Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sIGs_T-kIGGPdBj9uswQ0SPUvEA.roa
File:                     sIGs_T-kIGGPdBj9uswQ0SPUvEA.roa (raw, json)
Hash identifier:          TVgydbVHLTlNkJ/lcgPbL2EEN0uq9+QhT/cXqypsq38=
Subject key identifier:   B0:81:AC:FD:3F:A4:20:61:8F:74:18:FD:BA:CC:10:D1:23:D4:BC:40
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       46
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sIGs_T-kIGGPdBj9uswQ0SPUvEA.roa
Signing time:             Mon 27 Mar 2023 16:04:22 +0000
ROA not before:           Mon 27 Mar 2023 16:04:22 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:22 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B081ACFD3FA420618F7418FDBACC10D123D4BC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:09:d7:fc:dc:a7:4a:34:e7:4b:92:c7:14:
                    20:17:7d:d1:4d:68:fb:28:35:41:23:ec:5d:27:50:
                    43:ff:91:6f:6e:60:ff:69:79:0f:68:cc:cf:e0:ab:
                    1b:53:af:8a:5a:3b:cd:a6:39:41:aa:8c:26:39:45:
                    9f:de:eb:a3:f8:a8:e9:a8:31:37:2c:31:4f:3d:0b:
                    9d:12:00:ce:8c:02:bf:d0:e0:29:5f:e6:c9:12:ae:
                    c6:27:b5:c3:52:9c:80:1e:33:4b:99:84:7b:32:5e:
                    bc:84:67:a9:76:5c:dc:47:47:56:37:ef:7e:a2:d6:
                    47:fe:17:cc:1b:bc:bb:ee:21:e3:77:6a:c2:fe:6f:
                    05:b1:c1:67:51:b5:a3:bb:21:29:f9:4f:26:c9:3c:
                    0e:b8:77:c1:4e:8c:50:9d:b9:e8:ff:8c:f0:00:2d:
                    14:c6:17:13:27:ad:29:cd:9a:ec:60:c7:98:bc:dd:
                    6c:11:30:32:b1:ea:1c:91:4d:e9:f0:6c:b9:85:f7:
                    08:6c:08:a8:87:f3:9a:6a:96:26:d9:19:b9:58:08:
                    6c:92:93:a9:8b:6f:0e:81:53:91:b7:d1:2f:06:b9:
                    15:4a:6c:0d:a8:a5:fa:7b:a7:a8:55:94:52:7c:e0:
                    f7:de:55:32:03:db:8b:28:c7:ba:e1:67:59:a3:4b:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:81:AC:FD:3F:A4:20:61:8F:74:18:FD:BA:CC:10:D1:23:D4:BC:40
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sIGs_T-kIGGPdBj9uswQ0SPUvEA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:0f:28:b5:b4:0a:ff:ab:8c:ab:57:70:a5:44:76:19:81:
         8a:85:f3:0f:96:5e:a1:5a:0d:5a:da:74:c8:28:d4:bf:d0:06:
         b9:d9:9f:c5:fb:04:02:1c:a1:a9:85:c8:ee:63:14:4d:24:5f:
         b4:31:7a:82:15:bf:ad:92:52:b7:41:af:e2:91:2d:7c:b4:ae:
         1e:70:05:9e:02:1d:c6:1d:1a:2c:15:fe:85:79:07:e6:b2:eb:
         f0:28:04:f7:12:ce:54:9e:f9:ad:48:a4:12:70:0c:c1:03:71:
         65:91:f5:31:8c:fd:2a:cb:ba:b1:33:c3:db:61:64:dd:8f:86:
         52:53:28:57:42:8e:1b:54:50:06:aa:dd:86:83:70:81:5b:71:
         fb:9e:55:61:5d:90:ad:94:29:c3:81:4f:b2:92:73:25:fc:b8:
         ac:02:3c:f7:7c:d5:ec:46:d8:12:3e:51:74:92:b4:35:23:43:
         1a:68:92:3f:5d:40:28:df:4f:26:48:44:69:79:87:34:ce:a3:
         0b:26:37:03:cf:80:0a:68:38:95:b3:9c:62:bb:3d:f5:f3:cb:
         c9:41:26:bc:e4:46:ab:da:f7:f9:62:08:53:99:09:3b:c5:50:
         ee:a3:26:46:c0:90:34:60:c9:c1:bf:c0:67:1d:d9:d1:45:af:
         fa:97:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org