Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eZ4fSmygqOGYySLQl0gcW5F3RMY.roa
File:                     eZ4fSmygqOGYySLQl0gcW5F3RMY.roa (raw, json)
Hash identifier:          rgA7VIFf6ccNrHUqzk3iglPOgr7c/JSuAN0P805hZyg=
Subject key identifier:   79:9E:1F:4A:6C:A0:A8:E1:98:C9:22:D0:97:48:1C:5B:91:77:44:C6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eZ4fSmygqOGYySLQl0gcW5F3RMY.roa
Signing time:             Tue 06 Jun 2023 16:03:41 +0000
ROA not before:           Tue 06 Jun 2023 16:03:41 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:41 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=799E1F4A6CA0A8E198C922D097481C5B917744C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:d2:6a:ed:5b:87:66:df:b7:68:02:28:c9:
                    d7:e6:eb:bf:b5:9b:83:28:62:df:1d:30:e4:f0:03:
                    9c:11:76:0a:20:ff:23:9f:13:4f:06:8e:e7:63:5d:
                    c9:cc:16:5d:36:32:55:91:5d:93:06:0e:46:14:30:
                    e2:01:4e:e1:f0:95:47:48:9c:93:05:18:83:cf:ec:
                    43:f8:2a:94:7c:34:aa:c8:e6:65:e6:e8:c7:46:4e:
                    26:c6:28:24:87:13:cb:c9:bc:79:de:c1:2f:5a:c4:
                    28:ba:96:cb:96:35:7f:04:30:5a:2c:a5:72:40:53:
                    2a:bf:87:de:5b:c3:fc:87:41:18:ad:07:e1:d6:d0:
                    df:fc:a8:8e:d6:46:0f:5c:f0:38:47:5d:c7:fe:ba:
                    80:7a:94:9e:a9:e8:31:30:d8:67:9e:80:54:ca:76:
                    2c:f8:76:da:8d:82:63:75:3c:8b:50:66:1d:09:78:
                    b0:3d:dc:57:c5:e4:01:dd:0d:10:dc:71:93:ed:45:
                    b2:94:9d:9d:85:02:3a:3b:d3:e7:76:b5:f8:7b:3c:
                    9e:a5:07:47:1a:bd:d6:4c:63:44:21:4a:ca:6d:62:
                    a1:0d:c9:f0:cf:b1:0e:43:66:8e:e9:17:4d:18:43:
                    68:3a:6f:39:13:f7:f6:a3:a4:0e:14:13:18:5c:ed:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:1F:4A:6C:A0:A8:E1:98:C9:22:D0:97:48:1C:5B:91:77:44:C6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eZ4fSmygqOGYySLQl0gcW5F3RMY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:93:4b:de:65:13:1e:56:d0:63:05:1c:90:26:6c:fe:4a:0e:
         2b:d1:dc:36:9b:06:4d:5a:cb:12:a2:a1:61:17:d3:c3:13:40:
         23:11:55:c4:12:a1:f8:43:52:0e:f4:c6:98:16:7c:7e:db:80:
         3b:6a:4d:1e:54:fb:9d:8d:e2:ff:6a:b4:71:ef:7b:5d:eb:87:
         a8:b2:41:3c:2e:9f:3c:f5:c5:ed:29:95:5d:d5:d4:0c:66:9d:
         84:d0:f7:69:81:36:51:de:0b:26:5a:55:c1:91:2e:70:94:f4:
         dc:03:61:be:48:0c:37:84:9a:4b:8c:ae:44:4d:43:8e:75:76:
         52:83:e1:a5:7c:4d:a4:b1:1e:31:71:91:35:79:ef:53:e6:c6:
         68:82:91:9f:fa:04:d8:d0:a5:b3:93:e1:f4:33:49:b7:fc:02:
         fa:b8:d7:c2:26:df:96:20:26:fe:54:b4:fc:d8:14:3a:da:97:
         67:5f:61:1c:88:41:d9:a3:24:31:21:60:b9:a8:2a:5d:87:4f:
         4d:7d:c8:6b:b6:69:16:3f:17:0a:ac:68:9f:a2:13:21:3b:6d:
         3d:1f:94:8f:77:b1:d0:b6:e9:ea:9d:a8:5c:d4:e8:0a:6b:f7:
         2c:b7:65:40:09:1f:8e:8e:89:20:78:7b:60:b5:66:3c:9e:8d:
         6b:64:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org