Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/e4BfhwTsCbyKSY5hAI7Nq0dMsJo.roa
File:                     e4BfhwTsCbyKSY5hAI7Nq0dMsJo.roa (raw, json)
Hash identifier:          sehByWGL347yEgvm+akMj9RehLYGYWVIDfMku68IMgY=
Subject key identifier:   7B:80:5F:87:04:EC:09:BC:8A:49:8E:61:00:8E:CD:AB:47:4C:B0:9A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       040C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e4BfhwTsCbyKSY5hAI7Nq0dMsJo.roa
Signing time:             Tue 06 Jun 2023 16:05:53 +0000
ROA not before:           Tue 06 Jun 2023 16:05:53 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:53 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7B805F8704EC09BC8A498E61008ECDAB474CB09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:8d:39:1f:b5:13:3c:fb:66:4c:ae:ed:6c:
                    50:a5:40:06:0f:12:48:98:7c:05:b9:24:ca:46:60:
                    8a:9f:b8:55:13:5e:29:cc:62:32:0b:5b:06:dc:89:
                    a3:4b:b7:5d:a1:eb:cb:11:1b:d5:5e:d7:a9:79:69:
                    f0:4a:3d:a4:05:43:bf:ca:b7:9c:e5:bc:71:3c:49:
                    2e:19:9b:7a:0d:5e:3b:34:37:7c:7c:42:2e:fd:3f:
                    7f:7c:38:c8:7b:20:97:8a:da:a5:58:3c:42:63:1f:
                    d1:55:c8:ee:c1:11:7e:a8:93:b2:b4:d8:30:4d:11:
                    2d:95:55:b7:50:df:ad:1a:2f:a6:08:73:71:48:81:
                    86:0a:44:9f:48:65:b5:54:b5:87:a7:61:87:3f:fc:
                    c8:9b:3d:78:8b:e3:ff:01:2f:6a:3d:02:d3:fd:5a:
                    1f:92:f4:5a:11:dd:ac:fc:c3:c3:4b:4c:8d:92:39:
                    c2:9a:a7:31:a9:1a:2b:88:2a:81:45:83:85:cb:24:
                    1c:8b:50:a4:9d:86:9b:1d:73:29:b7:01:d3:d8:9c:
                    a2:59:16:75:d2:4f:ba:f2:a0:64:dc:d8:5d:4e:79:
                    5f:87:3d:8b:be:f7:ff:1e:d2:55:91:32:85:25:ec:
                    a1:e2:f6:2b:46:d9:c5:b6:d3:dc:2f:78:66:91:2e:
                    43:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:5F:87:04:EC:09:BC:8A:49:8E:61:00:8E:CD:AB:47:4C:B0:9A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e4BfhwTsCbyKSY5hAI7Nq0dMsJo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:ac:9e:c2:57:44:2f:19:1c:ef:14:53:0d:02:dc:26:37:3d:
         43:54:08:99:ee:a8:c9:a3:c0:23:35:4c:08:b8:24:ab:18:27:
         08:8b:65:98:f2:96:6d:67:bd:6d:d7:e8:54:68:df:c6:e3:5d:
         e3:e2:ae:d0:46:39:a3:3c:cf:04:97:89:ab:3d:8b:9b:89:6f:
         03:1b:59:94:24:38:14:4a:f5:a4:83:37:91:90:5b:8e:81:a6:
         94:bf:f8:c0:90:10:45:51:95:c1:15:0d:a0:2d:d3:cd:9c:16:
         8c:cd:12:40:1d:34:42:d3:dc:68:bb:dc:a3:78:06:d2:b8:1b:
         52:15:53:b7:b8:4e:29:9c:c6:d4:56:e2:5d:7b:f6:68:cf:83:
         7d:85:a1:4c:2e:23:7e:97:58:1e:3e:40:55:e3:7d:0c:e4:a9:
         8e:79:87:c1:fb:d3:24:6a:02:e2:93:6a:e9:70:3a:22:b6:57:
         cd:13:84:62:18:d9:04:7d:32:31:54:bd:7e:db:2c:e2:d5:be:
         a1:56:a8:b9:0a:e5:80:91:15:f9:2f:7f:c3:28:79:bd:bc:2f:
         f1:df:de:1a:92:3a:24:1f:e3:30:10:b4:e0:b6:ff:49:bc:2c:
         b4:b4:c9:c7:f9:95:11:03:46:e3:f2:c4:2f:bd:7b:db:93:b1:
         85:15:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org