Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yKbNVIU6vduPvC7YQFvlCeeSQjE.roa
File:                     yKbNVIU6vduPvC7YQFvlCeeSQjE.roa (raw, json)
Hash identifier:          BjHCeU57bt1qtMK3rnvdwHq75tQWnQRDOtHQFSzbk4w=
Subject key identifier:   C8:A6:CD:54:85:3A:BD:DB:8F:BC:2E:D8:40:5B:E5:09:E7:92:42:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04B5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yKbNVIU6vduPvC7YQFvlCeeSQjE.roa
Signing time:             Thu 27 Jul 2023 16:48:09 +0000
ROA not before:           Thu 27 Jul 2023 16:48:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.78.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205 (0x4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C8A6CD54853ABDDB8FBC2ED8405BE509E7924231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:ba:ef:f5:c0:f5:8f:36:6e:60:24:c0:34:
                    24:03:50:26:57:c6:8c:6b:25:ef:82:77:d0:54:39:
                    1e:14:5c:2a:35:c8:eb:49:94:f5:5c:69:45:e4:45:
                    ff:08:d8:d6:f9:1c:82:9d:94:78:76:e6:9f:a8:67:
                    eb:f0:99:c7:5d:14:58:ba:6e:1a:0b:03:23:fc:aa:
                    f8:81:61:f2:8d:b7:9e:e8:5c:f4:cb:17:8c:7b:55:
                    c9:61:78:16:b3:b1:7e:53:d2:99:9b:b7:ed:b5:3d:
                    4b:9d:88:71:e7:98:5d:7c:d9:09:83:83:96:c6:10:
                    2f:0e:87:e6:74:31:ac:62:ba:2c:a2:bf:40:23:34:
                    b7:f7:f8:b8:48:66:5d:c5:47:05:2a:20:23:19:0f:
                    54:8e:f2:45:af:1d:67:59:6b:83:7a:c3:cb:55:3a:
                    f1:cf:39:43:7d:68:a7:d7:a8:8b:03:74:90:b8:61:
                    22:7e:6d:3c:6a:bb:e9:10:1e:48:be:54:51:37:40:
                    60:c1:a7:08:3a:d5:c8:4e:c7:a8:a4:30:1b:14:1d:
                    f9:a6:62:da:71:7b:1f:78:c2:93:91:66:a7:50:fd:
                    0b:92:90:52:38:26:f3:88:66:21:80:b0:b7:90:dc:
                    71:22:e7:9e:0b:ca:00:d4:a4:fb:fe:af:8d:35:5a:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:CD:54:85:3A:BD:DB:8F:BC:2E:D8:40:5B:E5:09:E7:92:42:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yKbNVIU6vduPvC7YQFvlCeeSQjE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e3:6c:8a:61:ce:67:1f:e5:6a:bf:2a:ce:64:f8:c4:47:59:8a:
         64:52:ee:48:54:34:7d:21:7b:da:31:21:6b:b6:ba:00:e9:36:
         9c:e7:10:04:44:d8:6e:b4:ac:b6:c7:b7:11:1b:b6:7c:53:a0:
         dc:74:a3:71:db:39:76:6f:a6:33:f1:7e:31:e8:d0:0c:f1:6e:
         ea:70:76:aa:4d:6f:e6:4f:8a:a4:50:c1:a5:8c:0e:ac:17:b5:
         aa:2e:f0:e6:06:65:3e:7a:bb:1c:05:25:46:30:16:7c:47:9f:
         91:9f:b0:89:15:ce:ff:29:3b:eb:b0:8e:9c:f1:f3:a4:bd:98:
         7f:f3:c0:c7:79:8f:5d:a7:46:05:dc:1c:c1:86:1e:84:37:ec:
         a2:1b:b5:f7:f0:74:b9:d6:4c:c6:0d:e5:bf:9d:b9:cf:fe:b7:
         11:61:0d:a6:d5:56:32:b0:ac:e1:00:7c:19:36:ca:65:af:8e:
         e2:e9:8b:a4:60:98:d6:12:24:71:79:b9:e1:1f:6f:dc:ee:97:
         cc:13:25:30:eb:83:78:d4:f0:fd:e9:eb:17:be:57:65:c6:ee:
         cf:be:06:56:08:52:70:35:6b:d4:90:8e:b9:18:9a:e8:10:b4:
         91:c1:53:fa:64:5d:e3:df:b2:a7:2e:a0:6c:84:11:9d:23:c9:
         06:ce:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org