Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Acdx6aWrRbuREnH2krBMuwIY9SE.roa
File:                     Acdx6aWrRbuREnH2krBMuwIY9SE.roa (raw, json)
Hash identifier:          /2BnnnQmW6ce4sCURq9eGioEE4y8XuJMbTCVL7Cz3EU=
Subject key identifier:   01:C7:71:E9:A5:AB:45:BB:91:12:71:F6:92:B0:4C:BB:02:18:F5:21
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Acdx6aWrRbuREnH2krBMuwIY9SE.roa
Signing time:             Tue 30 May 2023 17:18:22 +0000
ROA not before:           Tue 30 May 2023 17:18:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.158.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:18:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=01C771E9A5AB45BB911271F692B04CBB0218F521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:0b:01:89:82:fc:d1:63:c8:39:43:9e:ad:
                    27:cf:39:ff:91:9a:99:23:21:f2:37:43:f8:30:87:
                    70:58:31:ad:b3:aa:29:39:be:7f:31:31:85:f6:af:
                    12:25:3f:68:8a:d6:72:8a:02:ec:18:47:5b:81:6c:
                    85:85:cd:9b:9e:9e:35:11:d4:93:a8:3b:c3:e4:81:
                    42:4c:40:af:ef:86:5b:a6:58:13:b4:13:30:6b:cc:
                    d5:11:10:27:df:30:f9:cf:f6:b7:81:0d:03:fc:3e:
                    43:1d:da:f2:a6:f2:99:2c:c4:e6:03:9d:aa:c3:6f:
                    58:4f:cb:9f:52:64:59:82:b7:53:b8:59:03:25:5b:
                    4b:60:02:39:0f:20:c0:3c:7c:83:7e:9c:f9:b6:37:
                    b4:e8:c3:5e:ec:8a:69:97:ef:1d:d1:50:47:bb:b7:
                    18:b1:21:bb:43:01:12:c7:3f:b2:8c:19:46:5e:d1:
                    de:81:e6:3c:20:9a:2e:68:72:1f:44:76:cd:82:d2:
                    f1:47:0e:d2:a8:dc:21:5e:87:a2:36:68:1a:21:fc:
                    28:0d:dd:98:ee:cc:03:a0:8f:d5:d9:ec:0b:ac:f5:
                    c5:a9:df:9c:ab:e5:89:4a:fc:f8:80:10:3e:6e:d4:
                    7f:3d:7f:f4:96:dc:1e:92:8a:40:be:b2:cd:98:29:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C7:71:E9:A5:AB:45:BB:91:12:71:F6:92:B0:4C:BB:02:18:F5:21
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Acdx6aWrRbuREnH2krBMuwIY9SE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:26:aa:cd:58:f3:66:17:4c:0b:61:fc:6f:b0:48:c7:88:
         43:d2:5b:1a:c5:e4:ee:52:88:0f:c8:73:ce:f6:9f:ae:3e:9c:
         a7:c8:65:84:35:3c:07:32:1e:13:5d:da:4a:97:97:5a:a0:06:
         df:7f:26:43:02:7f:43:fc:a7:72:3f:a0:3d:80:6c:a5:48:5f:
         32:7a:4e:25:e2:b6:91:41:7d:25:7e:83:51:4a:11:c7:b8:81:
         66:ef:8d:38:ef:1b:6b:44:45:26:4a:d9:a6:09:3a:c5:ab:cc:
         20:a2:57:b5:36:70:d0:17:9d:84:2e:c5:b4:ad:c7:e1:b9:a5:
         f1:ab:13:c0:be:c8:38:70:0f:fd:11:e1:e4:39:da:a3:18:08:
         80:5d:d0:7e:bd:a2:e1:c4:e8:6e:6b:4f:15:ec:83:84:c0:7b:
         7c:3d:54:42:24:38:88:0b:ee:e3:98:40:9e:40:6e:1c:62:a6:
         0d:51:ea:9b:8f:c9:68:71:7e:94:87:6c:96:a5:ba:00:8d:d7:
         4a:33:dc:8c:52:37:5f:b6:33:35:9e:8b:65:c1:39:4c:bc:5d:
         5a:65:94:d7:a6:bc:b3:10:07:c2:39:78:e3:11:43:80:21:d6:
         d1:ee:c6:71:ea:e1:e4:19:01:9f:41:ea:25:c1:2d:17:26:2a:
         e3:60:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org