Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IwbLpPY5kL2O6j_6Xt0TgK5D6Ko.roa
File:                     IwbLpPY5kL2O6j_6Xt0TgK5D6Ko.roa (raw, json)
Hash identifier:          NTnEBHQDiCrbN8m6gpQ0nQ5DYj/mb1majPPtbBPiVvc=
Subject key identifier:   23:06:CB:A4:F6:39:90:BD:8E:EA:3F:FA:5E:DD:13:80:AE:43:E8:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       A3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IwbLpPY5kL2O6j_6Xt0TgK5D6Ko.roa
Signing time:             Wed 29 Mar 2023 16:05:47 +0000
ROA not before:           Wed 29 Mar 2023 16:05:47 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:47 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2306CBA4F63990BD8EEA3FFA5EDD1380AE43E8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:27:86:bf:4e:df:b9:76:f1:10:fd:be:87:
                    7d:a8:b0:0a:14:8c:62:6a:b7:55:d8:bf:58:57:3b:
                    4a:ab:98:3a:5f:cc:87:ec:67:50:52:35:5d:a6:96:
                    e2:6d:0c:22:ba:6b:ac:e0:32:b7:07:82:19:b4:51:
                    ce:0d:01:36:f9:c2:de:be:7b:da:d5:00:b5:3b:a7:
                    0f:f6:d3:4d:b9:ba:c2:50:ce:cd:35:58:dd:71:8d:
                    1d:31:d6:c8:8e:a9:f0:4b:f8:88:f6:ce:a3:cc:f1:
                    40:7d:f6:ab:94:70:9f:8a:1c:13:1b:d5:a4:b9:31:
                    ae:88:a9:8e:51:70:fc:cf:7c:db:5d:c0:52:b5:9e:
                    6e:28:fa:15:b8:47:91:83:32:3a:0d:b1:ca:b3:0d:
                    a5:91:83:86:7e:96:21:dd:df:ce:0a:96:0d:22:6e:
                    89:37:42:32:15:84:bd:e7:58:7e:b0:00:9a:99:3f:
                    7e:dd:c7:58:84:8d:94:39:ad:48:2e:c0:a2:d2:a9:
                    ee:e6:cd:da:72:0c:79:4d:7d:69:3b:df:5c:9a:6c:
                    85:83:5c:38:d4:37:0f:72:01:53:58:df:40:9b:24:
                    49:3f:0b:41:8a:29:60:f9:ac:eb:de:52:d1:b8:b8:
                    ef:f0:21:bd:e7:4a:63:c8:28:db:23:f5:c1:d1:03:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:06:CB:A4:F6:39:90:BD:8E:EA:3F:FA:5E:DD:13:80:AE:43:E8:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IwbLpPY5kL2O6j_6Xt0TgK5D6Ko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:a4:76:49:1e:7d:73:25:c8:20:1d:e4:19:d4:c4:29:c6:c0:
         39:cf:f3:86:41:ab:3a:40:5a:2d:63:25:f4:04:32:fb:14:16:
         20:60:18:6d:cb:30:07:a4:0a:18:66:21:3c:b1:35:17:b8:29:
         db:39:34:3c:98:24:98:e1:64:e8:66:31:62:52:83:d6:bd:52:
         fc:b1:7a:34:7a:b5:28:9d:c9:83:e0:b9:41:d1:35:2a:31:0b:
         9c:a9:39:45:9c:74:25:12:de:75:20:6f:a7:89:d8:ad:ed:fc:
         d3:fe:bc:40:af:cd:54:4d:02:6f:30:85:c5:23:18:83:b3:0b:
         48:c6:e8:0b:af:58:35:eb:2f:b3:34:a6:8d:74:1f:a6:2f:7c:
         4c:ea:0e:c1:90:53:75:2a:ce:cf:e5:5e:41:2a:48:7c:c2:71:
         b8:f8:77:ca:2e:1d:a1:98:14:ec:5d:31:0e:c7:e1:3d:fa:31:
         85:cc:8f:b9:da:df:c5:78:b0:b6:51:e7:ba:77:c8:cf:67:1d:
         d1:74:af:fd:88:dc:21:07:da:4d:c2:fa:48:66:e1:7f:b7:53:
         aa:3d:e9:6d:72:e6:e1:09:37:da:66:09:c8:25:ed:d3:b3:b8:
         4c:a9:bf:d2:00:a6:ad:39:92:b0:f6:f1:9a:c3:fa:a9:5f:56:
         aa:f9:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org