Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFfHgVvRswVPVzlegEMsdIEsZP4.roa
File:                     CFfHgVvRswVPVzlegEMsdIEsZP4.roa (raw, json)
Hash identifier:          VCBcbg51uDqmFR7WiLjVeDSMRHfwfAqwuH/wfevXPMg=
Subject key identifier:   08:57:C7:81:5B:D1:B3:05:4F:57:39:5E:80:43:2C:74:81:2C:64:FE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       97
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFfHgVvRswVPVzlegEMsdIEsZP4.roa
Signing time:             Wed 29 Mar 2023 16:05:02 +0000
ROA not before:           Wed 29 Mar 2023 16:05:02 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:02 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0857C7815BD1B3054F57395E80432C74812C64FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:7b:36:57:d6:6f:95:4b:57:a6:fe:f4:09:
                    cd:78:ed:6a:17:c5:4a:28:a4:f4:34:97:41:0a:79:
                    15:9e:25:61:d1:5d:5c:2a:d7:93:45:9d:ea:ec:f3:
                    3a:07:e0:e3:08:b2:2d:7e:05:6d:ca:86:3f:60:ae:
                    76:cd:f4:7b:16:79:fb:b7:73:ee:76:65:22:f5:c9:
                    04:1d:7c:03:24:59:b3:35:61:3a:47:20:0d:38:52:
                    78:82:55:54:13:6b:0d:e0:59:df:6f:71:dc:cb:13:
                    6e:ae:5c:2c:da:88:5a:41:0d:6f:39:cf:b4:dc:1a:
                    0f:14:43:8e:88:9f:bb:4d:e5:17:06:9e:13:66:12:
                    62:f0:e4:ae:51:2d:43:59:1a:d3:fc:11:08:56:27:
                    30:38:4f:dd:46:77:25:15:b8:7e:77:d7:4c:9f:7c:
                    2a:36:28:a2:e2:64:c8:1a:e2:2c:97:28:b2:52:31:
                    6c:79:65:f5:70:cc:a9:dc:fb:51:e5:64:49:15:aa:
                    2e:fd:a0:52:35:cc:02:51:c6:cb:30:94:0f:50:67:
                    0f:b8:a3:ed:d2:96:be:72:74:7c:0d:1b:86:cc:e3:
                    28:26:6a:8f:65:48:d3:2b:33:3f:e1:c0:1b:a5:06:
                    41:9e:f4:bf:59:93:31:85:0a:9c:92:80:2f:89:6c:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:C7:81:5B:D1:B3:05:4F:57:39:5E:80:43:2C:74:81:2C:64:FE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CFfHgVvRswVPVzlegEMsdIEsZP4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:2a:a4:74:16:b2:7e:4f:20:64:79:39:03:86:65:12:30:
         a5:9c:66:a1:73:a2:04:27:b3:30:fa:af:63:dd:1c:0b:c3:04:
         66:d5:fe:64:4c:34:75:c1:87:b4:45:a3:63:b0:0a:96:2b:af:
         02:e1:1b:6c:1d:c0:60:73:f5:d6:f9:20:c7:15:62:2e:78:4c:
         1d:6a:3a:48:63:9b:5b:b4:f2:88:d1:28:5a:e7:ae:1d:1e:cf:
         65:aa:cb:1e:6d:aa:19:e1:2c:6d:78:77:b7:fe:3a:9b:9f:dd:
         47:f9:3d:00:22:30:18:7c:15:ba:91:6c:67:03:f3:e3:49:93:
         b4:1a:9c:c8:c2:8e:b6:19:88:60:8f:7f:84:0b:be:af:37:18:
         16:19:12:99:19:c3:34:e0:f6:31:19:66:a2:c8:04:15:35:99:
         2d:5d:af:32:fd:9b:18:17:23:f4:a9:3c:91:c7:40:0e:ae:88:
         51:b4:29:4d:64:fa:0c:a3:54:d7:fd:ec:ad:d2:5a:05:48:1c:
         23:1b:7f:3d:94:ea:1e:1c:66:59:82:e6:16:0d:e5:7e:ef:51:
         0d:d3:53:ce:5c:25:f6:6f:cd:de:e6:1b:90:cc:88:56:33:cc:
         7a:18:da:d9:5d:05:06:a7:49:94:d3:37:e8:55:ce:f0:13:76:
         6f:06:e2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org