Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/U_uCiWaB-WE3AMsLU1FbqipdWkU.roa
File:                     U_uCiWaB-WE3AMsLU1FbqipdWkU.roa (raw, json)
Hash identifier:          1oF6s2ZxacsGa3uPK6aumhGff7bCHLWPYkFcx7xpJd4=
Subject key identifier:   53:FB:82:89:66:81:F9:61:37:00:CB:0B:53:51:5B:AA:2A:5D:5A:45
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       E9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/U_uCiWaB-WE3AMsLU1FbqipdWkU.roa
Signing time:             Wed 24 May 2023 16:03:08 +0000
ROA not before:           Wed 24 May 2023 16:03:08 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:03:08 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=53FB82896681F9613700CB0B53515BAA2A5D5A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:4a:63:2b:04:13:58:84:58:c3:aa:00:4b:
                    a7:f7:95:c7:74:d4:7d:23:04:0a:75:c2:cd:ce:63:
                    ff:6f:ab:4f:51:7d:40:fe:ef:f7:ff:1d:e3:f0:5a:
                    62:91:b4:39:d9:d6:be:43:fd:02:cd:99:e9:16:3a:
                    16:3d:d3:2c:54:94:cd:9b:e4:39:c2:ed:d7:5f:00:
                    42:42:44:60:d8:28:5f:98:0b:7d:22:da:49:15:a5:
                    44:0a:91:48:37:2c:05:42:d4:4c:9b:ac:b1:de:fa:
                    49:a4:fa:03:b3:ca:bf:66:04:95:50:4c:3a:e9:61:
                    57:63:c7:70:2e:d6:13:b7:3c:46:87:ba:5d:f7:43:
                    67:a1:6c:f6:53:6c:8b:a7:c2:fb:df:15:64:32:6b:
                    e1:d5:f5:2d:b9:ee:2b:c0:fa:30:da:e8:19:30:dd:
                    1f:1e:65:12:1e:2c:91:84:ea:73:97:ca:c2:4a:39:
                    b1:b5:95:f6:eb:55:8f:95:67:bd:0f:e1:73:dc:64:
                    f4:82:b9:0d:c2:43:c2:05:bb:73:fd:8f:d9:00:69:
                    7f:c7:26:71:75:64:bc:59:e2:ea:aa:b5:fa:86:c5:
                    0c:51:08:e0:30:31:d0:bb:79:28:fe:fc:bc:83:e2:
                    01:ee:1d:7a:a5:0f:ce:54:2f:9c:45:d8:8b:8f:a0:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:82:89:66:81:F9:61:37:00:CB:0B:53:51:5B:AA:2A:5D:5A:45
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/U_uCiWaB-WE3AMsLU1FbqipdWkU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:48:12:a5:5b:0b:35:56:07:9a:52:ba:00:66:78:7d:be:
         49:7a:ef:59:68:5c:33:d5:22:fb:ec:d8:dd:22:aa:34:dc:72:
         66:de:b1:b9:16:19:7f:fe:c6:39:c3:a7:6d:63:b3:90:67:44:
         69:ae:19:e2:cb:c3:f6:08:77:05:be:2c:7f:21:67:c2:1e:18:
         ec:e7:a2:66:27:3c:fd:57:ae:dd:3f:c7:4e:95:36:d9:fe:5f:
         33:04:20:8e:95:55:ab:cd:74:85:77:eb:66:a8:35:63:aa:ba:
         73:6d:d8:d2:61:5e:e5:f0:c2:4e:1f:45:0a:e7:dd:98:3a:12:
         f1:fe:63:6c:86:59:f4:94:d7:97:8f:48:56:a5:21:b6:e3:93:
         51:06:77:b5:f6:85:ea:df:f3:3c:81:34:26:13:ed:59:64:80:
         2b:97:2b:c0:45:b3:08:7e:ad:cc:b1:fc:90:16:cd:51:1e:75:
         8f:b6:76:89:5b:ae:6c:e0:5a:4c:07:16:18:4a:cb:8e:d9:4c:
         77:fe:26:e0:29:7d:b2:02:18:88:ca:f9:cf:e3:7a:5b:18:45:
         10:90:a4:e2:93:7f:be:76:92:69:e7:47:a1:f0:27:1d:5a:e4:
         61:33:f3:87:25:b0:7f:62:ff:81:5c:c4:38:7b:3a:cc:28:da:
         fc:45:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org