Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FyeVfLQiBmuQ9FyHT3SGJ-BbTlo.roa
File:                     FyeVfLQiBmuQ9FyHT3SGJ-BbTlo.roa (raw, json)
Hash identifier:          tUQzskCBE4fy1Uj8gFBu/rZEroDja21PfClA0SisJFM=
Subject key identifier:   17:27:95:7C:B4:22:06:6B:90:F4:5C:87:4F:74:86:27:E0:5B:4E:5A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0308
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FyeVfLQiBmuQ9FyHT3SGJ-BbTlo.roa
Signing time:             Thu 01 Jun 2023 16:05:27 +0000
ROA not before:           Thu 01 Jun 2023 16:05:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1727957CB422066B90F45C874F748627E05B4E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:3f:0c:e0:1d:d5:f6:c2:5d:aa:8f:3b:50:
                    90:49:63:c7:27:c7:ac:26:a7:be:af:c7:d6:d8:49:
                    77:f7:c4:a1:89:3e:16:aa:5b:f8:3a:d0:5f:ad:15:
                    cf:cf:38:a8:73:a4:9d:32:a5:d2:55:6e:18:55:87:
                    f3:6e:f6:57:f9:14:e5:39:4a:e8:06:4d:5f:17:17:
                    5a:f2:ef:5b:98:bd:66:1b:f0:aa:0d:7d:99:e0:ac:
                    e7:d3:67:f1:cb:a5:11:16:9a:65:64:bf:55:b0:00:
                    70:0f:44:69:bb:2c:44:3a:3a:67:b9:3f:53:09:50:
                    5a:df:1f:e0:df:18:bb:55:7c:9b:13:3c:b2:c4:be:
                    cd:78:6d:06:b8:82:a5:e8:dc:c4:26:f9:56:fd:9f:
                    39:a9:50:b3:01:74:bc:60:97:70:03:73:36:26:65:
                    2b:74:5c:e5:54:81:18:de:ca:95:64:62:1f:b6:6a:
                    2c:f3:6b:70:2b:98:53:1d:c6:ed:d2:dc:61:fe:55:
                    6c:7f:c9:b6:94:08:2c:e0:70:7e:2a:f3:9c:ef:f5:
                    ae:c3:10:2e:c7:48:94:54:d7:41:0a:4b:35:c8:ad:
                    80:2c:62:f4:a4:83:30:6f:29:65:c6:53:c7:68:1f:
                    b2:9e:89:a6:4f:53:ce:f7:de:ab:d4:69:9f:54:5e:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:27:95:7C:B4:22:06:6B:90:F4:5C:87:4F:74:86:27:E0:5B:4E:5A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FyeVfLQiBmuQ9FyHT3SGJ-BbTlo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:05:62:4a:41:7e:f4:04:89:74:cc:05:60:37:97:01:9c:6d:
         65:82:ec:5a:c6:5b:d4:0e:0d:4c:54:a5:72:cb:2b:68:c0:f8:
         02:9d:24:3c:02:5a:54:53:3a:d4:97:d5:11:6c:c4:1d:cb:19:
         ad:89:de:b7:fe:b8:33:cd:66:fd:ab:20:1a:04:d7:76:aa:57:
         58:d2:9d:5d:0f:34:71:85:b0:28:90:4b:58:8d:7b:fa:4a:22:
         9f:40:e8:45:44:d3:6b:67:7c:eb:fe:6d:a6:b4:e1:57:fe:42:
         8c:37:21:9c:26:03:74:cc:c2:1e:b0:be:fd:7d:7c:5f:59:b7:
         bb:3d:52:9a:c2:37:d2:87:a1:e2:e4:9f:44:2f:7c:29:6c:1c:
         84:15:30:94:13:3c:ed:2a:04:ba:d1:4d:64:98:8b:a7:2e:15:
         14:3a:e3:56:40:a5:7e:14:ce:a7:c2:48:e4:25:66:b6:44:bd:
         a0:05:54:0c:a3:3d:3f:dc:79:b5:33:43:bf:0e:17:06:1d:c6:
         13:f5:9c:71:92:8a:21:b3:a0:c6:24:69:48:cb:02:fe:ff:bb:
         3b:c8:66:56:58:6d:8c:f7:78:bc:f5:ad:ae:22:09:23:2e:6a:
         d7:e6:71:99:4f:c3:64:1a:8f:b0:b8:97:a4:13:df:d1:20:3c:
         da:10:7a:e6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA1MjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDE3Mjc5NTdDQjQyMjA2
NkI5MEY0NUM4NzRGNzQ4NjI3RTA1QjRFNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnTT8M4B3V9sJdqo87UJBJY8cnx6wmp76vx9bYSXf3xKGJPhaq
W/g60F+tFc/POKhzpJ0ypdJVbhhVh/Nu9lf5FOU5SugGTV8XF1ry71uYvWYb8KoN
fZngrOfTZ/HLpREWmmVkv1WwAHAPRGm7LEQ6Ome5P1MJUFrfH+DfGLtVfJsTPLLE
vs14bQa4gqXo3MQm+Vb9nzmpULMBdLxgl3ADczYmZSt0XOVUgRjeypVkYh+2aizz
a3ArmFMdxu3S3GH+VWx/ybaUCCzgcH4q85zv9a7DEC7HSJRU10EKSzXIrYAsYvSk
gzBvKWXGU8doH7KeiaZPU8733qvUaZ9UXgEBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUFyeVfLQiBmuQ9FyHT3SGJ+BbTlowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0Z5ZVZmTFFpQm11UTlGeUhUM1NHSi1CYlRsby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYiMwDQYJKoZIhvcNAQELBQADggEBAKYFYkpBfvQEiXTMBWA3lwGcbWWC
7FrGW9QODUxUpXLLK2jA+AKdJDwCWlRTOtSX1RFsxB3LGa2J3rf+uDPNZv2rIBoE
13aqV1jSnV0PNHGFsCiQS1iNe/pKIp9A6EVE02tnfOv+baa04Vf+Qow3IZwmA3TM
wh6wvv19fF9Zt7s9UprCN9KHoeLkn0QvfClsHIQVMJQTPO0qBLrRTWSYi6cuFRQ6
41ZApX4UzqfCSOQlZrZEvaAFVAyjPT/cebUzQ78OFwYdxhP1nHGSiiGzoMYkaUjL
Av7/uzvIZlZYbYz3eLz1ra4iCSMuatfmcZlPw2Qaj7C4l6QT39EgPNoQeuY=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org