Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aoyHEqyfWERe8ou76lyGQmIO_MM.roa
File:                     aoyHEqyfWERe8ou76lyGQmIO_MM.roa (raw, json)
Hash identifier:          cdgSCt8DCAp7vya4l8Z76ftJwgUekJpLL/QX2aJqERI=
Subject key identifier:   6A:8C:87:12:AC:9F:58:44:5E:F2:8B:BB:EA:5C:86:42:62:0E:FC:C3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03D7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aoyHEqyfWERe8ou76lyGQmIO_MM.roa
Signing time:             Tue 06 Jun 2023 16:03:38 +0000
ROA not before:           Tue 06 Jun 2023 16:03:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.40.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6A8C8712AC9F58445EF28BBBEA5C8642620EFCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:f4:56:f5:9a:d6:38:a2:33:ed:6c:a5:d4:
                    b2:29:df:82:a9:20:ec:2c:c1:1e:68:a1:c2:58:4d:
                    e2:2b:cf:35:16:c2:a0:ea:25:51:a5:d1:b6:55:6c:
                    48:8c:1f:5f:67:6c:40:ef:f9:ca:54:2b:3d:c8:82:
                    0f:cf:12:64:73:e0:42:3f:89:7c:91:3d:a3:e8:9a:
                    98:01:5b:63:e0:96:59:92:6b:71:19:e2:88:a8:8c:
                    95:56:b5:73:cf:74:bf:d2:58:08:f2:96:3a:f2:08:
                    ae:1e:bb:ff:e8:17:09:d3:3b:ee:13:00:15:60:e3:
                    9b:0b:1a:46:2b:8a:d1:0b:13:60:dd:07:9c:1b:43:
                    87:03:7f:8a:18:bc:2c:1e:d7:a1:05:53:eb:7f:ac:
                    ea:72:07:5d:9e:52:d9:af:55:fa:76:f5:f2:dc:31:
                    78:f9:dd:d3:a3:db:c0:d3:db:a1:92:5a:19:9e:54:
                    00:be:ba:3e:ef:fb:fe:1c:2f:78:63:cc:3e:23:ab:
                    5c:34:f2:92:c5:df:e2:f5:46:9b:84:e2:68:f5:15:
                    cb:89:c2:3c:4e:5e:16:bf:0e:2b:a8:e7:ac:7c:ef:
                    d3:19:8b:3a:94:32:70:47:74:48:01:f7:6e:df:f3:
                    db:7c:fe:3c:b2:e3:e4:ad:3c:9c:2a:96:af:63:56:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8C:87:12:AC:9F:58:44:5E:F2:8B:BB:EA:5C:86:42:62:0E:FC:C3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aoyHEqyfWERe8ou76lyGQmIO_MM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:e3:13:a9:32:ad:b5:b6:5b:cd:c8:46:30:72:d0:9e:a1:
         9f:55:a2:8c:fc:8c:ef:40:a4:c3:1c:fc:4d:23:c1:7a:0f:0b:
         04:ed:af:b5:ac:cf:1e:86:b6:3d:4c:c7:a8:2d:f7:95:a4:9e:
         fd:c0:59:bf:23:bd:b9:f8:5c:38:06:46:86:01:ed:c6:ff:92:
         90:34:e5:83:39:2a:1d:ae:cb:73:d4:0d:09:63:e7:ee:96:cb:
         db:ae:15:4b:0e:e1:b8:b5:8c:df:ce:eb:83:b4:47:07:79:da:
         d2:0b:a3:f0:23:73:95:0f:cd:6e:c1:10:18:9c:49:56:a6:5d:
         01:f3:fd:ad:74:d2:c5:c1:e9:53:5c:01:2c:29:20:9f:12:75:
         08:18:20:0b:c6:77:4f:41:5f:65:ac:a3:14:4f:9b:77:b9:36:
         73:9a:5c:11:0c:d1:75:d4:8e:c6:f8:e4:50:70:cb:3d:3d:ae:
         56:21:57:ce:c3:ed:02:b9:27:af:06:5d:47:b3:f6:1d:4a:66:
         39:da:fb:aa:c3:cd:26:5d:2f:e2:26:f2:72:3e:b1:33:7f:21:
         31:34:6a:2d:67:52:e4:ca:36:91:0e:db:9a:ea:5e:18:9c:1d:
         58:c6:4b:10:57:d0:fe:a3:7d:ce:db:92:b6:08:03:e7:1d:62:
         3a:3e:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org