Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/K6BlBcHecEpMWUtmdxrUK8qcz78.roa
File:                     K6BlBcHecEpMWUtmdxrUK8qcz78.roa (raw, json)
Hash identifier:          6BE2mXJTG4K1r13FM5dO11n/lmgvvQ7R4hFwZJ/AfuM=
Subject key identifier:   2B:A0:65:05:C1:DE:70:4A:4C:59:4B:66:77:1A:D4:2B:CA:9C:CF:BF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0421
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K6BlBcHecEpMWUtmdxrUK8qcz78.roa
Signing time:             Tue 06 Jun 2023 16:09:04 +0000
ROA not before:           Tue 06 Jun 2023 16:09:04 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.48.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:09:04 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2BA06505C1DE704A4C594B66771AD42BCA9CCFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:81:9c:21:2d:2c:25:c4:99:70:cd:63:ad:
                    54:bc:e1:c1:d6:2c:ef:09:cd:da:eb:67:df:11:e5:
                    f3:1a:98:77:9b:a7:05:19:1d:61:86:ba:56:8c:1d:
                    6c:76:87:7a:3c:bb:bf:88:29:dc:4b:8c:eb:4f:10:
                    a0:2a:4c:68:31:ca:d2:51:5a:6c:22:4a:58:c3:46:
                    49:b9:43:77:57:6f:ab:23:e3:77:93:e1:f4:c1:53:
                    e8:e8:2b:25:1c:59:eb:4a:f8:8a:8a:52:88:16:1b:
                    fa:db:56:67:80:f8:71:b1:29:2f:8c:d0:52:22:37:
                    3e:97:3e:ba:d0:81:a6:e5:2d:8c:68:ff:9e:3f:58:
                    af:00:e4:fc:4a:70:d6:54:e8:24:5a:e5:54:18:66:
                    d0:36:c5:df:ac:03:b9:82:8c:39:91:45:ca:29:ff:
                    b9:89:ca:9b:8a:45:b1:2f:bd:ca:37:f0:45:ef:3e:
                    7f:37:f0:1d:a6:59:2a:16:5e:f6:d4:bb:47:c4:b8:
                    21:80:66:dd:b6:f7:2d:40:68:f7:c3:27:22:ea:e0:
                    59:7d:08:8d:44:7c:90:79:b1:6f:db:93:eb:56:dc:
                    d0:3b:bb:74:9c:dc:7e:30:36:37:fb:f8:fa:f2:02:
                    85:68:8d:dd:b8:db:14:59:57:88:ca:d3:71:1e:bf:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A0:65:05:C1:DE:70:4A:4C:59:4B:66:77:1A:D4:2B:CA:9C:CF:BF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/K6BlBcHecEpMWUtmdxrUK8qcz78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:ba:2d:eb:e9:d0:9c:c0:bc:8a:fb:ec:a2:eb:15:78:ab:ec:
         cc:34:97:b7:79:37:a7:25:15:80:e9:19:c8:8e:f7:a4:dd:d4:
         89:d8:b9:cd:65:f4:03:22:b8:79:df:03:2d:5e:21:f7:02:28:
         e2:a9:f0:36:90:b3:7e:d1:4c:1e:de:c1:91:4d:b2:7c:82:08:
         d5:9b:c9:00:45:3f:cd:7e:82:9e:1b:29:13:d0:0c:73:ee:b8:
         ba:a6:45:25:28:5b:3a:bd:34:59:ec:08:4a:b4:ef:cd:a7:c0:
         ce:8b:14:12:1f:f8:91:77:8b:d8:d7:e0:06:4c:82:86:7f:47:
         3f:b1:36:72:3b:ec:a0:e0:ca:49:c2:61:3b:f5:27:e1:3a:2c:
         36:e8:7f:eb:63:23:7d:50:4b:aa:9d:4c:6f:21:dc:b1:f4:de:
         e0:51:7b:03:f6:3c:e3:05:28:dd:b4:ba:af:a7:fa:4a:a1:30:
         84:4f:46:ab:eb:4f:f3:62:b2:ee:de:3b:3a:29:b2:72:e1:30:
         e8:a2:4e:8e:d1:74:2c:83:7d:67:80:e0:1d:a5:08:72:f4:be:
         73:bf:ec:e8:01:9d:33:a7:11:8f:1a:c1:77:2f:43:7b:13:56:
         30:21:b6:1f:7f:4c:ea:5b:be:70:bd:6c:74:7a:08:b1:5a:82:
         d9:55:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org