Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eTYeRbwVd7kLftpnIerEOaOpTUY.roa
File:                     eTYeRbwVd7kLftpnIerEOaOpTUY.roa (raw, json)
Hash identifier:          Y9M8oldgQNwl05tHURUijYn3duZMPZZEppgvMB56hpw=
Subject key identifier:   79:36:1E:45:BC:15:77:B9:0B:7E:DA:67:21:EA:C4:39:A3:A9:4D:46
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0423
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eTYeRbwVd7kLftpnIerEOaOpTUY.roa
Signing time:             Tue 06 Jun 2023 16:09:05 +0000
ROA not before:           Tue 06 Jun 2023 16:09:05 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:09:05 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=79361E45BC1577B90B7EDA6721EAC439A3A94D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:78:6a:85:67:2a:3d:4e:59:ef:2e:61:91:
                    86:c2:ba:cb:0c:05:13:1b:06:b8:20:31:1b:6f:6c:
                    01:22:43:92:a6:dc:10:55:09:d6:df:c4:b1:46:b3:
                    6e:6f:0f:a5:a5:e1:dc:3b:b9:9d:19:74:22:c1:d7:
                    ff:ac:01:a9:2c:69:92:e9:4f:f4:2e:4d:7c:80:46:
                    7e:b2:60:ac:01:96:47:5b:f0:8b:d8:b7:5e:ab:73:
                    15:e2:b0:9e:98:39:92:8f:bb:f5:c2:5e:fb:15:74:
                    28:87:11:b3:f1:ba:f2:fe:15:24:cb:64:ab:b7:a5:
                    a5:6a:df:cb:00:9e:35:b9:f2:f3:8e:d0:46:71:a7:
                    4b:1c:cb:b8:24:aa:9d:27:89:01:81:12:85:cd:5d:
                    b8:91:25:63:42:39:e7:d5:58:8c:0d:5c:99:f7:2b:
                    1c:f6:43:08:67:6b:95:ff:91:ed:83:7e:11:80:46:
                    68:05:11:ff:52:3e:18:80:2f:17:21:d2:43:57:b8:
                    cc:aa:aa:af:87:a9:5f:9a:84:47:2c:97:a6:c8:a8:
                    c7:79:71:a2:18:98:08:96:d8:25:b0:d4:47:cc:64:
                    b1:dc:1b:97:ba:13:7a:3c:b5:67:e8:f8:1e:ee:ad:
                    bf:04:3a:bc:93:2d:d1:3b:5c:68:85:7d:cc:f1:75:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:36:1E:45:BC:15:77:B9:0B:7E:DA:67:21:EA:C4:39:A3:A9:4D:46
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eTYeRbwVd7kLftpnIerEOaOpTUY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:f0:ab:fc:68:9c:5b:f0:e8:1a:7f:29:1e:cc:40:2c:94:
         81:8b:1e:13:f2:ae:6d:68:6e:3e:15:8c:b0:90:94:c1:d2:65:
         9f:e8:29:7c:84:6d:07:85:61:64:8f:56:27:b0:fd:1b:25:32:
         b3:ba:23:04:1e:b7:68:6d:e8:d1:4a:e6:e6:b1:58:2c:03:9a:
         83:58:b2:a1:89:8d:4f:1f:39:e3:2f:f0:cc:f1:82:a0:84:34:
         f6:96:27:5a:90:f7:a6:dc:88:88:af:8c:af:7a:d4:6b:8f:93:
         08:75:d5:60:bf:76:1e:1b:07:57:9c:9c:89:b6:75:31:04:e8:
         aa:c3:5f:67:92:df:35:e7:af:86:d2:b8:fb:ef:04:c3:eb:10:
         c6:38:07:b2:be:91:16:74:d0:7a:16:0c:eb:72:71:bd:a8:e4:
         80:93:f5:e8:d2:f4:66:fa:73:4f:a6:49:fa:5f:b1:a9:0f:6e:
         aa:41:7b:92:85:11:38:92:1d:aa:9f:74:ce:8e:c4:8e:10:35:
         22:cf:20:ea:c8:d2:39:e7:72:ff:53:8a:7c:1e:16:6a:76:a9:
         1d:46:87:c6:10:1e:ca:19:02:dc:98:23:db:04:f5:06:fa:aa:
         10:34:8f:51:28:4c:ed:f0:0e:24:9c:22:fa:ba:ad:08:d0:65:
         90:71:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org