Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PvAJcUbCDhxKJC73LSQvrJraOgU.roa
File:                     PvAJcUbCDhxKJC73LSQvrJraOgU.roa (raw, json)
Hash identifier:          6xO2hkw/VgngnHF2hF1zGKqoDIFKPvXdkwWUf0x0kQc=
Subject key identifier:   3E:F0:09:71:46:C2:0E:1C:4A:24:2E:F7:2D:24:2F:AC:9A:DA:3A:05
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       037C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PvAJcUbCDhxKJC73LSQvrJraOgU.roa
Signing time:             Thu 01 Jun 2023 17:57:33 +0000
ROA not before:           Thu 01 Jun 2023 17:57:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3EF0097146C20E1C4A242EF72D242FAC9ADA3A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:66:26:3d:19:e5:92:0b:a9:c2:7b:70:06:
                    bc:fb:4e:3e:12:86:88:35:d3:1b:f4:0a:4d:59:2d:
                    9f:cf:a4:49:b7:3e:5e:c0:fa:cc:12:4e:ac:98:d0:
                    6c:e3:12:e8:d7:97:79:7b:af:c8:3c:67:14:89:1b:
                    51:3e:f6:e1:77:7e:12:f6:d5:1f:ed:2e:e7:89:59:
                    42:60:7c:90:87:84:51:e0:b2:79:62:14:c8:43:b7:
                    1b:2c:da:be:38:9d:e6:5b:f4:87:39:9a:18:2e:5d:
                    6f:00:0c:d7:ac:60:cf:ec:31:2a:9d:36:eb:a1:2b:
                    ca:cd:32:d9:4b:9e:82:ec:fb:5f:ff:72:05:e1:e5:
                    36:26:b0:b2:98:35:46:b8:6c:2a:14:7b:46:e7:c7:
                    64:9b:1d:e0:7c:ae:97:4b:92:7a:b0:49:34:76:4e:
                    0b:a5:08:53:21:02:77:9f:be:f8:e6:a0:ed:5b:2c:
                    0d:cb:79:f1:d6:4c:31:64:1d:2a:24:3c:86:c6:1e:
                    19:dd:7e:00:79:0b:bd:7f:16:ef:d1:39:ef:c1:54:
                    7d:af:8f:ea:cc:42:02:5d:15:f0:93:bf:80:d0:c6:
                    94:8d:60:fe:1f:94:b7:fb:1d:14:06:83:2e:5e:03:
                    96:e9:66:1b:cf:e3:c0:f6:1b:7b:ee:12:12:94:4b:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F0:09:71:46:C2:0E:1C:4A:24:2E:F7:2D:24:2F:AC:9A:DA:3A:05
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PvAJcUbCDhxKJC73LSQvrJraOgU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:e4:41:2d:0f:a4:f6:63:ff:e4:ee:ee:5f:50:2c:d1:02:45:
         dc:e2:55:b4:47:3b:08:98:50:91:c2:88:b1:f0:f8:50:af:ca:
         08:c6:dc:7c:5f:f7:04:25:e7:b8:fe:db:a7:02:81:89:b8:3c:
         ad:ba:e3:f3:85:38:46:96:52:92:e6:8a:54:cd:b9:66:07:4f:
         d7:13:23:f0:28:42:0a:1b:70:2a:d2:98:7b:43:87:a3:2a:9b:
         64:76:57:e4:b9:96:83:3c:ac:ca:6b:4b:6b:02:5c:93:bb:e6:
         83:fe:bf:3b:7f:ca:6a:a4:62:b4:d6:52:c3:64:dc:9d:19:31:
         f7:87:31:03:28:69:48:ec:fd:15:d5:e9:d7:69:31:0c:5f:fb:
         49:e8:61:15:29:a6:a3:c9:31:4e:90:89:c2:00:41:28:14:48:
         38:1c:d9:2a:6c:26:8b:05:1e:58:26:c8:0d:60:36:e7:87:fa:
         c6:0b:a3:60:89:f3:e3:5d:0c:f8:7d:3c:e3:7a:79:2a:cc:d1:
         4b:a4:5f:59:ae:6c:cc:c8:d1:ac:41:6f:ef:23:96:a7:18:39:
         68:90:0b:25:07:3d:23:0b:45:1c:55:04:ec:ff:b7:8e:21:06:
         e9:64:e3:ca:69:c4:93:10:bd:97:95:80:2d:97:27:36:f6:6e:
         3b:f0:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org