Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LgjyfGpH14MdXEFPjyKaRtV34Kw.roa
File:                     LgjyfGpH14MdXEFPjyKaRtV34Kw.roa (raw, json)
Hash identifier:          FmnjMh8Pe0mXSKDNCHB/uG+oDWFmTUaviZqo/IB4tZ4=
Subject key identifier:   2E:08:F2:7C:6A:47:D7:83:1D:5C:41:4F:8F:22:9A:46:D5:77:E0:AC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       030B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LgjyfGpH14MdXEFPjyKaRtV34Kw.roa
Signing time:             Thu 01 Jun 2023 16:05:28 +0000
ROA not before:           Thu 01 Jun 2023 16:05:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.10.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2E08F27C6A47D7831D5C414F8F229A46D577E0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:f6:c9:61:39:2f:2c:bf:8e:c8:fa:6a:2c:
                    df:91:76:57:21:e8:10:cc:66:f3:4f:87:80:ba:71:
                    c6:32:19:5c:75:39:44:47:03:3c:7c:46:7d:ed:d0:
                    d8:4c:f2:88:30:f1:f5:fd:29:06:47:66:48:79:45:
                    23:54:0a:92:a3:3d:8a:ab:de:7f:91:d7:fa:88:cf:
                    0b:da:01:2f:13:b8:64:85:d0:42:3f:8f:82:4e:c5:
                    c4:a5:29:86:43:e1:64:78:a9:51:1d:23:4b:2e:10:
                    9d:bf:eb:e6:eb:6d:99:f7:82:4d:13:91:c1:37:a9:
                    15:9f:04:b0:53:01:e1:d3:6a:ac:ad:f2:2a:9d:40:
                    9b:0f:d1:1f:c5:33:e8:3d:d8:c8:dd:80:df:64:a6:
                    bf:ab:e1:27:a2:29:fe:18:df:76:20:a7:2d:f2:dd:
                    6d:64:b1:d5:ec:6c:1f:85:c0:dc:e3:cb:4d:0a:1c:
                    0a:27:a2:e9:d1:b1:87:3c:45:5d:06:39:89:2b:73:
                    ef:42:75:e5:ec:2b:cc:4b:7a:28:04:cd:37:64:0a:
                    a9:75:26:77:e4:b0:84:c3:46:49:4f:dc:2c:2f:b8:
                    40:30:4a:76:72:32:4b:7e:f7:90:dd:9c:53:02:01:
                    e6:b6:4b:a1:a3:c2:45:2b:ae:ed:24:1a:4e:6c:e8:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:08:F2:7C:6A:47:D7:83:1D:5C:41:4F:8F:22:9A:46:D5:77:E0:AC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LgjyfGpH14MdXEFPjyKaRtV34Kw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:7b:57:a0:89:aa:9a:f9:52:f5:90:31:51:ef:56:16:6b:
         d5:ae:f9:33:91:ae:a5:d3:25:ce:01:ab:47:ab:74:3d:7e:57:
         a8:dd:f4:31:bd:93:ba:8b:79:27:56:16:ef:34:44:b9:b8:6b:
         b8:9a:54:7c:34:66:3a:d6:2b:41:83:c0:de:3f:61:8e:9b:3a:
         e8:8b:8f:a8:f8:d2:5d:a6:41:c6:49:74:52:e2:07:40:31:44:
         e1:49:a2:03:ac:ba:1a:75:e4:b5:95:3a:23:78:93:d0:0f:e6:
         20:43:59:4b:f7:40:43:7a:30:f7:52:f4:4f:18:c4:67:38:8d:
         c9:04:37:49:c0:51:ff:c0:db:2d:00:95:b3:78:fd:83:de:ab:
         3f:5e:79:0f:97:a4:92:0e:62:f8:89:60:31:c8:e1:4d:9b:95:
         7f:14:f5:50:f8:1e:d1:6b:3c:37:01:c5:78:2d:f1:56:57:4f:
         29:05:75:de:16:f8:7e:d8:81:d8:98:ed:de:94:09:dd:b1:7a:
         2a:81:42:c7:d1:9c:c6:03:cf:53:0e:ec:8c:df:72:0e:aa:21:
         29:95:20:fb:48:59:60:89:2d:7b:73:39:0f:3b:9b:01:ec:7f:
         8e:8c:f7:52:b0:61:98:5d:1a:dc:e9:7b:45:4d:e4:cb:f5:2a:
         27:95:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org