Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7FSUcVLvuj6rB4SPCTlsJV8wW98.roa
File:                     7FSUcVLvuj6rB4SPCTlsJV8wW98.roa (raw, json)
Hash identifier:          puQwk86nYfDP5YoweU4uHIU2OmyUjClAW6P5hMMVKM0=
Subject key identifier:   EC:54:94:71:52:EF:BA:3E:AB:07:84:8F:09:39:6C:25:5F:30:5B:DF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0401
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7FSUcVLvuj6rB4SPCTlsJV8wW98.roa
Signing time:             Tue 06 Jun 2023 16:05:48 +0000
ROA not before:           Tue 06 Jun 2023 16:05:48 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.16.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:48 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EC54947152EFBA3EAB07848F09396C255F305BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:8f:e4:81:55:15:8e:9d:39:e9:88:08:4a:
                    c3:3e:a5:b2:bf:af:d0:41:67:56:09:a3:24:5b:be:
                    a1:d6:fa:15:ff:c3:45:c2:09:68:36:02:35:38:e6:
                    75:58:ca:fa:0d:73:47:39:2f:b1:b8:b2:93:62:10:
                    33:db:5d:a1:21:59:fa:ba:6f:55:3d:c8:3b:a7:e9:
                    f7:d8:6e:0f:d0:f1:30:90:dd:31:14:13:2a:71:84:
                    b3:9f:a2:46:ba:21:a0:9c:8c:23:d1:1a:fd:af:9c:
                    8c:96:37:4e:e5:0f:49:b5:82:a2:f8:07:02:90:01:
                    70:48:9a:b0:9c:f7:13:88:1e:99:41:70:ec:5e:a5:
                    35:c1:24:aa:f1:1d:f4:e8:c6:ef:bc:83:44:52:cc:
                    9c:fc:f9:ea:27:31:71:71:4c:b3:94:37:70:07:45:
                    32:3d:5c:8c:d0:4d:21:83:a8:cb:3c:92:96:5a:eb:
                    08:d7:2f:1e:64:bd:58:ca:43:34:be:9b:85:58:2c:
                    ac:3b:e8:67:81:c9:1a:19:7f:5f:08:00:69:8d:1d:
                    79:b6:ad:fd:3e:50:fc:c8:44:82:d5:22:09:c3:b3:
                    17:7b:8a:2d:79:d1:f7:61:65:0c:f0:cd:1f:e7:ca:
                    c8:a1:45:3d:e8:81:85:58:7b:f5:f4:02:fb:87:2b:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:94:71:52:EF:BA:3E:AB:07:84:8F:09:39:6C:25:5F:30:5B:DF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7FSUcVLvuj6rB4SPCTlsJV8wW98.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:88:8b:82:25:50:e4:ff:ec:42:7d:a0:cf:31:bf:08:e4:f0:
         df:95:60:dd:8b:69:a7:e1:34:cb:a0:08:33:0f:d0:f2:c7:40:
         37:2e:7f:de:a5:1e:60:50:ac:1e:72:2b:36:63:1c:dc:09:ca:
         61:a9:2d:1a:c2:04:73:d6:cd:6b:09:1d:63:94:af:a9:5d:af:
         46:2c:49:3b:91:e0:d2:69:a3:7a:0f:6a:75:1f:db:f6:a8:22:
         20:ed:44:f1:62:20:90:ec:85:09:69:7e:00:26:47:1f:e0:6f:
         d0:6e:06:f0:21:7e:f9:6b:70:4e:fc:44:2f:7c:f4:66:5a:66:
         df:0f:15:e8:3c:70:48:8e:7d:ca:0e:d2:bf:62:d8:ae:73:8d:
         56:3b:0b:eb:71:08:f6:13:11:e8:8c:03:bf:9c:07:c6:bf:b4:
         c9:4e:52:e2:46:bc:28:22:17:e4:e6:f0:b6:ed:79:45:a9:3f:
         5f:31:a5:8f:0c:71:50:01:dc:58:81:17:0e:40:2c:b3:a6:b6:
         5a:4e:b1:e1:93:1e:75:ad:ca:95:d8:4d:92:c7:00:c8:ab:4b:
         83:5e:6f:af:cc:3b:4a:8b:6c:6e:03:4a:24:a4:83:22:c0:79:
         e2:dd:f5:5a:80:af:e8:ac:fb:0d:cc:73:ef:10:1b:bd:67:56:
         43:40:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org