Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Raysu0DMhHPpx824MDni_Rtb9T4.roa
File:                     Raysu0DMhHPpx824MDni_Rtb9T4.roa (raw, json)
Hash identifier:          xRa8LUrlOGKD3lxQzBiIpx9U5LscH1HbGYUdQZJEwYk=
Subject key identifier:   45:AC:AC:BB:40:CC:84:73:E9:C7:CD:B8:30:39:E2:FD:1B:5B:F5:3E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0382
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Raysu0DMhHPpx824MDni_Rtb9T4.roa
Signing time:             Thu 01 Jun 2023 17:57:36 +0000
ROA not before:           Thu 01 Jun 2023 17:57:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.160.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=45ACACBB40CC8473E9C7CDB83039E2FD1B5BF53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3b:c2:26:43:b3:2e:cd:e5:45:58:d0:d8:28:
                    5d:38:76:5d:e1:88:89:d4:69:29:0c:8f:98:62:54:
                    c8:c1:8c:c8:70:77:23:a8:65:dd:9c:c9:13:c2:d5:
                    1f:69:c6:2c:66:02:39:a4:1e:ed:64:cf:3d:04:e5:
                    76:35:45:e4:f9:12:36:08:d2:79:fc:86:02:c3:5e:
                    8d:a2:20:41:72:28:37:c1:18:e2:a0:61:d6:1a:e8:
                    fa:0c:52:2a:57:db:c5:8a:dc:d3:6c:2c:3c:e9:72:
                    55:20:f6:37:c5:32:98:e1:f6:c7:20:63:ef:3b:36:
                    29:0c:b8:83:d9:1c:6c:47:c0:15:3e:f0:28:9a:c0:
                    cb:b9:c9:e3:e9:62:bb:db:2a:9d:d7:73:10:5d:fc:
                    d4:f3:85:b8:1f:a3:0f:90:fa:e2:35:92:37:01:63:
                    d2:9b:2b:2d:c7:83:fb:34:e3:05:0c:dc:72:bd:ec:
                    97:f8:7a:60:33:ee:bc:47:23:4c:40:cf:16:7d:11:
                    5e:97:ca:74:c8:1c:6b:f0:6d:17:22:3f:fe:ce:34:
                    24:5d:90:6c:b3:67:26:e1:dd:a7:4d:04:f4:cf:14:
                    bb:38:1c:1b:80:ac:7d:7f:44:b3:d2:6e:46:01:85:
                    f2:77:ab:31:ca:fe:d4:16:71:e6:ab:4c:88:5e:c4:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AC:AC:BB:40:CC:84:73:E9:C7:CD:B8:30:39:E2:FD:1B:5B:F5:3E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Raysu0DMhHPpx824MDni_Rtb9T4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:ac:c3:7e:7f:a8:29:65:0d:b7:63:bd:db:f6:0c:85:77:
         84:18:1c:58:fe:2b:10:aa:a0:57:de:1a:bd:11:11:05:a8:20:
         53:01:05:de:ba:9c:e4:7f:1c:60:06:32:02:2d:58:fc:7b:e2:
         17:37:c4:67:8b:ee:9b:9e:71:db:5c:c3:f7:8e:77:ff:5d:bd:
         ea:ba:74:94:32:5e:b7:03:4d:8c:93:06:ec:f4:dc:71:f8:02:
         58:6c:d3:fe:90:0e:ca:ba:53:bd:38:3e:c3:54:88:2d:b7:56:
         79:88:7e:1e:e1:00:1a:a0:34:37:8f:bd:bf:a5:62:35:ed:3a:
         fb:a2:be:95:37:ba:6e:02:fe:29:38:fe:4a:9b:b6:cf:52:9f:
         0c:18:f9:77:a7:c6:23:7d:9e:0f:19:93:cb:f6:15:5d:b1:63:
         9f:55:63:64:1a:74:c4:97:64:20:c8:8c:ac:c0:9e:2a:b8:9d:
         28:e8:96:a6:2a:64:b7:0a:d6:7d:db:fe:a3:17:98:4c:28:45:
         dc:fa:7d:86:3a:0d:9e:62:a4:9e:68:5a:40:c9:cd:61:aa:71:
         27:42:f2:cf:40:fe:6c:27:8b:bd:15:dc:c0:78:7f:c1:3a:2e:
         fe:db:a0:66:7b:92:98:01:7e:52:36:7d:46:e6:a8:51:64:fd:
         bd:17:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org