Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nzINjv4RYUOgRgFg00S7iopj_Sg.roa
File:                     nzINjv4RYUOgRgFg00S7iopj_Sg.roa (raw, json)
Hash identifier:          7McadfWVn/Zt6U/1NwhbEzPGdv5wV/iQwmBr4+I1j/I=
Subject key identifier:   9F:32:0D:8E:FE:11:61:43:A0:46:01:60:D3:44:BB:8A:8A:63:FD:28
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       49
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nzINjv4RYUOgRgFg00S7iopj_Sg.roa
Signing time:             Mon 27 Mar 2023 16:04:23 +0000
ROA not before:           Mon 27 Mar 2023 16:04:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.12.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9F320D8EFE116143A0460160D344BB8A8A63FD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:7a:1f:30:12:c4:7a:87:87:0f:5e:93:4d:
                    79:01:a8:f6:1f:4a:5d:6d:cf:8d:d7:e3:88:00:ef:
                    2b:20:62:8a:59:37:72:ed:40:be:01:76:0e:58:76:
                    92:e7:85:21:46:05:f5:8b:20:93:38:a8:2b:16:d6:
                    39:a9:43:cb:c2:27:cf:b2:1f:76:17:02:9c:81:2e:
                    0a:b9:23:f7:90:35:02:5c:63:24:d5:73:25:b7:cb:
                    42:51:a4:49:4d:20:33:75:66:f5:6e:12:53:f2:af:
                    b0:a4:8d:f0:75:75:5f:53:f8:e2:c8:67:5b:02:45:
                    e3:20:8f:bf:02:59:53:62:39:89:3e:b1:05:72:86:
                    5b:7b:a1:41:6a:bd:f1:a7:c0:e4:5c:e4:93:6f:fa:
                    63:d3:4f:49:1b:82:b2:aa:3c:5d:00:3c:26:12:1b:
                    4f:1c:c9:2d:cb:40:2b:2d:aa:71:ea:a4:31:bc:ae:
                    09:40:6e:72:3b:1b:1f:6b:5a:eb:d8:20:20:bb:4e:
                    62:46:53:0b:71:60:2a:df:a0:0f:d2:78:c9:3e:7e:
                    e5:0b:94:5b:79:61:9b:59:21:13:14:65:b4:e3:3e:
                    22:5d:4d:c2:02:c8:e1:65:5f:17:28:31:4b:09:0c:
                    82:8a:8a:f5:1f:12:3d:23:40:71:74:9b:c4:44:0d:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:32:0D:8E:FE:11:61:43:A0:46:01:60:D3:44:BB:8A:8A:63:FD:28
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nzINjv4RYUOgRgFg00S7iopj_Sg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:83:0b:c7:f8:49:cb:d5:48:14:64:94:e1:e3:ce:dd:bd:02:
         29:22:2d:1a:35:69:03:3a:2f:f5:5c:03:17:c3:1c:3d:bd:b5:
         e8:d3:df:f2:5b:64:e1:56:36:a1:82:84:6b:b9:dc:a9:f4:24:
         88:d5:92:3e:a3:66:7f:c5:01:2d:11:a3:8c:75:48:33:42:c3:
         65:05:90:82:07:ef:92:9c:03:9f:c9:47:6e:be:a1:0c:2d:79:
         46:ad:38:51:45:3a:0a:72:ba:f1:e8:57:17:17:16:9f:09:75:
         a1:a6:85:64:98:54:83:64:1d:14:68:b5:02:b4:4c:3f:84:66:
         80:2e:f5:d8:11:5a:7a:32:a5:37:95:f4:84:61:13:50:e2:93:
         1d:28:05:cf:f6:0c:48:f0:46:80:e5:cb:cc:0f:bf:27:9f:db:
         e2:9d:f5:3a:0b:54:ad:cf:ef:ed:3d:ab:36:55:15:79:4d:eb:
         52:8e:61:a0:71:ff:57:65:0d:04:36:1d:d1:8a:ae:12:c2:89:
         19:90:ab:0b:5b:13:74:fe:b0:31:e6:7e:c5:72:f2:fc:f0:a9:
         52:64:65:6b:77:3a:01:07:71:b6:c3:d0:75:5c:c1:66:e1:4f:
         63:95:7d:02:a3:4b:ae:e1:2a:94:58:ad:8b:76:e7:2a:8f:91:
         9a:5b:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org