Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VNnumgG8IDMbXmxS8BZO0Z0_rgs.roa
File:                     VNnumgG8IDMbXmxS8BZO0Z0_rgs.roa (raw, json)
Hash identifier:          NMLTT51zHNXdm6NHhzTRkAEfCGrXF4K/NY1yf1HY1kw=
Subject key identifier:   54:D9:EE:9A:01:BC:20:33:1B:5E:6C:52:F0:16:4E:D1:9D:3F:AE:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       023E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VNnumgG8IDMbXmxS8BZO0Z0_rgs.roa
Signing time:             Tue 30 May 2023 16:32:23 +0000
ROA not before:           Tue 30 May 2023 16:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.110.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=54D9EE9A01BC20331B5E6C52F0164ED19D3FAE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:f7:cb:df:d3:89:22:ad:a6:49:e0:75:e1:
                    30:ed:67:83:f7:bf:d2:01:6f:a9:b7:68:43:fa:ab:
                    b4:2d:15:71:f1:06:1d:07:4f:03:88:ea:8a:9f:0d:
                    97:8f:83:ad:5c:30:92:14:f8:77:c8:81:0b:bc:30:
                    bf:aa:71:e0:86:a0:ea:e3:78:2c:e0:68:dd:0a:d0:
                    65:18:2d:47:31:74:a9:f6:69:c5:c5:67:a3:94:dc:
                    e0:ca:e1:77:73:3a:b3:ae:1a:bb:e9:b1:b7:fa:5e:
                    d2:f7:4a:f9:e1:c0:dd:0c:10:a8:c5:06:f1:79:3c:
                    70:7b:46:d4:43:ba:9a:d4:1a:bb:28:7e:5b:7e:78:
                    eb:00:c4:fb:6b:5b:68:3f:a2:3a:e7:72:ac:23:c6:
                    b7:75:a5:d8:57:c8:78:e1:b0:48:24:3e:49:4b:1d:
                    27:a5:4c:fe:5b:70:36:56:f6:b6:99:04:f2:67:24:
                    d9:49:be:e8:ce:e8:04:38:6c:dc:b7:07:37:46:68:
                    0f:2d:4f:a9:09:e3:a1:a4:91:d0:04:a3:a1:9c:85:
                    a1:1d:90:e8:5c:21:93:70:a5:77:c3:42:b2:02:9d:
                    71:3d:94:0c:84:87:43:87:76:db:51:14:38:9e:d3:
                    78:a5:56:5a:49:d8:30:4f:99:19:82:e1:9e:9a:9b:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D9:EE:9A:01:BC:20:33:1B:5E:6C:52:F0:16:4E:D1:9D:3F:AE:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VNnumgG8IDMbXmxS8BZO0Z0_rgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:60:6e:6b:35:ad:c2:77:b1:71:95:bb:ee:b8:92:a7:0a:
         53:53:bb:2b:c5:8b:3f:0f:35:b4:9b:9b:0c:79:b1:06:b7:c9:
         8c:2b:e2:26:b9:63:b9:a5:f4:0d:bb:ac:52:2c:55:52:2f:4f:
         7f:23:0f:c7:19:05:a0:01:78:32:00:fe:8a:6b:cb:3c:3b:f8:
         b8:c8:3c:d8:87:58:bf:20:57:8d:7b:62:b9:6f:d2:a9:17:e2:
         2d:bc:f4:8f:57:fc:d7:73:b1:2e:0a:b2:82:ec:46:5d:04:3b:
         6b:ad:5c:15:8a:80:45:4a:b6:f6:f4:11:7b:1a:09:75:5a:92:
         78:c4:83:3f:39:e7:10:5b:da:4b:1d:38:28:c0:e4:13:cb:f2:
         87:ea:08:db:f4:60:c2:87:8e:a3:6c:96:7c:41:d1:e8:6f:43:
         ea:99:9d:e7:ec:3d:c3:82:06:b8:04:4d:61:31:34:26:65:9f:
         a8:a8:32:0c:31:8b:5f:52:0f:7a:46:0c:4a:a1:38:1e:2e:a6:
         1f:43:5c:52:d0:72:12:91:0c:43:be:13:b9:e0:7b:34:91:cb:
         fa:18:de:9b:22:02:9b:cd:a2:06:3b:0b:ea:82:52:a5:6c:ad:
         f8:07:2d:cf:aa:f2:9e:29:15:be:66:c9:44:23:6a:fc:c4:47:
         38:fe:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org