Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GqsOzc13OE2efZR5QMS1TMQSfcQ.roa
File:                     GqsOzc13OE2efZR5QMS1TMQSfcQ.roa (raw, json)
Hash identifier:          KANencdwZup1gNzCtvsjgt0taLuAMcgEs6M5B/nW8OQ=
Subject key identifier:   1A:AB:0E:CD:CD:77:38:4D:9E:7D:94:79:40:C4:B5:4C:C4:12:7D:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0434
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GqsOzc13OE2efZR5QMS1TMQSfcQ.roa
Signing time:             Tue 06 Jun 2023 16:09:12 +0000
ROA not before:           Tue 06 Jun 2023 16:09:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:09:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1AAB0ECDCD77384D9E7D947940C4B54CC4127DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:18:a6:00:eb:23:67:ae:39:37:b1:bb:d1:
                    d6:f7:15:e7:d2:da:0b:a6:ee:36:66:82:8b:fd:7d:
                    67:a9:d0:bf:d8:1e:3a:7c:dc:e1:2c:c7:2c:7d:8d:
                    b6:59:2d:69:42:a1:77:47:73:c0:1c:11:30:b9:5b:
                    a3:49:9d:23:46:e2:7e:35:bd:73:d6:7f:94:4e:d4:
                    ad:1e:74:8a:03:7d:05:a1:fb:55:9f:7f:19:70:c5:
                    b0:65:9e:35:30:9c:7b:56:5c:6d:2c:98:ab:9c:89:
                    fb:ff:c1:d9:b3:52:dc:ee:bf:35:ed:17:7d:66:fe:
                    b1:1a:ad:74:8f:d2:cf:e7:b1:ca:a5:aa:c2:cb:d9:
                    e2:a5:b0:bd:80:48:7c:84:dd:29:25:e2:15:93:ee:
                    47:fe:92:c0:90:33:2e:6b:f1:e3:3f:52:c7:3f:74:
                    26:26:99:2d:5c:cb:f7:f4:03:8a:be:7c:36:1b:63:
                    68:ea:74:f5:81:be:da:54:17:ac:e4:d7:e9:a0:d2:
                    9c:d3:ac:85:5f:78:a1:ae:5b:da:04:c4:9f:af:bd:
                    6d:01:ae:e7:24:bd:db:b2:2e:f8:05:c4:a2:16:cf:
                    b3:2f:27:79:db:20:4a:92:3a:6d:db:07:9c:eb:3e:
                    70:25:2f:4d:0f:4b:c9:14:85:8c:68:a8:35:97:c4:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:0E:CD:CD:77:38:4D:9E:7D:94:79:40:C4:B5:4C:C4:12:7D:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GqsOzc13OE2efZR5QMS1TMQSfcQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:da:3e:88:50:da:5b:15:59:f3:db:e1:0b:12:0c:2d:81:7e:
         73:35:a6:ad:42:2c:2a:1b:46:12:a4:ec:f5:af:ac:52:ac:52:
         f0:95:28:94:55:f8:7d:e8:6f:9c:6f:bf:d5:fc:e8:07:8d:33:
         04:be:cb:70:bd:9c:ba:44:ae:9d:95:d9:6d:69:e2:9d:76:1e:
         a7:a3:27:fc:e6:21:f6:5d:9d:cf:ba:92:4c:d7:63:a0:94:26:
         83:da:83:52:9f:0d:38:b7:e0:41:12:4c:8d:c0:3f:37:0e:af:
         b2:8e:df:44:08:a8:3d:58:b3:cb:ba:03:bb:25:fd:a6:69:f6:
         a6:0a:1e:e1:e5:62:3c:34:7d:71:37:e3:47:46:cd:9a:2a:26:
         b9:4f:3d:a0:15:7e:94:c4:48:27:aa:5c:65:83:cc:26:1f:65:
         fc:e3:8f:7d:8e:7d:4e:00:b1:53:11:29:df:56:c0:50:70:1f:
         ec:44:cb:5a:16:20:3f:e0:b7:ea:6d:3c:26:79:43:31:f7:b9:
         ff:0e:f8:32:46:c4:0a:20:33:bd:17:09:80:56:8a:cb:b4:71:
         8a:fe:61:7b:e0:f3:6c:89:bb:40:b3:80:92:00:de:eb:ba:b5:
         2d:e7:4b:54:48:fc:e2:63:f5:e5:2a:83:7c:6a:89:ab:21:ca:
         20:c0:b1:e2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjA5MTJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFBQUIwRUNEQ0Q3NzM4
NEQ5RTdEOTQ3OTQwQzRCNTRDQzQxMjdEQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz7ximAOsjZ645N7G70db3FefS2gum7jZmgov9fWep0L/YHjp8
3OEsxyx9jbZZLWlCoXdHc8AcETC5W6NJnSNG4n41vXPWf5RO1K0edIoDfQWh+1Wf
fxlwxbBlnjUwnHtWXG0smKucifv/wdmzUtzuvzXtF31m/rEarXSP0s/nscqlqsLL
2eKlsL2ASHyE3Skl4hWT7kf+ksCQMy5r8eM/Usc/dCYmmS1cy/f0A4q+fDYbY2jq
dPWBvtpUF6zk1+mg0pzTrIVfeKGuW9oExJ+vvW0BruckvduyLvgFxKIWz7MvJ3nb
IEqSOm3bB5zrPnAlL00PS8kUhYxoqDWXxLPtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGqsOzc13OE2efZR5QMS1TMQSfcQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0dxc096YzEzT0UyZWZaUjVRTVMxVE1RU2ZjUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaBwwDQYJKoZIhvcNAQELBQADggEBACjaPohQ2lsVWfPb4QsSDC2BfnM1
pq1CLCobRhKk7PWvrFKsUvCVKJRV+H3ob5xvv9X86AeNMwS+y3C9nLpErp2V2W1p
4p12HqejJ/zmIfZdnc+6kkzXY6CUJoPag1KfDTi34EESTI3APzcOr7KO30QIqD1Y
s8u6A7sl/aZp9qYKHuHlYjw0fXE340dGzZoqJrlPPaAVfpTESCeqXGWDzCYfZfzj
j32OfU4AsVMRKd9WwFBwH+xEy1oWID/gt+ptPCZ5QzH3uf8O+DJGxAogM70XCYBW
isu0cYr+YXvg82yJu0CzgJIA3uu6tS3nS1RI/OJj9eUqg3xqiashyiDAseI=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org