Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pGIGkn-jbHSTYG4IYQQNDzfSVZE.roa
File:                     pGIGkn-jbHSTYG4IYQQNDzfSVZE.roa (raw, json)
Hash identifier:          7aEFkH35DIxAT8JZtBlpopB5MR3Cl3zRXzbCJzi+jjo=
Subject key identifier:   A4:62:06:92:7F:A3:6C:74:93:60:6E:08:61:04:0D:0F:37:D2:55:91
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       38
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pGIGkn-jbHSTYG4IYQQNDzfSVZE.roa
Signing time:             Mon 27 Mar 2023 16:02:07 +0000
ROA not before:           Mon 27 Mar 2023 16:02:07 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:07 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A46206927FA36C7493606E0861040D0F37D25591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:24:1e:93:ea:24:93:35:92:de:1d:89:59:
                    09:f7:e6:70:0a:67:61:0d:b4:08:45:14:de:60:cf:
                    6d:e6:ef:30:15:cd:24:4f:4d:63:50:13:a9:4c:09:
                    cf:9f:4c:8f:3d:27:88:d9:29:a8:1e:82:1a:15:cd:
                    25:46:cd:29:8a:c6:6e:12:20:d0:bb:91:a0:a1:82:
                    09:5c:90:72:e8:46:87:65:ef:09:34:71:c3:31:77:
                    a8:d4:04:34:88:42:fa:a0:bf:ab:d3:19:a8:30:cf:
                    fb:ff:53:72:bd:47:80:e4:c9:86:2c:cf:6b:1f:35:
                    4e:a4:42:09:fd:bf:7f:89:11:ea:b4:c4:aa:0d:17:
                    57:5a:88:05:24:c1:03:70:43:07:c0:cf:1d:26:38:
                    c5:2d:65:14:1b:c2:fd:46:fe:18:22:bf:0d:79:1f:
                    3b:0c:70:ae:f0:ca:1b:31:8e:4d:b7:cc:ff:a2:1a:
                    d6:4d:ca:af:4b:fd:39:c1:98:7a:c3:94:ce:1e:1e:
                    6c:66:bc:11:ae:07:e0:f8:25:24:37:d0:8b:fe:1c:
                    ba:68:ee:77:e5:a3:16:6e:9c:f6:56:7d:e1:c9:96:
                    07:4a:74:57:67:c5:f3:8e:a1:ce:e3:91:e1:5f:59:
                    5d:eb:2e:d0:31:19:f2:53:a2:2b:59:57:3e:8e:30:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:62:06:92:7F:A3:6C:74:93:60:6E:08:61:04:0D:0F:37:D2:55:91
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pGIGkn-jbHSTYG4IYQQNDzfSVZE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:64:39:9f:bb:7c:34:6c:76:2d:60:c9:9b:4f:b9:0a:0f:06:
         47:f3:3a:ad:ba:2b:be:fc:3c:e6:66:63:59:08:da:37:b9:a3:
         06:d0:54:3e:43:dd:56:2b:98:e6:b0:65:e6:9c:c0:25:4c:b6:
         e0:47:fc:98:e0:73:5e:10:46:a8:d1:90:25:6a:f3:79:35:f0:
         23:15:a1:a1:ba:9f:cc:65:67:35:0e:40:7b:9f:23:69:7a:fe:
         1b:fc:39:17:d0:1c:69:ac:0c:d7:38:2c:09:01:df:6e:b7:28:
         29:63:04:a5:52:6e:8f:e6:a5:4e:f6:a5:a7:75:c2:a1:d5:d6:
         22:d8:bb:6d:e7:34:50:57:c5:b1:a9:b9:72:ae:af:05:c1:56:
         90:8a:d8:f2:b6:5a:10:79:47:30:31:45:b6:bf:02:40:9e:da:
         1d:b6:6f:47:34:6c:b1:88:f2:90:92:e7:61:ea:5b:be:46:f9:
         2e:f9:ae:18:c2:a8:81:85:34:af:21:61:6a:41:5c:61:e4:71:
         44:af:21:69:2f:64:7d:0b:76:a3:0b:10:22:07:6e:5a:b7:19:
         ba:d2:75:73:ef:69:d7:08:7e:e3:67:2b:a6:48:2a:ad:2c:54:
         ff:0b:a6:9c:f8:f5:a7:53:b1:7b:f7:47:3a:25:31:e8:76:7c:
         59:e2:b8:bc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MDIwN1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQTQ2MjA2OTI3RkEzNkM3
NDkzNjA2RTA4NjEwNDBEMEYzN0QyNTU5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALTYJB6T6iSTNZLeHYlZCffmcApnYQ20CEUU3mDPbebvMBXNJE9N
Y1ATqUwJz59Mjz0niNkpqB6CGhXNJUbNKYrGbhIg0LuRoKGCCVyQcuhGh2XvCTRx
wzF3qNQENIhC+qC/q9MZqDDP+/9Tcr1HgOTJhizPax81TqRCCf2/f4kR6rTEqg0X
V1qIBSTBA3BDB8DPHSY4xS1lFBvC/Ub+GCK/DXkfOwxwrvDKGzGOTbfM/6Ia1k3K
r0v9OcGYesOUzh4ebGa8Ea4H4PglJDfQi/4cumjud+WjFm6c9lZ94cmWB0p0V2fF
846hzuOR4V9ZXesu0DEZ8lOiK1lXPo4wvnMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSkYgaSf6NsdJNgbghhBA0PN9JVkTAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvcEdJR2tuLWpiSFNUWUc0SVlRUU5EemZTVlpFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADFhZDANBgkqhkiG9w0BAQsFAAOCAQEANmQ5n7t8NGx2LWDJm0+5Cg8GR/M6
rborvvw85mZjWQjaN7mjBtBUPkPdViuY5rBl5pzAJUy24Ef8mOBzXhBGqNGQJWrz
eTXwIxWhobqfzGVnNQ5Ae58jaXr+G/w5F9AcaawM1zgsCQHfbrcoKWMEpVJuj+al
Tvalp3XCodXWIti7bec0UFfFsam5cq6vBcFWkIrY8rZaEHlHMDFFtr8CQJ7aHbZv
RzRssYjykJLnYepbvkb5LvmuGMKogYU0ryFhakFcYeRxRK8haS9kfQt2owsQIgdu
WrcZutJ1c+9p1wh+42crpkgqrSxU/wumnPj1p1Oxe/dHOiUx6HZ8WeK4vA==
-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org