Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ev6EQUgA7mGdB_t8NqidRmtBc20.roa
File:                     ev6EQUgA7mGdB_t8NqidRmtBc20.roa (raw, json)
Hash identifier:          GpLYez21K2i8xKD1dSUavgg5ZLUZbhDju0W2LLXoV3Y=
Subject key identifier:   7A:FE:84:41:48:00:EE:61:9D:07:FB:7C:36:A8:9D:46:6B:41:73:6D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0269
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ev6EQUgA7mGdB_t8NqidRmtBc20.roa
Signing time:             Tue 30 May 2023 16:34:16 +0000
ROA not before:           Tue 30 May 2023 16:34:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.67.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7AFE84414800EE619D07FB7C36A89D466B41736D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:95:8d:5f:85:bc:4f:0d:9a:85:7b:dc:e2:
                    20:8a:64:89:85:08:b5:6a:2f:20:3c:bf:a0:91:4f:
                    a3:ff:6f:31:d4:04:f4:b5:50:b0:65:eb:4d:8e:16:
                    92:51:37:7f:90:0c:e6:65:c5:ba:78:e1:92:2d:42:
                    23:98:57:48:74:98:b8:1a:ec:be:ae:2c:58:49:07:
                    03:ac:14:fc:63:9c:2e:14:34:25:2d:47:81:11:94:
                    22:4c:91:0c:f2:a3:fa:e9:9b:eb:55:71:1c:91:cf:
                    a0:dc:e1:c7:11:7b:62:10:f6:31:4f:47:53:0e:30:
                    d7:ff:82:49:c7:55:c9:20:8c:e2:47:23:68:df:1a:
                    40:35:f6:22:45:23:5f:40:6f:26:c7:6d:1a:6b:79:
                    d4:e8:ad:7e:73:ca:73:ec:c4:94:6e:08:80:14:2b:
                    8a:7d:b3:81:a4:a9:a3:28:a9:9f:1d:d6:17:d3:d2:
                    0f:5f:04:c8:da:4e:93:23:db:db:bb:bb:99:05:63:
                    fc:12:12:1b:d0:94:63:b9:2a:98:0e:bd:87:5d:fa:
                    9c:27:4a:9b:bb:31:b2:44:26:1a:d2:fc:2d:c9:3d:
                    03:1b:aa:c5:9e:99:29:af:a5:c7:33:b8:30:08:c3:
                    41:be:c1:4e:19:01:76:8f:97:8d:8f:b6:03:68:e4:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FE:84:41:48:00:EE:61:9D:07:FB:7C:36:A8:9D:46:6B:41:73:6D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ev6EQUgA7mGdB_t8NqidRmtBc20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.67.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         cb:0a:62:61:5f:78:e5:32:90:87:03:ea:6e:38:1a:49:89:b0:
         b5:42:6a:c1:e3:77:9b:61:6c:cc:71:4d:34:5a:10:4b:9f:a1:
         37:90:95:69:6d:0a:ad:bb:7d:07:61:62:73:1e:ac:b6:96:33:
         10:c0:c4:99:86:a0:49:d0:77:c8:2b:af:7c:d4:37:d4:12:02:
         69:ea:87:db:a3:9f:7b:05:07:1e:fb:f2:ff:d5:f4:22:9f:39:
         c0:18:4a:24:50:dd:f1:34:c1:dc:5f:b7:aa:30:6a:cf:19:a2:
         fa:28:71:14:b8:13:4b:ff:e7:11:5a:9a:73:0d:f7:63:2e:37:
         6b:6f:45:a5:00:f5:5a:d5:c3:e0:72:14:31:e2:89:c1:c8:33:
         21:45:63:9d:ff:b4:d3:1c:98:e6:c1:30:b7:d3:30:65:da:e9:
         54:06:09:c4:30:51:98:df:2b:80:b7:4d:21:9e:8a:ae:a6:75:
         48:bf:0c:80:10:36:35:8f:65:87:b8:0a:eb:fb:e0:71:64:20:
         a8:91:21:84:b9:ba:4a:a4:38:70:72:d4:8d:fd:fb:12:8f:e6:
         ce:8f:d4:fc:0b:0c:14:5f:ad:fc:0b:78:c8:25:fb:bc:a9:7d:
         ff:54:cb:35:ae:92:76:3f:7c:b9:bf:b9:66:a9:9c:8e:10:bf:
         4e:cd:11:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org