Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-epws17qfUhtr3meUR9P7KzxJnI.roa
File:                     -epws17qfUhtr3meUR9P7KzxJnI.roa (raw, json)
Hash identifier:          5TonZdNLWDXxBRxv7cpcCza8HRs16dmez3JErMpAgc4=
Subject key identifier:   F9:EA:70:B3:5E:EA:7D:48:6D:AF:79:9E:51:1F:4F:EC:AC:F1:26:72
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       9F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-epws17qfUhtr3meUR9P7KzxJnI.roa
Signing time:             Wed 29 Mar 2023 16:05:44 +0000
ROA not before:           Wed 29 Mar 2023 16:05:44 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.142.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:44 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F9EA70B35EEA7D486DAF799E511F4FECACF12672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:7d:50:13:13:5f:29:7b:20:bc:65:5e:1a:
                    d9:71:b2:84:12:c0:44:05:c9:16:3b:39:17:76:cb:
                    3c:12:00:c2:24:37:3f:7d:74:ea:ee:cc:7e:74:be:
                    2d:94:21:79:65:ca:f9:35:dc:31:77:f0:de:69:8e:
                    23:ca:b0:4d:91:e2:43:8a:96:68:84:0a:3d:1d:fc:
                    ca:d5:eb:17:aa:c0:5b:69:fe:1d:f5:05:de:d6:06:
                    56:13:ca:9a:ee:c1:11:80:b6:2a:a0:d9:db:b5:d0:
                    3d:4c:73:08:c4:80:64:f8:3d:f1:c2:58:d8:94:9f:
                    5c:ba:42:6f:96:00:ca:b9:0a:8c:8b:ea:74:3f:8b:
                    3f:50:b3:5c:0f:60:5e:fd:2c:03:a4:58:30:4c:ea:
                    82:f0:47:7c:47:ef:11:ef:b6:b8:fb:b4:f1:a3:c9:
                    79:06:1f:7a:56:a1:2c:7b:0a:21:3b:25:46:14:82:
                    ca:63:77:a8:30:bc:0b:57:93:3f:b5:1f:22:cd:96:
                    8c:63:b6:40:9e:ec:bb:81:65:20:58:57:59:89:ed:
                    58:23:b9:26:09:76:6b:71:70:39:5a:1b:ae:75:0d:
                    e0:62:6c:ac:f1:09:03:ab:2f:3e:e9:47:58:03:2f:
                    59:a7:78:59:31:d5:3f:6b:92:05:36:87:af:1e:6a:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EA:70:B3:5E:EA:7D:48:6D:AF:79:9E:51:1F:4F:EC:AC:F1:26:72
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-epws17qfUhtr3meUR9P7KzxJnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:18:7f:21:f2:db:ba:bc:cb:2f:65:12:a5:36:a8:1e:37:
         67:83:14:30:ee:05:0e:57:11:5c:1b:72:6c:4a:c4:82:a2:da:
         52:04:71:4e:5e:61:c1:67:97:6c:6d:bb:a7:52:c2:39:7b:60:
         91:ca:66:9f:5b:f3:ca:4f:fb:4c:bd:48:ea:ff:16:b4:fe:8c:
         de:4e:51:a3:40:47:d1:6a:98:d7:96:50:bf:96:63:70:13:5d:
         74:1d:ed:a8:5e:83:3a:34:40:a0:6a:cf:d3:7c:81:10:e1:61:
         a4:38:14:77:b0:5b:9e:f3:f8:de:4d:69:c6:0a:b3:fd:f4:9a:
         eb:ab:9f:3e:1b:c0:63:01:08:f8:04:ec:ea:4f:21:14:e1:3e:
         45:51:26:31:ee:5a:27:89:3b:75:6f:d9:64:64:4d:16:55:6a:
         f9:40:c0:1b:fa:90:3a:7e:b7:c9:9b:97:d0:ea:61:f8:b4:c8:
         ec:b3:43:82:a4:88:57:6a:ef:3e:29:0f:c9:a3:48:e1:16:e6:
         49:b9:73:fd:bb:0d:f1:af:f7:00:38:82:07:d1:5e:38:2d:2b:
         44:9b:87:31:b4:46:86:48:90:22:39:7f:35:0e:31:a3:c3:dd:
         6b:e6:19:e7:d4:97:e7:34:85:55:3b:4a:dd:20:4b:f7:b3:0c:
         ce:65:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org