Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KijAievGzI_Pf2bUxfV4q6E9TSg.roa
File:                     KijAievGzI_Pf2bUxfV4q6E9TSg.roa (raw, json)
Hash identifier:          oRGbPcmsSWZ4teoJm77BATKBUeheBGEb8v0cusOGtlI=
Subject key identifier:   2A:28:C0:89:EB:C6:CC:8F:CF:7F:66:D4:C5:F5:78:AB:A1:3D:4D:28
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0337
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KijAievGzI_Pf2bUxfV4q6E9TSg.roa
Signing time:             Thu 01 Jun 2023 16:07:34 +0000
ROA not before:           Thu 01 Jun 2023 16:07:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.66.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:07:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2A28C089EBC6CC8FCF7F66D4C5F578ABA13D4D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:f2:cf:ee:b9:47:31:3b:aa:bc:42:72:fe:
                    89:f4:90:66:2f:d2:35:af:ab:4b:59:bf:f1:fa:1a:
                    70:2a:ea:fd:60:bf:93:a9:c2:4e:7e:e4:9a:9b:b6:
                    29:77:d0:07:c0:5e:9d:11:30:c0:38:4c:e0:82:9a:
                    8b:29:66:f8:b6:39:df:05:2d:ce:30:14:e9:b6:03:
                    d9:36:ec:a1:67:5a:9b:ab:28:96:54:a9:73:aa:f0:
                    1e:60:65:fb:33:9f:65:8a:90:82:6c:23:50:2a:5f:
                    e7:bf:68:85:a8:4c:81:5e:2a:da:e8:dd:bf:52:86:
                    d1:34:6b:84:e7:db:f4:84:6a:6b:61:b0:06:ae:5e:
                    29:bf:b7:92:36:3f:fc:e0:ac:02:5e:40:dd:aa:ae:
                    00:3e:1c:2e:d1:48:86:cf:e5:1e:21:5a:72:ea:92:
                    72:59:c4:99:ed:13:77:f9:77:6d:cd:76:4c:1a:cf:
                    da:eb:fa:7d:6f:50:59:3c:2a:88:80:cd:c6:7a:94:
                    c6:18:a5:cd:59:28:87:56:8d:68:2c:14:33:fc:60:
                    71:05:56:79:90:9e:f1:10:af:11:63:69:ce:96:62:
                    e9:a1:f3:76:c2:82:d4:8d:16:3f:3d:d1:99:cf:74:
                    e0:e8:72:69:bc:30:7c:1e:20:2c:8d:2f:4f:1e:4d:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:C0:89:EB:C6:CC:8F:CF:7F:66:D4:C5:F5:78:AB:A1:3D:4D:28
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KijAievGzI_Pf2bUxfV4q6E9TSg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:a1:8f:7e:f2:e4:db:f1:67:c1:fc:2d:ee:2a:53:69:bd:
         05:da:e2:4d:4c:52:54:d7:42:ae:ba:16:5b:8a:57:84:70:75:
         c4:8a:9e:6d:46:f0:85:99:b8:32:19:0e:8e:34:51:dd:1d:70:
         37:a0:68:54:82:2f:5d:81:b0:59:2c:a4:0d:7a:38:83:0a:e1:
         80:a8:75:22:b2:a4:6e:cf:df:f2:8e:c2:07:94:a1:fb:93:c0:
         21:f4:0c:99:bb:5f:6b:2e:ee:b7:6d:ed:e4:74:61:16:8b:6b:
         b8:7b:65:b7:d0:a8:b0:6f:4a:99:05:a1:06:71:69:c3:fe:e5:
         cf:1b:7a:2f:53:df:77:6d:57:40:be:1c:3f:98:ae:ce:ff:39:
         b1:d7:3c:d7:29:67:3c:2d:eb:4f:92:ad:f0:9e:bd:3d:92:ed:
         00:51:4b:2e:0b:8c:4e:74:76:a8:28:d7:ad:7a:7e:15:81:c1:
         9e:bd:ed:d3:6c:84:6e:33:cc:39:53:8e:37:fc:49:d0:5c:8a:
         12:62:36:02:2a:12:a2:cd:bb:c1:e2:52:b7:b0:f4:9d:0f:21:
         aa:2d:f4:39:f7:40:8d:cb:3e:30:e3:14:da:2d:fc:11:de:eb:
         e9:ca:0b:49:d8:59:48:0d:3c:8d:f3:98:54:21:de:dc:3d:98:
         73:33:d6:89
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA3MzRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJBMjhDMDg5RUJDNkND
OEZDRjdGNjZENEM1RjU3OEFCQTEzRDREMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK6/LP7rlHMTuqvEJy/on0kGYv0jWvq0tZv/H6GnAq6v1gv5Op
wk5+5Jqbtil30AfAXp0RMMA4TOCCmospZvi2Od8FLc4wFOm2A9k27KFnWpurKJZU
qXOq8B5gZfszn2WKkIJsI1AqX+e/aIWoTIFeKtro3b9ShtE0a4Tn2/SEamthsAau
Xim/t5I2P/zgrAJeQN2qrgA+HC7RSIbP5R4hWnLqknJZxJntE3f5d23Ndkwaz9rr
+n1vUFk8KoiAzcZ6lMYYpc1ZKIdWjWgsFDP8YHEFVnmQnvEQrxFjac6WYumh83bC
gtSNFj890ZnPdODocmm8MHweICyNL08eTaMrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKijAievGzI/Pf2bUxfV4q6E9TSgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0tpakFpZXZHeklfUGYyYlV4ZlY0cTZFOVRTZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYkIwDQYJKoZIhvcNAQELBQADggEBAD2SoY9+8uTb8WfB/C3uKlNpvQXa
4k1MUlTXQq66FluKV4RwdcSKnm1G8IWZuDIZDo40Ud0dcDegaFSCL12BsFkspA16
OIMK4YCodSKypG7P3/KOwgeUofuTwCH0DJm7X2su7rdt7eR0YRaLa7h7ZbfQqLBv
SpkFoQZxacP+5c8bei9T33dtV0C+HD+Yrs7/ObHXPNcpZzwt60+SrfCevT2S7QBR
Sy4LjE50dqgo1616fhWBwZ697dNshG4zzDlTjjf8SdBcihJiNgIqEqLNu8HiUrew
9J0PIaot9Dn3QI3LPjDjFNot/BHe6+nKC0nYWUgNPI3zmFQh3tw9mHMz1ok=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org