Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1cQzBT9u4MkZwAatRD2-hOAo04g.roa
File:                     1cQzBT9u4MkZwAatRD2-hOAo04g.roa (raw, json)
Hash identifier:          lmCLt8yGt4y2pHWmibobaBzz+G53W1mlLKtf0GQoUr4=
Subject key identifier:   D5:C4:33:05:3F:6E:E0:C9:19:C0:06:AD:44:3D:BE:84:E0:28:D3:88
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1cQzBT9u4MkZwAatRD2-hOAo04g.roa
Signing time:             Tue 06 Jun 2023 16:03:49 +0000
ROA not before:           Tue 06 Jun 2023 16:03:49 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:49 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D5C433053F6EE0C919C006AD443DBE84E028D388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:5e:be:69:c0:bc:c9:f6:6c:96:d3:a5:39:
                    5b:1a:f6:66:47:8d:6f:d0:7b:90:db:24:34:60:5a:
                    62:c8:ba:54:ac:79:7d:9d:cc:a9:e0:b3:7a:5b:75:
                    6b:b8:1c:8b:92:1b:09:b8:55:56:29:4f:53:3f:d2:
                    d9:cd:08:01:ee:81:d4:b8:60:94:92:da:61:c8:ab:
                    22:c2:33:82:d9:ee:8a:7c:64:83:0e:eb:a4:12:a5:
                    5a:71:25:35:27:c5:19:3d:5c:2b:56:59:77:1e:5c:
                    eb:3c:f7:3d:de:4e:cf:2c:b5:3c:1c:4b:07:94:19:
                    27:d1:d1:f7:f0:50:ed:3b:c6:58:34:ae:d1:d6:8a:
                    3f:59:92:55:8e:4e:70:0e:d7:87:3e:45:84:1c:bf:
                    24:ce:35:21:bc:81:f1:ba:35:09:a7:ca:1d:6f:16:
                    52:64:94:b3:11:1d:7c:8d:46:49:d1:31:dd:f6:b4:
                    e6:4b:af:07:52:89:a2:03:3e:fe:c9:e5:72:97:a9:
                    ce:55:5a:48:55:af:b1:12:21:df:29:b4:42:b2:e0:
                    d1:3f:09:ab:63:2d:24:03:05:e8:1b:d8:ee:95:46:
                    b4:a2:78:46:3b:89:b8:d3:37:b8:5c:41:b2:33:d7:
                    54:cf:0e:53:90:9e:41:d7:a0:b1:c6:40:40:61:32:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:33:05:3F:6E:E0:C9:19:C0:06:AD:44:3D:BE:84:E0:28:D3:88
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1cQzBT9u4MkZwAatRD2-hOAo04g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:41:29:47:ff:b4:de:12:25:64:73:d0:1b:fc:44:6d:dd:
         a0:db:36:ac:2b:05:77:9b:13:39:35:eb:0f:94:bc:cb:86:8d:
         96:b6:11:08:3d:d9:b0:7a:40:b7:cf:50:9c:79:b5:6f:35:70:
         7c:0c:17:f1:f1:b9:51:d1:b5:ce:11:af:c4:b8:e9:d2:8d:21:
         ad:2f:6b:81:94:6e:d6:93:2b:ef:84:09:e8:00:3c:6b:b5:0d:
         7c:ab:5e:d3:6b:27:19:9d:f0:a8:07:50:1a:34:1e:47:d7:c0:
         91:02:38:e5:07:9a:1c:f9:58:78:e2:9d:e7:78:9d:45:f5:8d:
         9f:7c:16:e6:04:d1:eb:17:74:15:35:11:41:af:42:06:e2:e0:
         e6:5f:35:12:c1:80:b0:f6:21:82:bd:8e:44:6c:f2:5a:8a:08:
         b8:8d:ad:62:55:76:ed:f0:8a:37:4b:61:24:77:23:ab:7b:dd:
         07:cf:32:9f:d5:65:6a:42:64:d0:38:41:ee:04:c3:1b:1f:ca:
         cf:50:ed:71:8f:86:b4:50:57:08:f2:b8:c1:e1:2d:73:91:5d:
         c7:90:2e:e3:5f:a3:2c:af:e3:64:69:27:39:90:74:a4:37:1e:
         4c:b8:ab:b1:97:42:d9:ac:4f:53:64:0a:a5:94:a2:28:f3:13:
         f1:7c:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org