Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/a5qRCW154AAsUHfkbEi7-vc3AAw.roa
File:                     a5qRCW154AAsUHfkbEi7-vc3AAw.roa (raw, json)
Hash identifier:          UPzpVVD1Olle2uZ6DrBtI97l43jdUb+8rayIy1ooVSs=
Subject key identifier:   6B:9A:91:09:6D:79:E0:00:2C:50:77:E4:6C:48:BB:FA:F7:37:00:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0379
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a5qRCW154AAsUHfkbEi7-vc3AAw.roa
Signing time:             Thu 01 Jun 2023 17:57:33 +0000
ROA not before:           Thu 01 Jun 2023 17:57:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6B9A91096D79E0002C5077E46C48BBFAF737000C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:7e:10:b5:f8:b4:e8:bf:f7:d5:49:b7:81:7c:
                    12:04:23:bb:c8:27:1b:df:4a:fe:52:c9:be:5c:a2:
                    07:d6:16:20:20:74:fb:57:67:d9:e0:0b:b5:0d:bf:
                    41:c0:e1:90:6f:4c:8a:cb:c2:50:f9:25:fc:fa:9c:
                    6a:cf:dc:69:fd:33:a1:eb:f0:0b:f0:2d:14:15:65:
                    9c:db:7a:1c:fa:45:55:41:4a:6a:38:99:28:cd:60:
                    09:8b:e0:95:a4:d8:3c:c5:e0:c0:da:1c:64:59:47:
                    77:3c:e4:6c:da:31:30:45:ba:32:22:70:49:2b:89:
                    56:3f:a5:bc:79:94:a5:b7:c9:02:0b:6b:0a:ea:14:
                    f7:60:36:b4:e3:be:12:1d:76:77:7e:7f:dd:38:1d:
                    e2:09:53:5b:dc:49:4a:ed:31:c5:57:31:3d:8e:34:
                    e3:90:64:c7:8a:48:9d:f0:37:49:cb:09:79:a0:67:
                    8c:1c:f5:d5:2a:63:f3:65:20:a8:f3:6b:92:45:29:
                    98:f4:b1:7d:90:3b:f4:2b:46:d1:7d:f2:83:b5:7c:
                    bd:19:1c:ac:29:52:c6:28:83:ba:74:5e:f6:d3:40:
                    28:0a:fa:05:44:e9:9e:c7:da:cc:3f:1a:10:52:21:
                    2d:88:07:c6:3d:7c:38:23:ef:e9:d2:aa:c8:85:9b:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9A:91:09:6D:79:E0:00:2C:50:77:E4:6C:48:BB:FA:F7:37:00:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/a5qRCW154AAsUHfkbEi7-vc3AAw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d3:19:84:02:a1:35:1b:7d:fb:b8:d9:af:4e:4d:f1:dd:4b:
         64:4f:46:65:e4:c0:80:21:0c:09:7f:80:6f:25:cf:f2:36:83:
         5b:35:9b:d1:3b:79:35:1a:e0:d8:77:0b:1e:dd:54:75:8c:f1:
         aa:e0:8e:c6:d9:68:8a:e9:04:49:a4:ab:76:a0:aa:c4:25:cb:
         81:42:4a:36:ee:b8:e6:98:e7:f3:f2:e3:5a:b8:a0:1d:8b:1f:
         d6:e8:e9:24:9a:3e:0b:a0:6e:b6:3d:0b:47:bf:6c:f9:05:87:
         e1:ca:ca:42:a8:ae:81:95:f4:3d:f3:bc:38:d8:d9:82:f0:50:
         94:81:d5:03:33:a6:c4:47:29:af:3b:b6:5a:d3:28:23:ae:93:
         e4:a4:52:f9:b9:85:89:b5:e8:73:cc:8a:67:f1:82:12:e2:1d:
         c3:b9:22:14:4b:8e:b9:e6:73:3f:ba:81:b0:7d:ae:82:68:bb:
         f5:17:aa:38:5a:a1:d2:28:de:33:f1:de:52:5b:e9:05:c3:ef:
         68:0d:c0:b2:a3:36:a5:80:a0:98:34:68:ed:de:cf:3c:f8:22:
         18:86:6d:78:98:f9:a0:75:2f:be:fa:6b:a2:99:c2:74:50:0a:
         a2:fd:72:a8:ed:97:c8:05:53:73:54:48:02:53:ea:c9:fc:41:
         c5:a5:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org