Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l_91ytmIfIbIMHQaz5I3JkHSWOk.roa
File:                     l_91ytmIfIbIMHQaz5I3JkHSWOk.roa (raw, json)
Hash identifier:          NFpLVh32SUDUFhwp4wPBmmJk18HuPy8mt9w3U/3CZS8=
Subject key identifier:   97:FF:75:CA:D9:88:7C:86:C8:30:74:1A:CF:92:37:26:41:D2:58:E9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       031A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l_91ytmIfIbIMHQaz5I3JkHSWOk.roa
Signing time:             Thu 01 Jun 2023 16:05:33 +0000
ROA not before:           Thu 01 Jun 2023 16:05:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=97FF75CAD9887C86C830741ACF92372641D258E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:18:07:29:f9:82:26:dc:7f:90:76:6c:a1:
                    78:45:75:61:40:ce:55:2a:5e:a0:c2:06:25:b8:5a:
                    12:d9:cb:1d:4f:26:f5:8d:52:3c:ea:05:ee:f1:f0:
                    4f:3d:c8:56:68:34:2d:07:14:7f:00:04:1a:2d:77:
                    6c:60:9a:23:13:20:b5:2d:25:00:c7:9c:a9:84:4e:
                    35:18:01:fd:2c:0b:50:67:4a:de:5a:b3:d5:c9:e5:
                    ca:0d:35:70:0d:c2:cc:10:7b:23:f8:fc:5c:d8:35:
                    8e:77:73:7c:bc:b9:2c:fe:d4:af:d7:62:46:3e:2d:
                    26:bd:22:eb:4e:b2:05:c1:70:be:75:a6:be:80:33:
                    75:4d:51:a9:ea:bf:a3:2c:a3:2b:8c:88:60:e4:00:
                    0a:6d:7d:9c:8c:84:b5:e3:e4:66:81:84:f4:cb:58:
                    c5:d2:74:13:d9:2c:f6:1b:4f:87:5e:9d:48:07:87:
                    dd:9e:4e:e9:90:d6:0a:8f:71:ed:e1:8e:d4:da:27:
                    91:41:7a:29:94:37:70:13:61:5d:08:df:f4:71:93:
                    eb:aa:0b:34:93:f8:0e:95:5e:01:70:be:10:0b:03:
                    e7:bf:d4:71:93:97:a4:c1:0d:d2:e2:93:c5:50:69:
                    24:3f:12:34:ea:bc:9b:4c:b3:f3:66:56:7d:a5:6f:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FF:75:CA:D9:88:7C:86:C8:30:74:1A:CF:92:37:26:41:D2:58:E9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l_91ytmIfIbIMHQaz5I3JkHSWOk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:37:6d:bd:c2:70:9c:1a:00:f7:c0:cf:41:ea:39:f1:56:97:
         ca:6b:65:f2:38:85:78:40:59:a3:de:0d:4b:1b:02:29:ec:55:
         62:d1:af:2f:86:0d:98:fc:00:aa:04:01:07:34:a8:03:dc:85:
         92:78:01:f1:67:c5:b5:7e:5b:7f:b8:13:fd:85:6d:d7:de:6a:
         4c:52:9b:21:f5:eb:6d:e3:36:a7:35:dd:cd:a5:ed:49:39:57:
         a5:1f:ed:19:8e:a2:2e:bd:7a:eb:29:3a:bd:a6:e7:96:3a:3f:
         ff:80:22:80:89:77:3d:b8:41:59:9d:a5:e1:29:c3:7a:9d:eb:
         17:0a:44:17:3c:13:da:d3:e8:30:49:66:52:24:1e:cc:96:73:
         ae:d0:91:7a:66:9d:ac:c1:61:ca:f1:37:cb:a0:a1:d6:23:de:
         a5:47:56:16:92:19:ce:f5:47:c8:3d:7a:c8:b7:a1:29:3f:51:
         96:4a:76:3d:13:12:97:fc:e9:68:72:d1:4f:ae:e8:12:5a:a7:
         1d:17:6d:f1:ce:c7:de:0e:99:91:fc:2c:07:2e:b9:b0:e2:b7:
         d1:f6:9d:e3:79:0d:6a:4f:90:30:2e:c2:ec:92:4e:dc:6b:cc:
         d0:a0:f1:57:cc:5d:5e:df:61:db:d2:4b:6e:cf:22:83:ff:a1:
         65:dd:db:ad
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA1MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk3RkY3NUNBRDk4ODdD
ODZDODMwNzQxQUNGOTIzNzI2NDFEMjU4RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvQRgHKfmCJtx/kHZsoXhFdWFAzlUqXqDCBiW4WhLZyx1PJvWN
UjzqBe7x8E89yFZoNC0HFH8ABBotd2xgmiMTILUtJQDHnKmETjUYAf0sC1BnSt5a
s9XJ5coNNXANwswQeyP4/FzYNY53c3y8uSz+1K/XYkY+LSa9IutOsgXBcL51pr6A
M3VNUanqv6MsoyuMiGDkAAptfZyMhLXj5GaBhPTLWMXSdBPZLPYbT4denUgHh92e
TumQ1gqPce3hjtTaJ5FBeimUN3ATYV0I3/Rxk+uqCzST+A6VXgFwvhALA+e/1HGT
l6TBDdLik8VQaSQ/EjTqvJtMs/NmVn2lb60XAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUl/91ytmIfIbIMHQaz5I3JkHSWOkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2xfOTF5dG1JZkliSU1IUWF6NUkzSmtIU1dPay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYBSQAwDQYJKoZIhvcNAQELBQADggEBAAE3bb3CcJwaAPfAz0HqOfFWl8pr
ZfI4hXhAWaPeDUsbAinsVWLRry+GDZj8AKoEAQc0qAPchZJ4AfFnxbV+W3+4E/2F
bdfeakxSmyH1623jNqc13c2l7Uk5V6Uf7RmOoi69euspOr2m55Y6P/+AIoCJdz24
QVmdpeEpw3qd6xcKRBc8E9rT6DBJZlIkHsyWc67QkXpmnazBYcrxN8ugodYj3qVH
VhaSGc71R8g9esi3oSk/UZZKdj0TEpf86Why0U+u6BJapx0XbfHOx94OmZH8LAcu
ubDit9H2neN5DWpPkDAuwuySTtxrzNCg8VfMXV7fYdvSS27PIoP/oWXd260=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org