Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RA9388sLXTT2dbTELE0UkeE3p3U.roa
File:                     RA9388sLXTT2dbTELE0UkeE3p3U.roa (raw, json)
Hash identifier:          Aij+xPcztPmE5lBDioR1puXxCsLUBrGq54m+Cqfmvk8=
Subject key identifier:   44:0F:77:F3:CB:0B:5D:34:F6:75:B4:C4:2C:4D:14:91:E1:37:A7:75
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0391
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RA9388sLXTT2dbTELE0UkeE3p3U.roa
Signing time:             Thu 01 Jun 2023 17:57:41 +0000
ROA not before:           Thu 01 Jun 2023 17:57:41 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.104.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:41 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=440F77F3CB0B5D34F675B4C42C4D1491E137A775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:22:bc:a4:cc:b6:de:01:63:6a:49:88:3c:
                    5b:a8:75:3a:ab:c8:56:fa:76:f4:0c:0d:20:34:06:
                    28:4b:45:14:b7:67:f0:8b:e8:5d:9d:a9:04:82:f3:
                    ee:32:e9:16:5a:04:fb:96:fa:e0:e4:01:44:0d:8d:
                    b4:c6:94:8f:29:f4:61:31:23:7c:dc:3b:25:1e:19:
                    6f:f1:37:b6:a1:31:d1:7b:1c:1f:80:1d:14:d4:9f:
                    58:7e:e4:57:0b:10:d3:bf:b6:7e:6c:db:d0:51:11:
                    46:57:a8:e4:e5:42:c9:0c:87:bf:2b:a1:26:3a:09:
                    91:52:f0:f9:bf:27:c0:59:ca:76:03:fb:4c:bd:67:
                    88:62:71:de:0e:96:66:70:16:43:df:b2:22:ef:42:
                    b4:71:76:28:e0:84:bd:ce:fd:47:4c:8c:75:20:e6:
                    04:f9:5d:a3:44:68:f7:88:af:6c:26:ef:36:89:ef:
                    c4:6c:69:ba:2e:96:fc:1a:8c:49:64:88:d5:06:e4:
                    d0:a9:11:3f:43:2b:96:ff:65:0c:c0:a6:d5:a7:81:
                    b1:00:89:20:c4:8a:f7:dd:76:09:11:c4:f3:cd:e1:
                    ef:ee:b8:d2:e9:f5:da:b2:9f:43:82:8b:23:5a:8b:
                    5a:c8:7e:e2:23:89:e0:6d:c7:01:a8:8a:a5:97:94:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0F:77:F3:CB:0B:5D:34:F6:75:B4:C4:2C:4D:14:91:E1:37:A7:75
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RA9388sLXTT2dbTELE0UkeE3p3U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:41:79:1d:7a:65:1d:79:0f:60:39:f6:90:97:36:bb:30:94:
         2e:be:72:2c:ad:13:9f:c3:9e:12:28:4e:58:61:36:a0:be:d6:
         93:4a:23:60:90:51:f3:5a:7c:93:1b:58:90:ab:f7:54:e5:ab:
         55:f5:68:a3:63:34:97:2e:cd:f6:c5:2b:f1:3d:8f:d7:37:b8:
         98:1d:31:d6:f9:9e:da:79:88:c4:22:ae:68:79:9e:a4:fc:7b:
         54:f0:da:bd:90:8f:e8:cb:63:e2:b3:e6:80:e6:2b:d1:bd:45:
         39:53:86:ea:22:c0:06:c3:a2:5e:52:d2:4d:50:45:be:56:44:
         a8:76:5d:3a:14:e6:b3:8a:05:9a:af:b4:14:e5:2f:fe:0e:35:
         57:57:98:c5:11:f6:e5:71:eb:ac:a0:19:83:18:5d:c0:9d:79:
         5a:6f:2c:19:c4:f1:3a:7b:ec:d4:5c:11:e0:0d:6a:37:41:2f:
         27:e9:32:a5:b1:8c:88:5e:ea:6d:35:4b:f5:31:56:55:14:fe:
         26:b5:9f:ab:40:ac:dc:ae:73:e6:e4:ca:8b:d0:62:09:ea:e5:
         bd:be:6b:27:4c:bf:c2:fc:32:9b:2e:6c:a5:a7:d4:0e:da:d8:
         f9:1a:f0:16:79:2c:e0:db:33:d2:95:dd:21:50:bb:ba:64:21:
         0e:15:c4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org