Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5e-t0AsQcopWjOz0PbvSnOWyw0.roa
File:                     k5e-t0AsQcopWjOz0PbvSnOWyw0.roa (raw, json)
Hash identifier:          rKo9eGQOLGXRYNr1SK4DCkC8M2hxU83vH1o84cWT1Ec=
Subject key identifier:   93:97:BE:B7:40:2C:41:CA:29:5A:33:B3:D0:F6:EF:4A:73:96:CB:0D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       B9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5e-t0AsQcopWjOz0PbvSnOWyw0.roa
Signing time:             Wed 29 Mar 2023 16:05:55 +0000
ROA not before:           Wed 29 Mar 2023 16:05:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9397BEB7402C41CA295A33B3D0F6EF4A7396CB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:ca:6a:c0:2b:c7:29:17:d2:e5:09:8d:71:
                    62:8d:15:d6:e3:90:c1:06:53:16:6d:71:c5:39:cf:
                    9c:95:1d:83:4d:f0:ab:0a:24:94:cc:d4:e5:47:72:
                    3d:4e:7b:44:9f:cf:50:21:b0:4e:a6:9b:93:62:87:
                    a4:45:59:f7:c4:21:7d:fe:23:99:06:90:09:00:2b:
                    c4:ae:42:d6:e7:05:08:73:7c:88:1b:40:7d:df:05:
                    af:68:df:b7:7c:bc:91:17:0f:e4:68:5c:03:7a:02:
                    08:5c:4b:47:b8:9c:10:39:68:c1:ef:ea:66:c5:18:
                    21:d5:80:55:02:92:b1:c8:9f:ce:d6:99:07:34:99:
                    9a:33:c6:24:fc:1a:b9:87:b5:e1:ce:9e:c3:07:80:
                    b6:38:84:f2:ed:fd:4e:90:ce:2e:e4:a6:2f:bb:d1:
                    05:ae:23:f8:c4:44:c7:f7:04:68:02:4c:e1:27:2d:
                    c7:74:60:77:31:fe:43:dd:b1:47:6d:07:e4:2e:80:
                    e5:47:b7:f9:9e:4e:62:2c:d2:27:04:3f:ce:b5:2d:
                    98:a4:13:ff:9c:2e:a1:a9:65:54:ea:ac:c7:45:ec:
                    63:91:3b:f0:ae:48:51:e7:a3:14:09:1c:b6:d7:25:
                    64:05:d2:68:b4:3b:e3:20:f6:0a:3d:1d:ac:c2:41:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:BE:B7:40:2C:41:CA:29:5A:33:B3:D0:F6:EF:4A:73:96:CB:0D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k5e-t0AsQcopWjOz0PbvSnOWyw0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:34:0e:85:18:18:ae:e5:b5:fd:ae:6a:ff:a8:a9:19:2a:f2:
         1a:fd:02:e6:b6:09:f3:75:eb:1e:9c:00:22:5a:bb:1e:12:08:
         45:17:d2:f9:c8:96:71:d2:e6:31:8e:1b:07:22:ab:db:7b:53:
         8a:fb:72:d4:98:52:fb:c5:27:0b:7c:54:01:01:e2:98:61:7b:
         db:8a:4a:bc:2d:43:e2:e0:bb:91:3c:33:e8:63:07:29:ac:04:
         dd:3a:05:d5:9d:07:23:8c:87:46:2e:75:59:d1:df:c1:cc:61:
         bb:e8:ab:de:a0:03:0d:5d:83:1b:06:69:4e:ec:26:ab:be:82:
         61:ad:be:bc:13:b3:53:2f:06:4b:32:e2:9a:5b:14:2b:2c:bb:
         af:81:ea:a6:47:0e:8c:a0:81:c9:58:8c:ac:63:5d:f8:22:b5:
         7b:c3:af:69:2c:97:42:63:4a:18:4b:84:03:e2:13:f8:c5:4a:
         c0:9d:db:d5:f5:b8:15:6c:3f:35:dd:d2:c6:bd:2b:89:aa:aa:
         a1:df:ab:d5:c8:40:59:f4:61:94:63:e8:97:f1:ff:78:03:02:
         05:4c:74:06:d2:97:c3:5a:4f:68:77:b6:0c:8c:ce:bb:d0:6c:
         6a:37:13:75:e6:da:0d:a5:a1:cd:60:07:a2:46:fb:01:76:b7:
         d0:be:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org