Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa
File:                     cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa (raw, json)
Hash identifier:          wZmWKCsnBIDgQuMzLhpcPJYHUX29ls6y6HsEg3Eq1GY=
Subject key identifier:   71:87:C6:95:B3:D8:25:53:9C:E5:5A:97:F2:AE:4A:B6:28:1B:E2:50
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0596
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa
Signing time:             Thu 27 Jul 2023 17:00:10 +0000
ROA not before:           Thu 27 Jul 2023 17:00:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.96.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7187C695B3D825539CE55A97F2AE4AB6281BE250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:c7:ae:a3:e1:b9:c8:c6:bf:45:e6:70:fa:
                    9d:e4:b8:ea:e5:b1:2f:d2:36:93:41:66:fc:29:ea:
                    94:a6:90:85:02:66:0d:b7:74:2a:fb:42:21:47:10:
                    c1:50:d9:c5:60:22:d5:6a:6d:db:c2:14:d8:53:0e:
                    09:97:b0:3d:b8:6d:9d:09:d7:34:0a:9b:6f:81:dc:
                    bf:6f:92:b9:24:68:25:23:8c:48:62:c8:33:60:6c:
                    c4:c8:98:cb:89:83:f3:c1:c4:bb:8a:26:80:37:3f:
                    d2:57:e6:a7:09:bc:30:b2:56:0e:04:f3:c0:f2:ac:
                    1a:28:2d:c4:e0:49:fe:74:3f:8a:f0:06:92:37:da:
                    90:09:08:da:20:ea:fa:12:1b:f3:3e:d1:c2:d5:04:
                    9f:99:25:fa:26:46:77:94:2d:52:53:6d:90:69:ca:
                    db:4e:55:37:74:4f:64:f6:f6:a7:27:01:fa:69:5a:
                    15:c9:a2:6b:06:96:90:1f:fa:22:8d:27:c3:09:c8:
                    07:a9:85:c3:94:6c:00:73:de:1a:96:50:f6:20:34:
                    ad:1d:fb:27:d4:8f:8c:a7:92:67:73:c5:da:fd:43:
                    8a:8c:08:40:13:7c:83:2d:48:8f:a0:99:0d:b1:6a:
                    e0:97:23:95:3c:da:1c:63:ff:13:a2:d7:de:31:e7:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:C6:95:B3:D8:25:53:9C:E5:5A:97:F2:AE:4A:B6:28:1B:E2:50
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYfGlbPYJVOc5VqX8q5Ktigb4lA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:c8:88:66:aa:5d:9d:57:de:1d:e8:79:60:19:c4:f6:a7:
         41:48:f3:42:b2:44:5d:8b:d2:7f:18:ac:52:88:ce:58:45:0a:
         dc:da:b5:00:7f:0f:5d:c7:93:1e:b6:4c:c2:52:16:86:be:42:
         23:50:42:62:ee:4f:34:50:64:43:27:1f:4c:7a:1e:7c:4f:80:
         ec:6f:57:27:d0:14:0f:87:6b:8d:66:17:5a:56:17:7b:98:f8:
         17:b4:d3:95:ed:fa:a9:9d:a2:8c:11:30:cf:41:77:7e:e1:f6:
         f0:da:da:45:cc:7f:03:38:bf:3d:3e:22:28:3c:b0:ac:91:b8:
         1f:50:de:21:46:82:65:51:cd:f1:02:ca:74:06:97:d9:4a:2a:
         dc:48:34:10:25:90:b7:fe:b3:39:8f:f8:b6:f1:aa:ad:3a:f3:
         15:dc:db:f4:5d:eb:44:34:2e:e1:ba:c4:69:de:54:32:e0:67:
         55:3b:78:28:cd:31:98:8c:05:08:9e:2e:da:9c:27:bd:a0:e0:
         d0:5a:11:b4:aa:d5:bd:27:c0:c9:eb:13:f8:b8:e0:b3:4b:ca:
         c2:d1:e3:f1:84:e9:03:09:cd:15:2a:56:d6:62:64:2e:87:81:
         99:b9:4a:bf:0e:ed:50:44:8c:f7:db:78:aa:e6:6f:69:95:6b:
         67:0f:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:47 2024 by rpki-client on console-ams.rpki-client.org