Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xgicFPaHdSNFIZS4sU_VnO7Hxio.roa
File:                     xgicFPaHdSNFIZS4sU_VnO7Hxio.roa (raw, json)
Hash identifier:          FekcjTb7Wy+qmrhecmDa/aDB+hW1eBv+DOU/2grHGyE=
Subject key identifier:   C6:08:9C:14:F6:87:75:23:45:21:94:B8:B1:4F:D5:9C:EE:C7:C6:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       051C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xgicFPaHdSNFIZS4sU_VnO7Hxio.roa
Signing time:             Thu 27 Jul 2023 16:54:06 +0000
ROA not before:           Thu 27 Jul 2023 16:54:06 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.76.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:06 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C6089C14F6877523452194B8B14FD59CEEC7C62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:2a:4e:3f:5f:38:d4:57:b5:9b:af:1d:55:
                    42:57:8b:7d:a0:8f:4a:05:ae:60:c9:d1:98:95:7f:
                    93:fd:1e:94:56:2a:a9:f7:ed:35:ae:7a:11:80:02:
                    15:88:ca:55:9b:53:b1:6e:ba:05:8b:93:ef:ea:7e:
                    72:12:4d:77:33:b2:85:65:d1:99:b1:8c:d8:57:9f:
                    33:db:68:a2:1d:df:42:38:ad:d3:ed:ed:1e:eb:30:
                    bb:df:18:cf:18:b6:16:26:da:57:4d:b4:df:80:57:
                    f0:56:1b:25:ea:18:8d:2e:35:7b:bf:46:e2:d9:42:
                    5b:97:a3:aa:28:55:2b:40:b8:f1:d8:d8:b8:ea:c0:
                    5e:fc:04:a2:33:18:8e:5c:ae:99:05:60:a3:5e:52:
                    76:af:dc:18:62:cb:3c:49:60:cb:08:a9:8d:cd:e9:
                    d4:36:42:28:16:7d:fc:e8:2e:3f:b6:c2:89:97:a8:
                    de:42:d3:8a:f1:35:1a:66:47:2b:63:6a:05:21:9f:
                    76:ef:fd:68:30:85:7e:f1:db:c6:7f:ba:94:a4:94:
                    44:cb:31:14:30:d8:d8:e0:9e:6f:fb:8f:e5:e0:65:
                    1f:14:00:06:18:9a:6d:c4:7d:2a:c2:16:76:1a:0e:
                    c5:04:22:05:a8:60:06:3c:e2:ec:f7:19:00:e2:d9:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:08:9C:14:F6:87:75:23:45:21:94:B8:B1:4F:D5:9C:EE:C7:C6:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xgicFPaHdSNFIZS4sU_VnO7Hxio.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:53:64:a5:a5:ca:99:89:3c:3b:e6:25:b9:aa:86:48:39:
         71:d9:78:d6:53:94:09:fc:f5:88:74:a1:8e:df:91:21:e9:ea:
         fd:29:25:6e:73:1b:f0:5e:13:3a:89:23:92:6c:f8:94:7a:89:
         59:7b:6a:c7:e2:11:94:47:1e:dc:6e:7d:24:2e:32:8e:5f:77:
         e6:5a:f5:97:32:8c:2c:7c:76:e0:8b:5b:72:b8:57:e9:5b:76:
         49:85:64:d3:11:24:8b:c3:e9:3c:44:97:0d:7b:48:ee:20:54:
         34:f6:52:f0:75:ed:0d:3e:76:25:f7:24:d1:46:39:7d:8a:f1:
         1e:c8:4f:3c:dc:8a:7f:34:13:3c:e6:0d:f6:16:19:34:ba:75:
         35:a0:2e:0a:2e:89:44:93:62:da:82:d5:71:24:6c:89:ef:95:
         e9:7c:fa:e9:b0:1d:f3:35:cd:bd:68:a8:a2:11:fe:56:91:61:
         4c:b4:08:4c:92:04:b6:13:fd:54:5f:c9:2d:fd:16:1e:e8:9f:
         ef:28:be:45:28:4d:ac:50:ac:c9:5b:73:f9:1f:df:3d:d4:d5:
         b0:87:9e:5f:00:1b:b8:38:69:46:80:c6:56:a2:89:4d:df:c5:
         36:62:e2:fd:f7:b9:a4:90:6e:db:0b:0a:b6:5d:40:b1:90:90:
         a0:ee:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:48 2024 by rpki-client on console-ams.rpki-client.org