Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pV4CGow48t6vrZbA60Y0aKuY3ds.roa
File:                     pV4CGow48t6vrZbA60Y0aKuY3ds.roa (raw, json)
Hash identifier:          tSwRpwLRSPA3lSh8++zpf4zkjbI8F1OF0L7+M8wsZhA=
Subject key identifier:   A5:5E:02:1A:8C:38:F2:DE:AF:AD:96:C0:EB:46:34:68:AB:98:DD:DB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07B1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pV4CGow48t6vrZbA60Y0aKuY3ds.roa
Signing time:             Tue 30 Apr 2024 02:06:37 +0000
ROA not before:           Tue 30 Apr 2024 02:06:37 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.231.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 02:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:06:37 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A55E021A8C38F2DEAFAD96C0EB463468AB98DDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:7c:7f:ad:33:f5:89:cb:da:67:70:dd:65:
                    f8:45:7a:9e:4b:4f:f3:e8:fb:c2:70:4f:af:ee:c0:
                    31:34:d5:d7:fc:88:90:77:e6:a8:2d:45:c6:c4:36:
                    13:a9:4a:9d:23:b0:ba:2d:1c:f8:38:21:bd:7b:4d:
                    f3:77:8b:7a:29:a7:69:d6:b8:fe:17:2e:aa:11:c7:
                    b7:3f:bc:fa:2a:5b:c9:c6:77:09:db:79:1b:a9:3a:
                    df:f2:de:eb:19:2c:c1:41:63:c7:57:63:35:7b:e2:
                    6e:56:fe:17:9c:0b:be:f6:5f:6d:2d:ab:59:ae:4d:
                    63:71:be:fa:60:bf:19:63:2f:6d:a8:5e:23:52:f3:
                    9d:8b:e8:4b:c7:b0:96:ea:62:d6:31:16:f3:25:b6:
                    18:82:11:2e:a1:f6:72:ae:ca:18:08:1d:5e:1d:04:
                    32:de:90:9a:3b:f7:27:f3:e3:ec:a6:53:83:92:0c:
                    99:cf:6e:c1:b1:0a:82:c3:df:60:8b:2c:c4:33:16:
                    72:63:b0:ce:a0:7b:da:c0:bb:b3:06:de:9c:26:62:
                    93:da:f2:61:6c:c2:74:fc:b8:ff:04:25:78:e9:56:
                    dc:ea:bb:c4:27:78:ef:b3:9c:3e:74:8d:a5:12:f3:
                    ca:c1:df:ac:67:60:c7:60:43:e6:5f:11:cd:a4:0e:
                    ee:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5E:02:1A:8C:38:F2:DE:AF:AD:96:C0:EB:46:34:68:AB:98:DD:DB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pV4CGow48t6vrZbA60Y0aKuY3ds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:8d:83:db:98:eb:d8:c6:29:b5:df:41:17:2d:21:5f:c5:
         fa:f0:4f:40:24:85:ee:b0:7d:bd:c5:ab:de:a0:a6:37:2c:2f:
         4a:90:c7:74:82:00:ca:2c:aa:6c:9e:42:7a:20:ab:5a:91:ca:
         a1:30:08:9f:7d:46:bf:89:72:92:83:47:19:5e:1a:aa:de:04:
         70:3f:12:a7:29:00:6d:52:61:81:f6:3a:bc:2e:7f:b4:ae:34:
         ca:1e:c2:d5:a0:37:98:c8:02:89:85:70:95:e2:05:cf:04:61:
         8b:06:85:e1:b8:2b:80:ae:38:69:da:d6:30:e3:2b:8a:13:02:
         a7:7f:be:59:73:fa:e6:cf:51:6f:04:98:0b:55:7c:cc:79:c9:
         d8:8b:10:b9:55:a4:6e:ee:3c:1b:c4:6a:c0:cd:d3:07:a5:a0:
         6e:e4:d7:0b:84:8c:c3:38:e7:5e:dd:8d:35:89:c4:6c:3c:33:
         68:cf:a8:74:6c:e0:1a:8c:0a:76:f2:81:90:1d:4d:8d:3a:9b:
         cb:d8:4a:16:ae:48:19:09:66:4a:58:fc:57:03:32:f0:e3:60:
         0d:9a:f3:01:59:95:58:ec:1e:09:a1:6c:fd:90:06:b3:4a:5b:
         4b:9d:82:fa:cd:d9:3a:3d:5f:f0:10:b7:fc:15:14:fb:71:1e:
         21:bf:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:13 2025 by rpki-client