Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C3n_95r7DfYRc75ljvoIQJB11Cw.roa
File:                     C3n_95r7DfYRc75ljvoIQJB11Cw.roa (raw, json)
Hash identifier:          IUzFChiDA2OlUJjRTvYKj481E17p4ikAcoj5Nvp5Wcs=
Subject key identifier:   0B:79:FF:F7:9A:FB:0D:F6:11:73:BE:65:8E:FA:08:40:90:75:D4:2C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       7A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C3n_95r7DfYRc75ljvoIQJB11Cw.roa
Signing time:             Mon 27 Mar 2023 16:12:00 +0000
ROA not before:           Mon 27 Mar 2023 16:12:00 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.96.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:12:00 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0B79FFF79AFB0DF61173BE658EFA08409075D42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:93:97:3b:ca:eb:64:84:14:5a:fa:15:c6:
                    c8:4a:e5:bd:ee:cf:2e:b2:99:79:93:67:9a:9d:67:
                    14:5c:3f:dd:e7:a5:7b:88:8d:2d:e3:ec:a9:d6:03:
                    c8:9a:6d:11:cd:55:48:c2:96:01:1e:94:47:40:e6:
                    df:7c:e1:9e:8d:be:3f:42:27:47:37:b1:d9:d9:58:
                    a8:04:5b:1e:0a:08:96:0b:20:0c:bb:a5:d5:73:b2:
                    91:a5:7e:6b:21:ed:ba:ff:dd:52:9e:e4:7f:d5:90:
                    23:9f:60:35:e9:77:b4:08:67:d0:c0:15:61:11:89:
                    39:19:41:2e:85:ee:3b:57:67:cb:cc:f2:e7:f4:51:
                    f1:fc:85:4a:4f:d2:58:46:d1:e0:25:60:61:b9:b3:
                    06:86:b1:5b:c8:fa:d8:8c:18:7a:04:8a:9d:6e:fd:
                    3e:6c:90:4d:ab:2a:47:52:ea:0e:c2:48:2f:f5:bb:
                    34:23:41:50:16:e6:b6:63:d0:04:1c:c2:f4:0e:0c:
                    4a:9e:83:eb:59:67:4c:75:7e:2f:00:52:63:a9:16:
                    fb:b3:0c:09:a3:74:2e:42:eb:59:3a:32:b3:d9:c5:
                    f4:30:5a:48:d9:f7:37:a0:c7:38:e7:36:c5:c5:40:
                    52:ef:2a:c8:8e:e8:ae:47:7a:b1:da:70:59:16:cf:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:FF:F7:9A:FB:0D:F6:11:73:BE:65:8E:FA:08:40:90:75:D4:2C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C3n_95r7DfYRc75ljvoIQJB11Cw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:68:4d:05:4b:fb:f0:d6:cb:16:bb:f7:b2:43:11:cd:12:
         5f:05:15:fa:c4:ce:04:aa:ac:2f:2d:83:4f:fc:ac:10:83:c5:
         82:1d:2c:39:c8:db:fd:05:00:b2:5f:28:66:01:40:3e:1f:d3:
         03:af:07:4b:ba:fc:8e:15:6d:3a:73:5e:0e:c2:01:12:59:0e:
         17:b3:8e:62:98:aa:e2:1a:3d:d3:ae:d2:b3:7e:a7:98:dc:9f:
         6b:b0:2f:11:76:f6:45:dd:fe:40:a4:8e:8b:0d:7c:50:ad:6c:
         15:82:a8:30:7b:8c:a7:c6:4b:67:b4:38:c0:1c:b9:06:d3:78:
         43:0c:d1:7f:65:b2:69:39:79:dd:22:15:97:45:b9:8b:33:b2:
         77:98:9a:a8:4c:c1:df:1c:0a:03:8e:73:ae:12:35:32:bd:0d:
         11:16:8d:79:8c:58:36:45:d4:97:bd:f2:1f:59:28:1b:34:3e:
         95:fe:b4:11:ac:47:40:b1:c0:65:15:05:3e:2d:06:d7:84:82:
         9e:ec:6b:d7:fa:b3:68:90:e6:bf:56:27:d8:4d:43:f8:7d:56:
         81:ca:13:21:ff:00:4a:e8:39:87:6c:bc:f1:8a:c4:ce:ba:38:
         37:6d:16:ff:52:ea:b0:10:5b:9b:1b:95:94:56:a0:a3:32:4e:
         9c:6f:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org