Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jTv7OHIvEYocdXV3gyc6k4eSO3A.roa
File:                     jTv7OHIvEYocdXV3gyc6k4eSO3A.roa (raw, json)
Hash identifier:          GAhtxhuroG1J32zcOpOoJ86kbNLoH4niP7HlJa5P6sA=
Subject key identifier:   8D:3B:FB:38:72:2F:11:8A:1C:75:75:77:83:27:3A:93:87:92:3B:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       2E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jTv7OHIvEYocdXV3gyc6k4eSO3A.roa
Signing time:             Mon 27 Mar 2023 16:02:04 +0000
ROA not before:           Mon 27 Mar 2023 16:02:04 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:04 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8D3BFB38722F118A1C75757783273A9387923B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:d7:62:eb:f9:66:3b:87:22:b6:e3:d0:fb:
                    67:63:1a:0d:16:f9:72:cc:ed:a4:c7:40:66:df:68:
                    16:df:31:87:b1:7e:a0:28:6e:5c:fa:58:96:fe:39:
                    2f:df:43:e8:5e:d9:98:3e:19:4d:21:f9:5c:25:67:
                    5f:43:9a:14:da:b7:96:5d:9b:d0:d4:6f:a9:82:6a:
                    95:a1:aa:7a:b0:2d:74:72:c7:02:c9:26:3f:c6:89:
                    a7:5b:fd:3c:73:9c:d4:fd:b6:a5:c1:2c:8f:89:73:
                    cb:93:0a:f8:42:69:ac:26:39:ea:33:ad:5c:d4:8d:
                    82:03:6b:ca:c4:8f:e2:82:93:54:3b:ef:68:21:59:
                    99:0d:c3:26:5c:c0:41:75:9b:5d:4f:0e:d6:a4:00:
                    54:df:fe:1a:e0:bb:d3:ed:5b:79:d8:01:bd:28:23:
                    42:25:78:25:73:7d:6d:78:28:e0:25:1a:67:e6:2c:
                    1d:9f:79:95:8f:af:f3:71:e6:5e:f2:a6:46:f4:d5:
                    ff:fa:c1:88:f8:c2:84:67:c0:d7:cf:c7:9d:99:15:
                    29:3e:b5:49:9c:c4:e4:f4:76:d0:96:90:b3:b8:2c:
                    3c:75:bd:a1:cd:a8:11:8e:04:fa:fb:5f:5c:78:47:
                    57:a5:5f:d9:78:d3:df:70:88:7c:6c:25:8d:50:cc:
                    ee:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3B:FB:38:72:2F:11:8A:1C:75:75:77:83:27:3A:93:87:92:3B:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jTv7OHIvEYocdXV3gyc6k4eSO3A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:5f:31:3b:29:a4:97:95:3a:4c:14:47:b9:db:c6:39:69:
         05:d4:ba:c3:5b:ee:3a:7a:c0:4f:65:9d:c2:45:9e:30:63:0f:
         71:71:12:99:f4:9a:38:f3:8f:62:8e:5a:e0:30:ac:7a:38:68:
         bf:ea:3c:7d:a4:ea:6d:0c:fe:17:97:42:46:26:47:cc:41:f5:
         07:7c:ad:cf:b6:b0:8b:f8:df:95:52:22:7f:d8:af:80:4c:0f:
         36:c8:17:3c:ea:17:f0:c7:9e:8b:db:07:ac:d9:5c:eb:0b:71:
         54:2b:be:64:c4:1d:ea:85:28:dc:ef:cf:11:2a:6e:38:5a:16:
         7b:7b:e5:05:16:c6:6b:f9:66:91:e6:6f:73:b9:49:ea:60:e5:
         b3:20:78:e5:bf:e4:71:34:0d:16:a8:a7:9b:07:26:cf:1c:99:
         a0:21:25:1a:92:45:03:87:b1:ac:29:84:c8:30:13:ef:5f:6d:
         cf:d7:75:06:e4:3d:ce:80:fa:33:09:26:b5:6c:cc:a7:7f:31:
         c4:81:58:46:d9:c0:5a:88:ac:04:af:40:fc:49:f3:06:a1:93:
         29:3e:95:2e:2e:5b:f9:8d:f5:f5:91:76:27:39:6c:8b:8d:f6:
         f8:90:42:25:62:88:cb:2a:9e:dd:17:2f:59:e8:e3:73:c1:e7:
         0f:c0:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org