Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gW7dO9g2awiPM8JOhXteVRRZ10E.roa
File:                     gW7dO9g2awiPM8JOhXteVRRZ10E.roa (raw, json)
Hash identifier:          KieJCWyjb/arKiv7WTRzz0c2XctWAztV1Zl3GwY5FE4=
Subject key identifier:   81:6E:DD:3B:D8:36:6B:08:8F:33:C2:4E:85:7B:5E:55:14:59:D7:41
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01B3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gW7dO9g2awiPM8JOhXteVRRZ10E.roa
Signing time:             Wed 24 May 2023 16:37:06 +0000
ROA not before:           Wed 24 May 2023 16:37:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:37:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=816EDD3BD8366B088F33C24E857B5E551459D741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:0d:b6:46:ec:22:f3:a9:6c:e9:ba:6d:b6:
                    72:83:89:f3:ec:70:21:5f:10:f2:f1:f3:31:61:da:
                    f2:ff:00:bc:8f:a1:96:98:72:6a:06:a0:88:06:7b:
                    9f:82:3b:b6:72:f9:3d:13:8c:31:ab:35:28:45:17:
                    b3:df:e6:69:5b:fa:c4:25:1e:b5:2e:e5:46:19:fd:
                    23:08:33:64:e1:6e:71:1b:9e:37:bf:89:1f:96:ff:
                    31:23:50:92:0a:8a:03:5f:e0:b5:2d:e9:f2:24:58:
                    67:3d:a0:07:f4:f4:f1:ce:7f:14:6f:9f:1d:61:94:
                    14:0c:41:ae:af:05:12:4b:f0:8e:cd:1b:b6:4d:43:
                    f6:fd:47:c9:7f:34:62:dd:ff:76:6c:1f:a8:c1:dd:
                    88:22:eb:3b:a8:84:bc:95:3e:8d:d1:c0:7e:cd:86:
                    0f:05:da:94:3f:06:17:cc:63:22:18:44:5a:a2:c8:
                    db:4d:b1:ee:83:b3:14:be:a7:b1:44:f2:f0:8b:00:
                    b0:8a:3b:63:0a:dd:16:d3:94:1b:94:df:39:a6:e2:
                    56:62:7f:ea:fb:88:5b:47:89:b7:50:16:d5:3a:0c:
                    7d:99:44:9c:eb:1f:71:8f:2f:c3:da:13:2e:c0:85:
                    a2:40:13:fd:ef:5b:8c:ba:25:1c:5e:90:c0:05:7e:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6E:DD:3B:D8:36:6B:08:8F:33:C2:4E:85:7B:5E:55:14:59:D7:41
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gW7dO9g2awiPM8JOhXteVRRZ10E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:73:bb:b4:8e:43:03:90:98:ed:2f:d4:54:2d:04:07:b4:06:
         6b:70:a0:27:3e:79:06:45:41:50:ef:c1:5c:36:db:15:b6:a7:
         24:b3:9b:dd:53:4d:62:3d:2f:6c:08:3f:17:f3:00:f4:28:b9:
         7d:fa:81:74:b6:fe:26:72:6b:07:4d:0e:7f:78:74:0b:9c:1b:
         cb:27:5d:26:fe:02:d0:e8:35:42:5b:17:5a:66:95:47:60:11:
         6f:bb:e0:03:07:32:02:ff:c0:73:3c:86:69:a3:45:a4:a8:e0:
         02:83:37:fd:4f:bd:c8:46:b5:10:45:e6:49:c4:9f:ea:8a:70:
         64:bc:38:a6:17:2e:94:fb:ec:45:69:f3:36:9c:80:bf:e3:62:
         2b:b9:62:a0:da:12:59:87:42:73:5e:fc:e7:a2:79:46:21:bf:
         95:8e:2c:45:b3:69:c0:c7:8f:4f:6f:e6:fc:b5:da:6b:0b:9c:
         fc:1e:5b:db:fc:d0:75:03:93:ef:09:7f:47:47:06:96:ce:69:
         7e:b1:3f:a0:15:25:9d:d3:dc:7f:62:c5:fc:db:34:91:c7:2a:
         a0:6f:f4:c4:a8:b1:6c:f3:47:3b:c7:86:ad:95:49:f4:44:05:
         71:88:1d:46:c9:2e:c5:de:0a:3e:7d:1d:05:65:d7:1c:1f:13:
         90:a8:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org