Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OAvoeHO3NoI--jGSTX_UoJycUDE.roa
File:                     OAvoeHO3NoI--jGSTX_UoJycUDE.roa (raw, json)
Hash identifier:          jU5EdvafSZa23M3QZnsNBv8iA8ycHYBXdw04aIxOH/I=
Subject key identifier:   38:0B:E8:78:73:B7:36:82:3E:FA:31:92:4D:7F:D4:A0:9C:9C:50:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       D6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OAvoeHO3NoI--jGSTX_UoJycUDE.roa
Signing time:             Wed 24 May 2023 16:02:20 +0000
ROA not before:           Wed 24 May 2023 16:02:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:02:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=380BE87873B736823EFA31924D7FD4A09C9C5031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:12:3b:a9:43:39:24:fa:3c:15:6f:4d:bd:
                    7c:ed:2c:e0:9f:46:ad:c1:3e:36:76:02:27:79:d3:
                    a4:fc:ce:44:71:34:a4:da:75:9a:fc:fa:04:fc:f4:
                    7b:e0:ec:b5:f3:60:58:61:be:7c:f6:37:cf:bd:d2:
                    2d:16:94:b9:f6:f5:13:24:a3:92:33:61:42:7a:10:
                    ba:c0:16:cb:42:ae:07:6f:7a:f5:1e:54:16:56:be:
                    02:c6:a6:2c:6d:da:58:db:28:c4:a6:87:67:f0:91:
                    9b:54:40:73:7b:75:da:97:77:bd:3c:69:1f:3c:e1:
                    6e:c1:d4:89:b8:c3:ab:7d:2f:db:2d:ed:54:66:a4:
                    36:66:63:7e:16:74:cc:42:63:5c:db:14:7a:97:a5:
                    c8:b7:09:e8:1b:19:03:61:bd:77:24:70:22:d3:5b:
                    04:6b:dc:b1:3b:b7:ed:27:47:16:13:cb:69:90:5c:
                    e5:21:d7:71:74:0c:bb:e7:92:5f:1c:83:a8:38:60:
                    f3:64:6e:98:16:68:72:33:f3:92:a7:0f:02:51:33:
                    d0:85:e3:b1:55:2e:11:94:9e:64:d7:54:33:c8:ca:
                    2e:14:9d:b4:9d:af:6f:5a:34:73:36:e1:73:de:57:
                    93:1e:cf:69:f6:e8:1d:d0:d5:d3:04:41:52:8f:d4:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0B:E8:78:73:B7:36:82:3E:FA:31:92:4D:7F:D4:A0:9C:9C:50:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OAvoeHO3NoI--jGSTX_UoJycUDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:15:1e:f1:35:b8:5d:bb:71:6b:aa:ad:c8:a6:a2:c5:fe:ce:
         38:e9:1e:04:18:29:5a:d3:6a:42:99:d4:3d:c2:69:31:a4:89:
         ca:ba:56:7f:ce:8f:4c:34:69:f1:71:f6:a3:6c:43:0f:a0:e7:
         1f:fe:68:66:7b:08:2d:6d:1c:02:fb:3c:62:1b:b0:fc:68:16:
         42:40:43:1d:ce:de:83:62:43:2d:f6:05:ac:b6:31:44:af:a7:
         ec:94:ce:6b:77:20:66:2a:d1:94:a6:ed:13:c0:89:6c:db:d3:
         25:b2:47:e5:4a:ca:53:ef:21:3d:76:6b:ba:ee:ff:8c:c3:ed:
         bc:fe:72:f9:53:38:c0:cb:88:55:b2:ed:35:84:d4:ea:02:71:
         2f:a1:42:b9:97:74:93:a3:37:e4:41:96:b0:0e:78:8d:7e:ba:
         60:45:ae:58:e1:18:9f:1d:0d:3a:99:ab:18:0c:c4:1a:67:23:
         18:7c:23:94:d2:ed:81:9f:98:aa:c5:b1:e3:48:ee:36:70:5b:
         ac:1d:59:2e:0b:83:4f:dd:27:7c:59:af:ac:c9:23:e9:a3:4f:
         1c:fb:0d:ca:d1:9b:75:90:33:09:3a:8d:79:98:aa:ef:5d:4a:
         86:11:6a:6f:47:4e:54:f0:9a:42:d8:e9:1b:d0:93:da:0c:d2:
         eb:68:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org