Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1HQltTrzQCViLuIICf2Wlp3dHQE.roa
File:                     1HQltTrzQCViLuIICf2Wlp3dHQE.roa (raw, json)
Hash identifier:          vELikOwiLQQ6ZAhk6mhloYScI4ZZcX8cb29Zr9O1DEs=
Subject key identifier:   D4:74:25:B5:3A:F3:40:25:62:2E:E2:08:09:FD:96:96:9D:DD:1D:01
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03C9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1HQltTrzQCViLuIICf2Wlp3dHQE.roa
Signing time:             Tue 06 Jun 2023 16:03:00 +0000
ROA not before:           Tue 06 Jun 2023 16:03:00 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:00 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D47425B53AF34025622EE20809FD96969DDD1D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:03:74:e3:69:01:0e:93:fc:9a:b5:82:18:
                    29:59:09:c7:67:5e:d3:e6:24:03:a2:37:44:14:2a:
                    a9:22:6d:0c:2f:3a:a6:1a:62:96:3f:2c:6e:cd:01:
                    54:43:16:33:61:a5:f8:cb:da:08:4e:8c:4d:7d:08:
                    3e:f9:7c:87:75:c4:7c:cc:38:a6:03:1b:33:e3:73:
                    79:aa:bb:03:af:e2:eb:c1:38:92:ef:f4:f9:34:b4:
                    91:ab:63:b9:c6:b7:b9:2f:de:ed:d7:24:e1:2a:6f:
                    db:b4:6c:7e:c3:7d:33:7b:11:35:90:eb:3d:33:bf:
                    a4:15:03:fe:18:94:e0:00:d2:cc:c2:23:c0:7a:a5:
                    9b:dc:53:f1:1c:8f:1e:9d:7f:7d:e8:32:a0:9d:56:
                    20:03:50:77:87:43:48:25:33:07:06:32:65:1f:fa:
                    f9:74:b2:fd:e0:2c:9e:57:25:ff:d2:c9:4d:8a:ac:
                    ad:16:1d:c4:00:6d:8e:a3:6f:cb:03:8d:9b:79:05:
                    0d:f7:a9:4c:15:98:20:88:4f:8d:3f:f6:34:48:4f:
                    42:d1:0b:42:34:33:33:83:ae:c2:ea:08:6f:a8:2d:
                    35:a2:2c:45:f7:da:58:69:45:63:72:77:3b:30:7c:
                    ae:71:1e:a1:6c:15:e5:5a:44:37:3e:d2:d1:74:fd:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:74:25:B5:3A:F3:40:25:62:2E:E2:08:09:FD:96:96:9D:DD:1D:01
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1HQltTrzQCViLuIICf2Wlp3dHQE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:bd:17:15:84:c0:b6:bd:9a:1d:df:66:d6:c6:e3:ab:da:82:
         dc:5e:ca:42:a7:11:f5:b7:46:f8:93:99:b3:94:2c:75:8f:ef:
         6b:08:3a:da:17:dc:b9:a9:3f:25:2f:db:87:1a:18:19:2a:0e:
         b8:09:e5:88:64:ee:4c:0a:8c:9d:12:c8:48:14:f1:54:cb:7c:
         af:6c:0c:38:22:ae:1b:cc:6e:93:40:d1:55:1f:5a:a9:dd:8c:
         91:80:36:85:ec:69:d7:a7:e3:8e:a5:e4:83:9f:61:05:96:42:
         c8:49:78:a3:5d:24:9d:ef:07:a0:ae:28:55:19:4c:7b:93:c4:
         11:9b:5f:48:58:ca:89:9b:dc:3e:11:18:37:e6:a1:23:10:08:
         4f:04:da:5a:8e:50:9b:b8:b6:43:cf:83:d4:21:43:98:0e:77:
         ee:30:98:4f:3d:09:15:d0:4f:e3:62:88:83:95:81:71:3f:6a:
         d7:01:91:36:ce:57:de:d9:ed:2d:49:8a:39:fb:39:c2:23:47:
         e6:42:16:f9:ab:b0:96:c0:36:42:66:aa:f0:70:f4:8d:48:ad:
         8a:90:c4:76:2c:59:12:f7:1c:8e:f1:e3:a1:ea:67:1f:23:20:
         63:cd:84:b7:04:f3:e5:b3:5b:68:18:d9:dd:24:8b:07:c8:5e:
         be:e6:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org