Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVORzGhm2eS5xENnRnHIWYIfbtU.roa
File:                     kVORzGhm2eS5xENnRnHIWYIfbtU.roa (raw, json)
Hash identifier:          8eWgaB7waAlijdMVnIv1D1fOzDUERqrPpHps6aQEf48=
Subject key identifier:   91:53:91:CC:68:66:D9:E4:B9:C4:43:67:46:71:C8:59:82:1F:6E:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03D6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVORzGhm2eS5xENnRnHIWYIfbtU.roa
Signing time:             Tue 06 Jun 2023 16:03:38 +0000
ROA not before:           Tue 06 Jun 2023 16:03:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.36.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=915391CC6866D9E4B9C443674671C859821F6ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:22:de:38:b6:63:f2:b1:6f:ac:04:0b:9c:
                    14:8d:3a:ee:c1:3f:8f:e4:0f:31:0e:91:8d:a1:47:
                    71:af:55:de:53:59:3c:de:fe:d0:d9:9e:7a:fe:ff:
                    d4:5f:8c:69:93:3a:08:fd:30:45:ea:f2:b3:50:e7:
                    14:c5:0f:46:6e:6b:a2:ca:ed:e9:97:88:f2:0b:a4:
                    fd:84:fd:3f:0e:fa:15:df:9d:e9:19:b7:1e:2a:6e:
                    7c:58:a1:62:c4:84:c3:fc:4b:c3:c9:40:24:77:17:
                    2b:73:48:15:76:0c:f1:72:cc:0d:5e:e6:70:fc:5d:
                    70:7c:a3:58:f6:5b:eb:8c:2e:81:73:1d:95:61:f8:
                    80:cb:b8:05:65:90:f2:ec:7d:00:b4:83:e4:e2:d3:
                    34:28:c6:0e:4c:c5:2a:70:98:bf:ee:3c:59:b0:4a:
                    6d:32:f8:cb:9a:d1:fe:17:ee:99:50:dd:fc:e3:ff:
                    ce:d5:87:5c:2a:de:7f:0b:41:5d:7e:23:b2:a2:c3:
                    e5:20:b6:87:50:4c:67:d3:8f:96:31:ac:1f:26:83:
                    74:13:9c:de:0e:dd:05:a5:90:59:bc:b8:3b:98:36:
                    63:d5:e1:6e:a4:f0:94:61:41:c3:cb:fb:d2:93:6d:
                    6b:ae:4c:48:32:62:37:1d:56:cf:c8:74:1a:b4:ec:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:53:91:CC:68:66:D9:E4:B9:C4:43:67:46:71:C8:59:82:1F:6E:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kVORzGhm2eS5xENnRnHIWYIfbtU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:29:42:81:44:1e:0f:d0:00:db:8c:b2:f6:77:b9:94:f6:
         92:81:17:fe:30:67:40:9c:7a:89:0e:a7:96:0f:6c:aa:ec:d9:
         6e:ea:6d:f0:ec:cb:fd:dd:21:28:4d:26:5a:00:2f:fb:0c:cd:
         c7:f1:7c:a0:48:6f:aa:e0:3b:70:27:05:65:9f:4b:3a:1c:08:
         89:e6:20:1c:7f:5b:51:32:70:aa:2d:2e:2d:cc:76:31:89:4f:
         3e:f7:d9:a9:84:c7:68:71:86:e3:31:4e:a2:b7:e7:4b:81:d8:
         92:39:b1:b8:bf:b2:c5:fe:09:cf:0c:5c:b3:33:47:59:93:80:
         ce:e4:b1:7c:59:28:ee:a7:3b:cf:1e:b4:19:e7:4b:24:b6:36:
         33:7e:db:74:16:84:24:fd:e7:54:a6:ab:47:34:f9:b6:5e:fc:
         21:6f:e4:da:7e:20:d3:59:91:ec:77:fb:6f:2d:40:ef:31:be:
         0f:9b:9e:0b:15:f3:c5:c5:b0:f1:3a:05:6f:dd:4b:b2:45:3d:
         e8:f5:c9:f9:ec:d7:b2:3b:18:c3:d5:07:f4:f3:b6:5b:7d:c8:
         8c:6f:ab:3c:c2:a1:98:2c:39:2f:28:dc:c5:4a:e3:02:92:fa:
         fe:c7:73:ae:75:ff:90:a2:9e:12:f8:f7:70:b2:9f:9c:64:3b:
         65:31:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org