Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jqBEGdw8B08KCBVQ9fUBJuWHwmo.roa
File:                     jqBEGdw8B08KCBVQ9fUBJuWHwmo.roa (raw, json)
Hash identifier:          FVYMgBdyAVOiPXYvfNOOH6imuHG/Y1LqXgR33UIMcEk=
Subject key identifier:   8E:A0:44:19:DC:3C:07:4F:0A:08:15:50:F5:F5:01:26:E5:87:C2:6A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02AB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jqBEGdw8B08KCBVQ9fUBJuWHwmo.roa
Signing time:             Tue 30 May 2023 17:17:27 +0000
ROA not before:           Tue 30 May 2023 17:17:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8EA04419DC3C074F0A081550F5F50126E587C26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:5f:9e:3b:91:f0:97:54:11:f9:86:c9:0f:
                    7f:47:df:5b:3a:84:60:68:09:aa:bf:d3:5a:d9:fa:
                    14:32:36:e7:37:f3:58:f4:03:e6:af:3b:c0:c8:f5:
                    32:2f:a1:e4:0c:67:c7:44:ac:8b:b4:b8:05:77:5d:
                    2e:01:07:eb:02:f6:87:e1:f3:5d:8f:9e:4e:07:d2:
                    b2:a8:b6:5c:a6:38:91:ed:f7:5e:5e:7a:ae:46:8b:
                    2f:40:ac:99:3e:de:76:3a:7e:b0:34:f3:05:61:c6:
                    1b:da:2d:e3:87:22:15:9f:30:b0:f5:fa:af:17:4d:
                    97:52:1d:ec:5f:c3:ab:05:6c:77:93:f6:a2:cd:9c:
                    2c:0a:a8:dc:b2:eb:51:30:cd:5a:68:87:86:fd:4c:
                    21:4a:0b:1f:80:41:7e:15:16:2b:90:bd:66:07:69:
                    99:ea:3a:ee:73:88:2d:07:30:05:18:a0:3a:74:8b:
                    1f:c4:03:a2:38:fb:87:a9:8c:9a:3a:65:53:c4:40:
                    24:4e:b2:e5:95:80:80:57:50:3b:2f:60:e2:fb:91:
                    69:52:59:58:e1:bf:2f:09:ab:80:b1:9f:02:5c:ae:
                    10:3c:75:bf:52:cf:f9:cf:e6:3d:08:cd:9e:0d:17:
                    2b:e3:62:4b:01:e6:3f:e7:03:61:d2:b5:13:76:f1:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A0:44:19:DC:3C:07:4F:0A:08:15:50:F5:F5:01:26:E5:87:C2:6A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jqBEGdw8B08KCBVQ9fUBJuWHwmo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:30:4a:72:84:17:38:fe:c5:62:2f:65:17:7d:e8:54:3c:b3:
         ab:cb:d5:ec:0f:b6:3c:c0:fb:67:4d:c7:8d:13:2f:2b:68:a4:
         21:f3:76:b4:a3:c1:ae:df:96:6f:8a:8b:2c:7b:7e:06:b1:32:
         7c:7b:c4:f6:68:8b:25:54:76:44:35:a5:f5:16:6e:d1:58:9d:
         36:a5:91:65:04:0b:e8:d0:14:43:08:6f:5c:f4:8b:d7:75:03:
         ce:5d:b0:ce:44:6e:ed:6f:1f:ed:79:a1:fc:39:c6:dc:25:1d:
         ae:4e:16:91:a3:46:56:3b:c8:5c:a1:51:37:d7:d0:9a:3a:f1:
         75:10:a1:db:8e:8f:2e:d0:0b:af:14:b4:e9:69:f3:a6:ed:c3:
         cd:53:4b:85:c8:d1:ca:c1:6d:b9:7b:6e:54:08:34:c1:17:cb:
         05:68:fa:7a:ff:e9:8d:1f:d0:d9:10:22:8f:a7:f8:57:9b:41:
         bb:da:5c:2b:73:ac:4e:9a:e7:5f:0d:40:89:bf:1d:b4:99:af:
         b1:13:da:aa:0a:b3:0e:6a:52:23:ac:0f:12:ad:f4:d5:ea:12:
         68:4d:3d:53:c4:3c:61:7d:cd:73:e1:8b:94:94:6a:e2:a8:77:
         c8:48:1a:bf:02:ff:61:53:2a:71:ce:a9:e0:45:97:48:57:de:
         32:e2:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org