ce:9c:01:fc:
                    ea:7f:59:f6:ff:f0:ae:1c:88:f9:1c:43:65:83:5a:
                    73:2b:c9:a9:9c:94:3b:cc:11:c7:85:cc:f0:f8:57:
                    b9:2a:c0:82:cc:6f:ca:78:27:b0:9b:db:09:15:3b:
                    86:63:f0:af:55:be:8d:5e:84:95:f8:d0:ea:d7:31:
                    7b:80:c5:1e:24:81:ee:8f:7d:35:5b:0c:ea:77:84:
                    0c:d1:59:84:ce:07:4d:f8:a8:20:c0:c5:94:e7:b2:
                    45:b7:54:42:2b:3b:cd:2e:99:c0:96:58:69:9d:e3:
                    17:21:43:87:fb:18:46:c6:7d:65:17:1f:28:4c:6f:
                    d9:b5:96:dd:ff:e2:f0:78:1b:41:6a:08:33:ba:52:
                    a4:12:03:19:1c:12:62:0d:7f:c5:ec:34:18:5d:77:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CE:9A:1E:76:54:1E:00:B1:2F:82:C1:DA:00:7E:84:41:C5:FD:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         61:1e:b8:bc:07:ea:08:8f:81:cb:fe:8f:90:71:69:b7:6d:e8:
         ce:35:5c:c3:ec:ca:bf:14:c9:fc:a7:a0:39:2c:85:59:30:73:
         d7:7d:ef:6a:85:05:88:30:ca:76:13:15:c7:b7:21:51:83:49:
         42:c5:98:3f:75:a3:e7:4a:69:55:74:b1:b6:d7:ca:e7:28:c3:
         4a:76:80:5e:fb:c9:f5:3f:76:73:69:0e:da:9f:07:c2:ef:07:
         0d:93:9c:65:a0:45:a0:50:63:9b:4a:e7:21:39:68:95:bd:65:
         cc:ff:35:1a:41:36:3e:95:22:a6:39:fe:a4:d2:fe:9f:65:49:
         e0:e6:3a:f1:fb:4b:d9:b3:99:91:fa:7d:36:2b:47:1d:47:72:
         aa:ac:cc:c3:3e:b3:78:66:ba:66:2e:d8:cf:d9:17:ae:8a:94:
         26:ff:53:83:78:1a:2d:01:19:6c:f6:b9:cd:55:7e:cd:08:6b:
         9b:e2:37:54:86:34:74:03:81:d8:22:13:cf:b2:b8:36:45:41:
         c9:2d:1a:1f:96:3b:f2:59:12:03:47:b4:ce:11:79:85:00:20:
         75:4d:90:2b:c6:21:1a:46:f8:4d:1f:e4:69:77:f1:4d:35:45:
         47:52:96:bd:24:7c:be:2e:c8:80:0f:fe:56:25:d7:87:15:92:
         9d:26:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org