Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s7CvOYE3aG8jWs12r6HGrYVW-Bs.roa
File:                     s7CvOYE3aG8jWs12r6HGrYVW-Bs.roa (raw, json)
Hash identifier:          i9gQ5Zjhp9U+aTxL6GIfXQVLpLXSqUtHdlqj9ppG+II=
Subject key identifier:   B3:B0:AF:39:81:37:68:6F:23:5A:CD:76:AF:A1:C6:AD:85:56:F8:1B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0556
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s7CvOYE3aG8jWs12r6HGrYVW-Bs.roa
Signing time:             Thu 27 Jul 2023 16:56:14 +0000
ROA not before:           Thu 27 Jul 2023 16:56:14 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.66.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:14 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B3B0AF398137686F235ACD76AFA1C6AD8556F81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:e8:c5:81:d2:ad:c3:ad:f2:d9:07:27:ae:
                    d9:40:9d:a6:87:b0:70:0c:85:fe:97:a4:c4:a7:e5:
                    cd:b5:d9:aa:61:dc:6c:ef:6b:94:8b:fa:ed:51:68:
                    a6:02:31:74:30:15:dd:eb:dc:23:91:e4:bf:c4:a0:
                    7c:c8:aa:87:f4:41:be:60:da:62:08:47:1f:93:d9:
                    07:42:74:1e:4e:29:86:55:2d:ab:a8:1e:c0:5d:64:
                    b0:b2:3c:0d:da:4d:d0:5d:42:8b:09:80:34:06:61:
                    65:ab:04:ec:69:0b:a8:ad:64:f5:ee:b3:76:b6:6c:
                    7c:e7:d8:6b:2e:2c:65:0c:a8:a3:d4:6d:6c:28:b7:
                    47:b5:c7:13:f7:5d:c0:77:72:da:7c:d4:6a:aa:1a:
                    dc:b5:32:14:28:78:c9:26:5c:ff:ef:33:d4:14:99:
                    53:cb:ef:0f:0b:9a:cb:22:a6:e3:f9:2b:da:8c:20:
                    dc:2d:b7:35:ea:bd:68:94:d1:2e:c2:29:3a:93:85:
                    c1:a6:e4:e7:1f:7c:9f:dd:ea:b9:92:83:fd:53:f4:
                    ce:52:5d:84:ca:f6:e1:cc:ba:86:06:79:67:27:b0:
                    af:31:cf:5b:80:ab:71:06:80:33:5c:7d:03:99:3e:
                    64:d7:39:73:55:61:6e:7e:71:5c:a2:c0:8e:c5:89:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:AF:39:81:37:68:6F:23:5A:CD:76:AF:A1:C6:AD:85:56:F8:1B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s7CvOYE3aG8jWs12r6HGrYVW-Bs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:de:4e:ae:c1:81:02:de:de:6b:31:55:fb:25:e8:77:b8:13:
         85:8d:cc:c4:7a:3b:bf:19:b1:4c:18:8f:84:4f:6a:9d:52:47:
         62:bf:e0:23:5d:1c:4e:c1:89:17:70:27:c4:f5:a0:53:03:51:
         cd:55:85:95:21:e5:65:f8:c3:3d:2a:d3:c2:bb:62:08:ab:f2:
         52:3d:e5:41:3c:ba:d2:3c:2a:b8:a0:25:6f:53:e1:97:5f:d2:
         a3:a9:ee:ff:7f:77:c7:54:5f:9a:db:fa:89:a1:30:ea:48:a1:
         00:89:14:9a:f0:9d:17:c4:af:f2:c0:c7:bc:d6:5e:79:e4:4e:
         8a:e8:98:f1:ee:1e:8a:04:03:44:db:27:a5:49:b7:22:04:ce:
         d6:7c:c4:d8:1f:d1:a1:77:01:3f:c6:9a:86:3d:cc:a5:67:04:
         24:16:2b:3a:c1:b9:5d:3e:8b:0e:b0:7f:2c:e2:8c:db:f4:9b:
         0a:58:e6:e4:dd:9c:d6:11:6c:f7:59:c0:46:e7:b2:77:fa:72:
         a1:e1:06:11:70:a2:a0:e9:63:a0:50:20:cd:52:06:d8:40:a6:
         57:72:3c:7d:5d:c6:f1:98:a3:0c:8d:8f:6c:3c:e7:9f:00:a7:
         62:bf:85:ec:8e:0c:3c:eb:4b:3a:56:5d:fb:81:48:65:d7:b6:
         5f:d5:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:48 2024 by rpki-client on console-ams.rpki-client.org