Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IgochNLL9AlCSlrroRYHotyZEVk.roa
File:                     IgochNLL9AlCSlrroRYHotyZEVk.roa (raw, json)
Hash identifier:          Qaign4TNL82a51Hih9NtRUNfdmi1fVYdGhqZGcTTTz8=
Subject key identifier:   22:0A:1C:84:D2:CB:F4:09:42:4A:5A:EB:A1:16:07:A2:DC:99:11:59
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0370
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IgochNLL9AlCSlrroRYHotyZEVk.roa
Signing time:             Thu 01 Jun 2023 17:57:30 +0000
ROA not before:           Thu 01 Jun 2023 17:57:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=220A1C84D2CBF409424A5AEBA11607A2DC991159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:f4:a1:b2:48:6f:09:13:2a:e6:07:fc:2e:
                    c4:31:27:cf:57:22:7a:66:ea:52:10:d3:06:2f:9f:
                    b9:a5:a7:14:25:c7:b6:98:7b:76:41:ce:cd:4b:18:
                    0a:6f:c7:98:26:6e:33:df:41:7f:59:fd:8f:7b:ae:
                    21:75:2e:41:da:16:83:20:58:c6:86:8a:88:4c:d0:
                    20:13:b7:6c:4e:94:d8:2e:b4:07:45:05:36:55:f4:
                    9b:d7:b0:bc:e8:76:c9:b6:73:f3:a7:6f:e9:d0:62:
                    7c:64:af:39:9c:69:59:ff:d6:99:14:33:06:b0:1e:
                    68:0b:56:8a:b2:1c:20:8f:70:34:a6:53:e8:e7:07:
                    2e:fc:0d:59:5d:dc:e6:f8:ad:fd:a6:0e:b9:8e:f8:
                    93:34:cc:ed:56:cd:16:38:f5:51:26:d0:19:9e:c1:
                    93:9b:c0:db:f2:b5:cf:c3:4b:c5:f4:05:c1:c2:93:
                    d0:33:ba:7f:96:25:d9:21:08:52:9f:99:a9:78:04:
                    2c:73:ad:6b:30:55:d0:a1:26:f0:d4:06:e5:c2:83:
                    12:2b:37:94:3d:eb:2e:27:d6:66:3a:54:dd:02:bf:
                    cb:2d:eb:b4:0e:21:91:67:79:3b:7a:c8:56:de:c0:
                    e1:7b:c7:e3:a1:d9:92:a7:1b:03:d0:da:41:7e:ff:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0A:1C:84:D2:CB:F4:09:42:4A:5A:EB:A1:16:07:A2:DC:99:11:59
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IgochNLL9AlCSlrroRYHotyZEVk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:03:79:e3:e9:a3:11:1a:23:8d:81:c6:3d:4d:97:d5:c3:
         f6:02:c4:78:fd:ef:89:1a:37:77:0d:8e:15:00:e7:b0:50:16:
         1e:fc:f0:0a:fd:46:8d:f1:03:12:3f:53:18:5f:03:8f:e0:a1:
         06:00:40:98:11:7e:33:e4:95:d9:b3:5d:1e:53:b4:0c:f3:43:
         93:54:81:6c:8e:d6:85:1d:b2:2c:9d:26:f2:fc:be:78:32:4b:
         ee:06:55:94:38:ef:cd:f1:37:d4:00:7c:75:ad:f7:6f:71:f8:
         5d:db:e0:ea:e3:ae:6f:d1:48:35:f7:22:76:b1:10:2a:76:0c:
         18:cc:5b:ab:4e:07:0f:35:94:ee:e2:1f:18:be:49:5c:e3:ec:
         8e:da:33:f9:0b:7b:d6:48:1f:9e:47:7f:7c:20:b3:f0:4e:de:
         0e:2b:9a:ed:77:7f:0a:1f:bf:bb:11:8c:10:30:2f:61:a9:3b:
         3a:5f:b6:a4:20:10:ef:c6:41:4c:2f:49:be:54:b2:3b:22:f9:
         99:91:f5:ea:27:c3:61:dc:aa:a0:de:96:d1:ae:0b:34:25:95:
         fa:c9:4e:d3:52:f8:00:ec:13:36:05:4d:d5:a4:5f:1b:ca:44:
         55:c0:5c:24:a6:87:5a:3b:27:29:5a:66:59:23:f0:bf:20:67:
         f2:c8:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org