Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GLYgtDF7i2gWth8YVDbrgRi1r4k.roa
File:                     GLYgtDF7i2gWth8YVDbrgRi1r4k.roa (raw, json)
Hash identifier:          eECXllwBTVICJhqm3ykXOb+zGkM4Ee0kOB3pVW6drFo=
Subject key identifier:   18:B6:20:B4:31:7B:8B:68:16:B6:1F:18:54:36:EB:81:18:B5:AF:89
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GLYgtDF7i2gWth8YVDbrgRi1r4k.roa
Signing time:             Thu 01 Jun 2023 17:59:31 +0000
ROA not before:           Thu 01 Jun 2023 17:59:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:59:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=18B620B4317B8B6816B61F185436EB8118B5AF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:cb:ed:8d:74:28:a1:84:8c:a9:8e:79:66:
                    4e:e1:9e:58:9c:71:52:b2:4e:73:da:eb:a2:23:b3:
                    2a:31:4a:9d:09:11:43:0a:89:78:e5:6e:87:5c:e0:
                    b8:d1:b2:c0:6b:f2:7a:de:56:79:53:bb:d0:71:70:
                    d6:b2:b3:f6:0e:9b:64:07:ca:92:1c:24:d8:b1:e6:
                    d3:51:24:ab:37:36:86:89:bd:8a:0c:b0:90:b0:9b:
                    55:b5:2d:8e:48:eb:2e:7a:cb:eb:9a:af:18:aa:16:
                    41:ec:ae:7e:90:35:62:ff:57:a4:92:52:2c:74:55:
                    d5:97:6e:eb:19:a1:6e:3c:45:81:ef:40:d4:e9:0f:
                    e5:1d:1c:24:17:62:43:83:66:cd:a6:54:4b:ba:f0:
                    9b:1d:ee:70:73:4d:10:93:5f:40:dd:2a:50:ba:7a:
                    4f:b5:ee:8f:63:a4:44:f4:34:31:7e:32:2b:5c:94:
                    e0:dc:35:7a:88:73:12:2c:e8:4f:37:df:ed:6c:9e:
                    b9:07:74:54:19:be:d8:a2:4c:f2:68:cb:52:f9:06:
                    f3:c4:7b:8c:86:e5:0f:3e:d5:b2:68:fd:1f:4b:69:
                    0d:8d:7b:9b:cc:5f:02:28:2a:0c:08:c5:b0:38:07:
                    4f:56:16:12:2a:fa:9f:8b:26:d3:77:c1:01:76:4c:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:20:B4:31:7B:8B:68:16:B6:1F:18:54:36:EB:81:18:B5:AF:89
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GLYgtDF7i2gWth8YVDbrgRi1r4k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:cc:19:7a:c5:83:a1:46:77:e2:55:ce:a7:06:72:c6:5d:45:
         5a:4c:c0:2d:c1:b8:7b:8e:8f:d6:55:a1:39:df:ce:0e:90:d8:
         0a:89:16:c6:99:0f:2b:57:b5:2c:f4:e4:76:35:8f:99:a1:02:
         4b:a1:bf:6c:aa:e3:de:6c:93:c4:ce:26:32:63:ac:e6:b1:0b:
         c1:fc:ed:59:46:8c:2b:04:86:12:cd:09:d6:9a:6c:9b:1b:42:
         46:49:4b:df:1a:49:14:08:34:17:e2:d7:a8:a1:6a:4c:f3:a1:
         39:d6:be:65:13:5b:2d:ab:d7:0c:aa:de:ea:05:68:d9:ed:f7:
         a8:af:27:be:73:1d:c7:51:a2:54:e2:1e:b3:f4:f3:c2:84:8c:
         61:8b:94:b2:e7:2f:26:ea:2f:e0:3f:34:f7:66:c3:e3:c6:e9:
         ce:0a:10:20:e1:81:41:b5:d5:d9:5d:6e:6c:3a:5d:1e:6e:d8:
         83:ec:b1:4b:47:1e:08:a6:f2:6b:46:47:87:c6:21:26:4c:a7:
         8f:be:b2:84:9c:d8:a5:65:09:f3:0d:27:05:a7:72:79:18:75:
         48:d8:5d:d1:53:ab:f2:dc:68:70:fc:e3:9f:d1:4e:5f:cc:17:
         ff:fb:87:75:37:8e:ba:59:87:46:dc:9f:cb:b3:1b:dd:60:44:
         ce:c0:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org