Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-qfQ2ZxGFEXw2orjOhn_PxdABsU.roa
File:                     -qfQ2ZxGFEXw2orjOhn_PxdABsU.roa (raw, json)
Hash identifier:          iHgAMPBoh6wp3opWwc9YSWjtYSfwWRG4utO2TeYZX6Y=
Subject key identifier:   FA:A7:D0:D9:9C:46:14:45:F0:DA:8A:E3:3A:19:FF:3F:17:40:06:C5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0366
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-qfQ2ZxGFEXw2orjOhn_PxdABsU.roa
Signing time:             Thu 01 Jun 2023 17:56:39 +0000
ROA not before:           Thu 01 Jun 2023 17:56:39 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:56:39 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FAA7D0D99C461445F0DA8AE33A19FF3F174006C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:c8:e1:90:0a:32:74:f6:fc:d6:ca:41:3d:
                    20:26:1a:80:a6:03:bd:8b:6f:76:ba:bb:cd:86:d9:
                    01:0e:b6:89:f7:18:fc:a0:a7:2e:8e:fb:30:46:87:
                    71:7f:8a:66:d8:7f:94:42:bb:0a:f2:df:65:c4:f3:
                    88:7f:23:41:44:7c:11:9b:3e:45:d8:85:85:f2:3f:
                    3f:6e:22:8f:38:16:26:c3:ca:32:a9:af:ff:32:24:
                    0a:65:6d:27:24:0e:ea:d0:55:73:b7:a6:d1:8a:2f:
                    2d:6d:5a:f0:d9:df:62:77:40:15:c7:b4:75:c8:52:
                    41:d1:45:20:c3:77:02:1f:aa:84:13:26:69:19:0d:
                    1e:26:b9:c8:ad:92:7e:30:52:fb:c1:be:bc:b7:fd:
                    66:65:77:30:17:0b:64:7b:4e:a8:d0:42:2c:5a:bb:
                    66:d8:e8:69:35:f4:06:77:2e:52:2d:13:fe:7c:ba:
                    95:b1:dd:ba:ff:7c:f2:ed:ae:5c:49:c3:44:f2:dd:
                    06:25:21:ad:c1:2d:c2:d8:e2:e8:0a:1b:b0:7c:fe:
                    01:0c:1c:99:16:16:f3:fc:fd:34:55:b0:93:e1:82:
                    9e:87:56:ec:c5:3b:68:cb:b3:22:57:5b:2f:70:b1:
                    60:0d:91:f4:52:2d:e2:1b:06:9b:90:a8:8f:31:8f:
                    13:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:D0:D9:9C:46:14:45:F0:DA:8A:E3:3A:19:FF:3F:17:40:06:C5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-qfQ2ZxGFEXw2orjOhn_PxdABsU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:c3:ed:26:be:04:69:ba:1a:70:86:d0:18:ad:6b:e1:c4:
         d4:a2:98:f9:ec:d7:f9:51:d1:23:2a:bb:4f:98:ac:19:f6:d4:
         dc:27:a8:82:a3:3f:04:f4:40:a1:f6:8a:c6:b6:76:bf:48:e5:
         8e:e8:65:83:ac:86:9d:7f:eb:9b:85:c2:41:60:03:e0:99:5f:
         ea:b7:78:b9:c8:5f:c7:18:ba:65:65:ef:53:23:b8:8b:c6:3b:
         b3:de:2d:d1:ab:7e:47:b5:4c:1d:c2:5c:95:f8:fc:05:cf:34:
         b1:a1:ad:1e:96:af:ff:38:61:c9:de:4f:21:6f:61:93:b7:98:
         51:c3:99:ca:b9:19:90:e1:61:71:e9:52:d4:45:eb:ae:7e:d4:
         20:ce:23:60:36:91:07:7c:1e:cf:6f:19:e2:b2:62:66:cf:2c:
         f2:96:00:e5:59:08:97:b8:90:24:5d:9f:72:35:32:32:f6:41:
         14:56:c0:e6:48:ab:6c:7a:29:10:77:c6:58:af:aa:67:c0:d8:
         4f:15:20:c4:32:db:b9:2b:a5:d8:73:2e:ba:b2:79:51:cc:73:
         46:8e:06:2b:d9:95:4a:e1:91:a1:8a:b3:c3:ce:de:47:e1:0b:
         79:f1:6a:59:61:d1:13:86:34:a6:35:bd:28:e0:da:fa:92:dc:
         95:fe:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org