Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a6ARhD1RrzSErkZbezjF5MyslPM.roa
File:                     a6ARhD1RrzSErkZbezjF5MyslPM.roa (raw, json)
Hash identifier:          dIh9lwkxAVTQtpBLTZIsCPscr6pxXbwc1Te2o1Qdzp8=
Subject key identifier:   6B:A0:11:84:3D:51:AF:34:84:AE:46:5B:7B:38:C5:E4:CC:AC:94:F3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0163
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a6ARhD1RrzSErkZbezjF5MyslPM.roa
Signing time:             Wed 24 May 2023 16:31:25 +0000
ROA not before:           Wed 24 May 2023 16:31:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6BA011843D51AF3484AE465B7B38C5E4CCAC94F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:47:9e:eb:c5:fc:43:e0:70:40:8b:58:a3:
                    17:60:bf:cd:8d:a6:49:50:c4:96:dc:6d:3d:3d:4f:
                    8a:26:f3:5c:04:6d:9e:70:94:21:79:94:4f:c2:ff:
                    0b:b7:e5:02:c2:d5:5b:4f:9e:dd:04:3b:88:31:09:
                    92:ba:28:6f:bf:60:11:b0:15:9f:7e:05:48:50:9c:
                    fc:91:4e:c0:32:7a:be:f9:76:f8:56:c3:f7:e4:ac:
                    34:db:ea:5c:0c:51:f9:cd:f8:e9:16:b5:91:1d:39:
                    0a:f9:08:03:b1:31:1e:7d:84:c4:67:80:62:4f:b0:
                    97:b6:00:8a:6f:a8:7e:c8:91:11:cf:bb:c1:a0:b4:
                    fb:1d:bd:38:53:f7:60:ac:ca:d8:9f:ec:e4:57:5b:
                    9c:d6:da:c0:95:1f:73:3f:fb:e4:67:34:d1:69:06:
                    da:02:cc:2a:87:63:47:0a:06:70:50:bb:57:c3:04:
                    57:62:8c:61:54:6a:70:a6:04:d9:4b:ee:bf:09:fb:
                    57:52:a0:03:c7:77:43:32:ef:e8:d4:d1:d6:6b:17:
                    05:b1:19:5f:6b:40:ac:f8:69:21:78:31:ef:3a:12:
                    40:50:f9:ca:59:5f:1f:0e:fa:b8:39:12:a1:6f:81:
                    de:5c:1b:13:51:d1:88:b9:c3:ed:89:bc:55:23:19:
                    9c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:11:84:3D:51:AF:34:84:AE:46:5B:7B:38:C5:E4:CC:AC:94:F3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a6ARhD1RrzSErkZbezjF5MyslPM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:df:6c:3f:c4:4b:a6:36:e0:ce:ff:a7:55:e6:d6:68:40:c8:
         f4:ad:55:27:12:05:0d:49:f3:2e:bf:ef:e0:6f:61:5e:82:ab:
         84:eb:67:4a:41:c3:b4:b1:21:51:46:bb:ef:66:18:01:68:58:
         24:54:ed:36:00:8e:c1:61:b5:d8:4f:41:80:47:d4:54:7b:90:
         2f:b8:46:78:29:c0:9c:0c:4e:bb:7d:7e:ff:aa:12:e0:76:40:
         63:b1:e2:7d:b5:01:a6:ac:01:59:29:5a:a8:42:89:bd:a4:a4:
         63:82:b2:87:79:40:1b:ce:51:25:a1:9f:98:5d:ae:6b:22:ac:
         0a:db:dc:e1:3a:03:8c:85:d5:f8:7a:a7:53:79:eb:68:af:4f:
         c2:c7:f5:95:dc:ff:d7:be:be:20:0b:df:8b:83:bd:bc:54:6f:
         4c:cf:26:f9:48:3a:44:d9:ca:da:82:9a:94:b5:01:b5:86:fc:
         da:4b:81:4e:2a:be:f9:0e:ae:b5:89:d0:50:b9:d6:4b:6a:c7:
         4d:3c:e9:9f:88:b7:a3:e8:f5:fc:54:62:25:49:26:71:70:4c:
         59:2a:6b:75:06:a9:af:58:fc:59:6b:14:c7:b8:e8:ef:10:13:
         55:d9:1d:fe:1a:2f:54:8b:f2:60:09:32:2b:ca:8a:83:53:80:
         76:ae:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org