Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c2PDxECslU1p1XfmlUzG8Hnvj10.roa
File:                     c2PDxECslU1p1XfmlUzG8Hnvj10.roa (raw, json)
Hash identifier:          xIyDQEbS07Rv9NAM1XQRmEC5OfdHLGNSzBQlvkt1gTY=
Subject key identifier:   73:63:C3:C4:40:AC:95:4D:69:D5:77:E6:95:4C:C6:F0:79:EF:8F:5D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04D1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c2PDxECslU1p1XfmlUzG8Hnvj10.roa
Signing time:             Thu 27 Jul 2023 16:48:21 +0000
ROA not before:           Thu 27 Jul 2023 16:48:21 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.210.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:21 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7363C3C440AC954D69D577E6954CC6F079EF8F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:9a:2b:e3:87:c3:12:39:8e:36:7f:87:67:
                    e0:b7:18:22:e4:2a:a6:91:bf:13:49:21:24:56:47:
                    73:dc:95:0e:16:1b:9f:f1:9b:e4:96:9c:37:d8:34:
                    b2:b0:4e:b1:6f:36:26:bd:0f:4d:50:2f:37:e0:10:
                    c9:55:c9:a6:ca:8f:60:a9:4e:33:3c:00:8d:99:69:
                    65:ae:db:c9:9c:b6:f2:0b:77:79:29:88:41:0e:b1:
                    47:6f:8b:08:cd:9a:e8:d4:99:32:77:6f:49:a4:6e:
                    66:f8:af:8c:ee:f6:6c:05:7f:c3:79:b2:c2:03:bc:
                    64:b9:7c:9c:08:c6:c0:71:78:70:41:cd:ba:82:f2:
                    84:5d:7d:34:52:21:cb:27:8e:7a:22:25:9f:cc:51:
                    e4:26:c9:f4:7b:1c:95:14:cc:d5:58:31:d9:a7:35:
                    0b:90:a6:5c:af:23:2c:11:71:aa:72:d9:f3:05:e9:
                    b1:77:a3:9e:41:2e:e3:28:46:0c:a6:7d:5c:d7:d4:
                    70:cc:d9:c1:4c:ae:24:ea:7c:42:f5:86:02:88:a1:
                    da:a0:de:44:b6:81:75:f4:23:c8:c0:6e:81:87:8a:
                    c3:21:f6:a3:8a:e2:43:5e:7b:2b:76:a8:84:93:6f:
                    ad:80:d8:d3:d0:70:fb:96:f4:b4:54:c2:7e:98:02:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:63:C3:C4:40:AC:95:4D:69:D5:77:E6:95:4C:C6:F0:79:EF:8F:5D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c2PDxECslU1p1XfmlUzG8Hnvj10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:9b:0c:cc:59:61:12:04:3d:d6:7c:5b:b6:7c:fa:b6:88:f5:
         d1:c8:1f:b1:25:ef:47:0c:da:6d:e2:43:93:e2:68:dc:a9:68:
         d3:8c:d1:bd:f8:1a:e7:01:da:45:fe:1d:fe:e0:df:5c:53:a2:
         da:fc:ab:fb:27:07:64:cd:b9:8e:96:da:77:ac:ea:07:e2:a2:
         11:40:2a:5c:5e:27:79:d8:0c:1c:29:29:54:70:76:e5:26:4d:
         a5:c7:f2:c3:86:2c:46:f5:1c:46:fb:c3:21:d6:bd:13:17:f5:
         75:de:51:8c:01:2a:13:53:68:20:f4:20:aa:30:d2:a8:01:98:
         44:85:38:7d:bd:5b:92:d7:43:7f:6d:42:bb:75:20:ae:e8:8f:
         2b:34:1e:d1:6b:d0:b1:d7:7f:c5:12:80:bc:50:09:32:26:1d:
         26:22:4b:c7:ec:60:48:42:ca:7d:4a:7d:58:b5:a7:db:7f:9f:
         ab:7f:c8:56:a7:85:39:fa:c9:84:9c:6f:93:68:19:89:ec:3b:
         67:bf:34:72:48:7f:48:f1:54:71:73:0c:16:ac:0c:62:81:d3:
         ad:09:da:d3:4a:c3:f0:97:bb:cb:f6:a6:4a:28:dc:e5:dc:cb:
         80:c9:9a:b6:24:cf:a5:0a:64:0d:97:ec:ea:85:ba:f2:2e:8f:
         36:d4:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org