Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa
File:                     48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa (raw, json)
Hash identifier:          qcM4+Zs3OoDb+DvRUyFIucUNqKkUkvp7El7nhyHX0xs=
Subject key identifier:   E3:CB:77:2C:C4:AA:F6:42:E5:17:97:02:4B:DC:B9:37:A6:67:0E:7E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       038F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa
Signing time:             Thu 01 Jun 2023 17:57:40 +0000
ROA not before:           Thu 01 Jun 2023 17:57:40 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:40 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E3CB772CC4AAF642E51797024BDCB937A6670E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:fe:de:13:6b:07:c6:ec:a1:68:1b:d0:01:
                    f4:85:e2:a3:bd:6f:65:1f:6d:d1:24:67:ab:f3:61:
                    f3:38:b1:c0:ae:d1:0b:da:18:7c:78:9a:bd:87:52:
                    3c:13:4b:db:7a:47:2d:1c:3c:d5:a8:92:e9:50:98:
                    11:a5:14:28:97:2c:d0:60:7a:2c:40:8a:c3:40:39:
                    ec:ca:f7:2b:0a:f6:d7:9d:13:b7:b8:d1:47:26:88:
                    6b:8a:7c:a3:be:1d:a8:56:db:08:b3:84:1a:aa:80:
                    42:ec:80:cc:35:2f:47:84:a8:c1:f7:17:1c:2e:a3:
                    82:38:47:1e:ae:40:46:94:f3:5d:1f:af:40:6f:ac:
                    64:bc:d3:51:68:33:be:92:c7:99:a1:ae:35:e7:21:
                    6e:69:60:5c:08:11:d3:5e:90:7b:14:0c:c6:79:93:
                    94:8e:0b:21:83:15:d1:83:4c:9d:67:ec:ec:d2:80:
                    5f:e9:f8:17:26:dd:7b:bd:b1:39:8a:84:c4:42:1d:
                    8b:2a:f6:71:87:4f:75:00:fc:3b:48:f0:ff:ad:88:
                    82:17:b1:7b:19:9c:d5:6a:a2:31:96:f1:cf:7c:0a:
                    f3:82:6a:91:ec:fe:7d:52:98:7d:51:f5:32:59:66:
                    62:67:06:ef:4e:68:d8:08:30:46:dd:02:95:f8:fd:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CB:77:2C:C4:AA:F6:42:E5:17:97:02:4B:DC:B9:37:A6:67:0E:7E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/48t3LMSq9kLlF5cCS9y5N6ZnDn4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:4d:97:1c:39:b3:02:35:93:6e:16:98:df:65:16:dc:0a:2a:
         ba:52:59:e7:e7:63:74:f4:1b:2a:fd:ee:4f:80:54:3d:84:79:
         c6:42:ea:2a:50:d3:da:ca:b3:b2:18:cf:40:6c:d0:36:18:2f:
         2b:e6:ca:e0:6c:26:c8:41:10:3a:70:db:18:dd:de:29:6d:f6:
         1a:27:98:0a:0b:ea:9b:c2:3a:fb:2d:dd:b1:d1:f8:10:c3:bb:
         f2:6a:01:71:a4:f3:fb:c3:c9:5e:0a:df:c7:8c:82:0d:86:db:
         b9:1c:91:55:95:f7:87:66:09:c4:07:21:98:2e:70:20:f3:f6:
         06:68:14:a7:35:a5:59:ee:17:a8:89:4c:9a:99:e8:e6:88:ae:
         49:ee:de:cd:6a:da:f3:4f:a2:97:07:8f:de:84:06:c3:ea:45:
         07:69:75:91:94:6d:85:a4:b8:e5:ba:d1:ac:c0:d7:44:27:ff:
         73:12:78:24:2c:83:2a:7e:42:be:37:f8:d9:11:7b:03:ce:ef:
         bf:3d:79:8d:7a:3c:b2:5b:05:2f:51:e3:9c:6c:fa:07:1d:47:
         5a:2b:77:ec:db:2b:ee:79:25:b5:da:d0:6b:c3:a2:3b:b5:69:
         97:20:b2:bc:9a:61:6a:ee:fb:eb:c6:f8:57:b3:ce:b3:bf:29:
         93:6b:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org