Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BZFDhaBNzTWvphmTDbKCcVMG9vo.roa
File:                     BZFDhaBNzTWvphmTDbKCcVMG9vo.roa (raw, json)
Hash identifier:          Fy8BsYpA2VC4B8waWonhoMAYqqFf1v0Bq1SUAnEkGlI=
Subject key identifier:   05:91:43:85:A0:4D:CD:35:AF:A6:19:93:0D:B2:82:71:53:06:F6:FA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0281
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BZFDhaBNzTWvphmTDbKCcVMG9vo.roa
Signing time:             Tue 30 May 2023 16:34:25 +0000
ROA not before:           Tue 30 May 2023 16:34:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=05914385A04DCD35AFA619930DB282715306F6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:09:71:3b:54:21:6e:dc:12:d3:b4:49:76:f4:
                    cc:42:5f:25:9c:6b:72:27:57:ed:8e:ac:26:3c:dc:
                    fc:72:19:2e:49:40:0d:03:dc:af:b0:49:21:4f:91:
                    93:77:d2:91:34:e9:40:71:72:00:cb:f3:9f:da:ef:
                    7d:bd:85:6d:3f:53:8a:7d:9d:3d:37:87:7c:05:cf:
                    e4:4d:c5:21:ae:21:f1:b6:08:de:f2:32:12:e8:84:
                    8c:ca:6c:3a:1c:b7:db:bb:f4:d4:2a:76:6a:56:bc:
                    14:b4:48:d9:94:13:f0:3e:f8:67:d3:e4:02:a7:7b:
                    8a:12:ae:7a:15:f5:c8:48:10:2c:e9:43:ea:c7:bd:
                    19:5d:41:36:08:19:d9:d5:87:70:a8:0f:eb:33:63:
                    0b:65:3b:34:d0:ff:88:c9:b5:d8:05:ef:f5:21:bb:
                    bd:f2:bd:b0:c6:41:44:6e:e6:99:62:9d:9b:d3:4a:
                    be:35:43:cc:a6:f4:8b:28:60:d7:03:7a:4d:9b:1e:
                    93:eb:16:1a:33:4a:37:36:08:31:e3:cd:47:0f:b7:
                    c7:18:6e:05:aa:98:b3:6c:e5:a7:ad:5f:66:b0:16:
                    5b:f9:d4:96:b5:8e:c2:3e:16:d4:b9:26:53:3d:44:
                    83:e3:82:01:f2:5b:a6:d1:10:46:e6:bd:a9:2b:40:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:91:43:85:A0:4D:CD:35:AF:A6:19:93:0D:B2:82:71:53:06:F6:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BZFDhaBNzTWvphmTDbKCcVMG9vo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:37:de:67:99:89:c7:6c:51:ba:7d:53:ff:90:9d:d0:4f:6a:
         81:ff:c7:df:d2:45:40:8a:88:24:32:d6:51:27:84:52:6d:6b:
         30:22:45:3a:db:68:fb:42:c6:00:ba:4d:27:06:35:ec:56:15:
         fa:5a:54:90:07:10:d7:c2:9a:5d:ac:51:50:23:3f:da:c1:cf:
         db:e9:0a:c2:4b:7d:39:24:1e:21:4e:7a:fb:d9:38:90:ad:03:
         46:5a:c2:9d:9f:3d:d4:a2:71:19:ec:6e:1d:23:c2:70:11:53:
         9a:9d:2c:c5:0c:f6:9b:2d:c1:fc:af:ea:e3:c2:15:36:28:52:
         f0:4f:50:3e:40:b4:6f:d1:79:2d:6e:92:f6:0c:7e:2f:a8:fd:
         01:be:99:0a:4d:18:6a:e3:07:88:58:1f:d4:88:67:07:44:7a:
         c7:f7:aa:7a:e3:ac:53:66:23:37:ed:81:54:90:51:c6:46:f4:
         27:d0:a5:05:87:64:11:d7:5b:d0:6a:20:66:f1:29:4a:a2:be:
         12:3c:6e:af:48:e3:2e:04:14:0d:47:16:8f:6b:c9:8c:0c:58:
         b9:8d:0c:08:48:33:70:a0:62:34:ef:c8:36:9c:ad:c0:d5:d0:
         8e:9d:72:63:7a:91:9d:16:7d:af:58:e9:c6:15:a1:f3:f3:ee:
         96:b4:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org