Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p8ag5JaGI_7jsTYfx0cnCpdty1E.roa
File:                     p8ag5JaGI_7jsTYfx0cnCpdty1E.roa (raw, json)
Hash identifier:          JJulAXSGlizzp/xrB/Wx2K/29JRaWwG6m4uWNA1eStM=
Subject key identifier:   A7:C6:A0:E4:96:86:23:FE:E3:B1:36:1F:C7:47:27:0A:97:6D:CB:51
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       61
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p8ag5JaGI_7jsTYfx0cnCpdty1E.roa
Signing time:             Mon 27 Mar 2023 16:04:33 +0000
ROA not before:           Mon 27 Mar 2023 16:04:33 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:33 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A7C6A0E4968623FEE3B1361FC747270A976DCB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:06:05:ff:6f:8e:27:0b:51:d2:08:d3:52:
                    d2:a7:8e:af:e6:e9:00:07:e3:0c:62:02:1c:e5:a2:
                    72:06:f7:dc:ca:83:e5:56:e6:bb:cc:c3:49:99:7b:
                    13:98:3b:4f:6a:23:f7:51:21:40:a3:9c:02:74:05:
                    5b:bd:24:96:79:f2:2d:f0:d4:eb:44:57:73:c0:22:
                    17:f1:9e:98:c2:3c:d2:f0:df:99:ab:89:c5:e9:9d:
                    e4:a6:6e:57:71:50:a1:e9:d3:52:4a:c5:26:2d:c5:
                    8e:3b:44:ae:0e:4d:19:68:a3:fa:c9:a3:4a:b7:15:
                    b4:99:d9:d0:f2:da:17:15:25:77:18:f6:5d:02:68:
                    e2:cf:01:dd:ac:4f:09:00:a4:a5:84:a7:9e:b8:ea:
                    15:34:0b:a8:f6:4d:cb:86:10:58:37:cf:1d:e8:02:
                    9e:1c:9f:62:16:6d:a1:66:74:84:2a:29:5a:8f:34:
                    1d:0c:36:b8:1d:59:da:ea:3a:cf:3e:c0:38:9c:f5:
                    bf:1b:a4:d4:43:3e:ef:6b:46:79:75:65:c0:71:41:
                    f1:8e:21:e8:3d:38:ba:c3:0c:b6:b1:fa:fc:7c:b1:
                    ed:01:26:c5:15:6d:7a:a5:ea:f9:cd:3c:40:13:99:
                    43:a9:bf:b7:4b:15:a5:89:53:12:95:18:db:a1:8a:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C6:A0:E4:96:86:23:FE:E3:B1:36:1F:C7:47:27:0A:97:6D:CB:51
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p8ag5JaGI_7jsTYfx0cnCpdty1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:ea:c1:7b:1f:17:04:c0:a5:56:d2:4b:df:51:4a:57:e1:
         80:e0:0a:95:ba:6b:ca:a6:4b:ba:8c:fa:e0:38:ab:98:ed:f5:
         ea:c6:cd:31:9c:13:17:fe:ce:c1:ab:25:5c:d7:8d:a6:47:fd:
         af:9e:79:e2:0b:0a:eb:c4:b5:bc:23:77:7a:f3:a5:09:29:7c:
         a7:c1:5e:04:47:89:f0:ec:42:60:32:dd:57:21:73:b7:61:fb:
         5f:96:1d:38:47:58:90:bf:98:e4:6f:94:b1:d5:9e:96:e0:1a:
         66:87:52:7f:ef:c2:95:60:52:90:89:b3:74:df:cd:2c:94:bb:
         55:e1:bd:87:fe:f6:0f:45:e0:15:0f:79:ac:44:64:75:2b:6f:
         00:4a:4f:20:b9:6c:33:70:63:7b:e8:e5:9d:92:f5:96:de:38:
         18:02:d7:ba:de:8e:74:9c:fe:55:67:6a:1b:b3:74:31:b4:4b:
         39:dc:d7:9c:2b:09:96:01:82:5d:18:dd:eb:32:d9:74:9e:8e:
         28:1b:20:5b:1f:e3:a0:26:ae:90:0f:90:31:54:d1:88:62:31:
         e5:f1:d9:76:e6:49:2b:85:0d:7a:a6:26:92:75:70:0f:e2:66:
         ea:bc:7f:af:37:77:29:c4:ad:b8:86:5f:94:fd:9f:ae:97:df:
         4f:7a:48:3b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MDQzM1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQTdDNkEwRTQ5Njg2MjNG
RUUzQjEzNjFGQzc0NzI3MEE5NzZEQ0I1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9MBgX/b44nC1HSCNNS0qeOr+bpAAfjDGICHOWicgb33MqD5Vbm
u8zDSZl7E5g7T2oj91EhQKOcAnQFW70klnnyLfDU60RXc8AiF/GemMI80vDfmauJ
xemd5KZuV3FQoenTUkrFJi3FjjtErg5NGWij+smjSrcVtJnZ0PLaFxUldxj2XQJo
4s8B3axPCQCkpYSnnrjqFTQLqPZNy4YQWDfPHegCnhyfYhZtoWZ0hCopWo80HQw2
uB1Z2uo6zz7AOJz1vxuk1EM+72tGeXVlwHFB8Y4h6D04usMMtrH6/Hyx7QEmxRVt
eqXq+c08QBOZQ6m/t0sVpYlTEpUY26GKKFcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSnxqDkloYj/uOxNh/HRycKl23LUTAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvcDhhZzVKYUdJXzdqc1RZZngwY25DcGR0eTFFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAAFLDjANBgkqhkiG9w0BAQsFAAOCAQEAltXqwXsfFwTApVbSS99RSlfhgOAK
lbpryqZLuoz64DirmO316sbNMZwTF/7OwaslXNeNpkf9r5554gsK68S1vCN3evOl
CSl8p8FeBEeJ8OxCYDLdVyFzt2H7X5YdOEdYkL+Y5G+UsdWeluAaZodSf+/ClWBS
kImzdN/NLJS7VeG9h/72D0XgFQ95rERkdStvAEpPILlsM3Bje+jlnZL1lt44GALX
ut6OdJz+VWdqG7N0MbRLOdzXnCsJlgGCXRjd6zLZdJ6OKBsgWx/joCaukA+QMVTR
iGIx5fHZduZJK4UNeqYmknVwD+Jm6rx/rzd3KcStuIZflP2frpffT3pIOw==
-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org