Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9xoWI2AxPd5dPsEv0nhXsfPdCNE.roa
File:                     9xoWI2AxPd5dPsEv0nhXsfPdCNE.roa (raw, json)
Hash identifier:          rBtyYpOf1EtKQ/tuFK9G1UpW8wVBsDodEh28snjPDr4=
Subject key identifier:   F7:1A:16:23:60:31:3D:DE:5D:3E:C1:2F:D2:78:57:B1:F3:DD:08:D1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02C9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9xoWI2AxPd5dPsEv0nhXsfPdCNE.roa
Signing time:             Tue 30 May 2023 17:17:39 +0000
ROA not before:           Tue 30 May 2023 17:17:39 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:39 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F71A162360313DDE5D3EC12FD27857B1F3DD08D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:f7:76:ea:85:10:30:1e:63:a8:66:52:67:
                    a9:a8:31:44:bb:62:2d:c5:79:64:3c:5c:0a:b3:79:
                    42:33:52:c6:16:85:4c:4e:dc:dd:6c:c6:c9:fb:46:
                    08:bc:b0:f3:4b:38:da:47:b8:df:42:78:e4:c5:e8:
                    88:c5:bb:3b:90:7b:3c:3e:3a:40:6c:2e:6c:bc:6e:
                    f9:cd:5c:58:60:fa:07:1c:27:b2:cc:6c:94:c8:44:
                    47:79:2f:29:fc:e0:af:5c:81:0a:0e:5d:f4:bc:51:
                    d1:6a:52:20:74:e3:cd:ec:7c:87:03:c8:bb:cb:f3:
                    b8:f1:50:70:48:db:e5:0b:7b:11:90:e3:2a:ec:2b:
                    88:ab:b9:43:ed:73:f8:83:54:63:7f:72:66:80:e8:
                    f3:58:2f:51:cd:0f:1c:65:f5:f3:01:63:a7:f9:7a:
                    d7:71:d5:98:6b:e7:a9:18:e4:7b:a8:e0:6d:ec:23:
                    13:6a:65:54:7e:7a:a8:ea:0a:b8:8c:8c:2b:5c:8b:
                    ea:cf:12:20:ef:7c:ca:4c:36:34:54:14:53:b4:b6:
                    fd:a3:8a:87:75:d4:34:45:cd:a6:44:c1:ba:3b:7a:
                    51:42:d0:a4:a5:7c:a6:03:d2:70:05:5d:87:d9:2e:
                    f8:d7:e1:16:fc:27:b0:53:24:10:2d:3f:30:fc:26:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:16:23:60:31:3D:DE:5D:3E:C1:2F:D2:78:57:B1:F3:DD:08:D1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9xoWI2AxPd5dPsEv0nhXsfPdCNE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:40:47:1a:63:0c:51:d5:07:b8:92:6a:7a:08:a9:6c:93:5e:
         0e:c2:3b:3b:53:99:5d:26:9d:8e:be:64:e9:b2:17:21:f3:7e:
         3b:0c:8e:dc:d8:93:33:2a:6e:e8:16:61:7e:bb:19:88:3e:d7:
         29:c8:89:7a:4c:36:2a:be:60:d3:4e:37:6e:8f:61:73:07:7b:
         4a:da:d4:9d:dd:aa:64:bf:8b:0a:3c:7c:f9:a4:71:a1:2a:b9:
         9c:5e:ca:f8:58:a1:8c:54:b8:ab:fc:d4:8a:b6:7f:7a:d6:43:
         2b:bb:31:93:90:d2:f5:be:3e:f2:1d:d6:10:b6:29:0b:0e:09:
         b1:a2:0d:4d:1d:bf:df:f8:05:95:f5:d8:1e:61:0b:65:25:bc:
         ad:d9:44:c1:1c:bb:03:0c:41:1b:53:c2:05:88:bb:de:64:4f:
         b1:5c:15:15:fb:9e:01:b1:86:ee:96:7a:39:8c:be:5d:e9:42:
         0d:c5:c1:5b:e1:ef:6b:8d:0f:ae:68:d7:f4:1e:ef:1a:28:94:
         66:91:8a:56:cd:03:1b:97:33:c6:2e:57:9d:52:9b:bb:df:99:
         7a:99:f1:9c:1e:2d:3c:1e:79:a5:56:64:c3:30:af:72:55:f7:
         c0:9b:2b:f2:a4:09:62:2e:d7:78:47:e0:51:d2:ad:b7:3d:36:
         30:56:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org