Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1wxdz5cRK1sWUgGyul0KLrdPVY.roa
File:                     t1wxdz5cRK1sWUgGyul0KLrdPVY.roa (raw, json)
Hash identifier:          aSp0NmA4ePRuJX4YNsvUnF4FSUwMbkjhJq5MmdwFfE0=
Subject key identifier:   B7:5C:31:77:3E:5C:44:AD:6C:59:48:06:CA:E9:74:28:BA:DD:3D:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1wxdz5cRK1sWUgGyul0KLrdPVY.roa
Signing time:             Tue 06 Jun 2023 16:03:03 +0000
ROA not before:           Tue 06 Jun 2023 16:03:03 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.128.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:03 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B75C31773E5C44AD6C594806CAE97428BADD3D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3a:ee:4c:01:d0:fb:81:d7:c0:cf:c1:be:f7:
                    a0:6d:53:d6:68:37:2f:56:bf:8b:bc:e2:ec:bf:99:
                    bf:ce:d5:95:b4:4a:ba:52:3c:55:8a:04:de:9f:f3:
                    5e:c2:91:11:6f:e7:fd:c8:9c:49:c4:9b:af:40:1e:
                    86:ef:cf:2a:f8:12:c4:58:94:c4:94:07:d5:89:89:
                    16:31:78:9d:80:b1:fe:82:6b:54:8d:e3:5d:43:f8:
                    09:17:a4:c6:57:4a:b5:8b:14:0d:a2:61:72:a8:93:
                    b4:6c:73:08:6f:5a:f8:11:1a:91:b0:ee:d9:c4:a8:
                    41:af:12:fe:19:90:47:e5:e7:39:e1:a9:00:fe:fd:
                    7c:90:e9:41:b4:ac:71:6c:87:56:31:91:c2:b2:99:
                    a9:3c:63:c3:55:57:9f:d1:d8:9b:67:2b:c8:ef:e9:
                    4c:2e:91:29:b4:45:1e:c9:9f:36:e0:3f:03:21:51:
                    46:70:74:b5:34:a0:31:d2:33:e1:a1:49:34:23:ef:
                    8e:bc:74:3a:e4:86:6a:cd:26:4a:9e:3f:21:ea:5e:
                    ce:a3:14:98:ac:1c:fe:4a:40:63:2e:08:0c:1f:37:
                    0e:54:29:a7:f5:ad:4d:fe:76:56:b0:93:69:a8:01:
                    d1:3e:e8:99:ac:0e:30:d4:35:89:48:22:a5:25:a3:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5C:31:77:3E:5C:44:AD:6C:59:48:06:CA:E9:74:28:BA:DD:3D:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t1wxdz5cRK1sWUgGyul0KLrdPVY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:af:f8:49:3e:2e:f0:5b:be:5e:00:b8:dc:e4:41:2b:5e:
         6e:48:f3:ad:0f:4a:7d:b0:7e:f9:24:72:56:85:7d:51:84:bb:
         56:33:58:c8:69:f6:49:b0:93:45:62:46:f8:4e:34:0c:2e:6f:
         36:3f:0c:19:9c:c1:c2:58:20:15:9c:7a:58:f0:e6:14:e7:49:
         db:7c:81:0b:eb:de:8f:3d:f1:5f:4a:ba:f4:45:d0:f3:70:c7:
         b5:49:0a:1b:ff:5b:72:5f:f5:d6:96:91:5c:e7:2f:9a:a2:71:
         c2:84:5c:21:41:3c:e5:a0:a5:7c:40:88:21:f9:66:ab:7c:af:
         19:1b:14:91:96:91:c8:38:1a:3b:d2:78:46:e3:b6:31:2b:fc:
         e6:15:ec:a7:4f:d4:fa:40:c9:bf:36:a3:8b:09:4c:97:e4:92:
         60:22:96:ba:72:d6:61:bc:80:be:51:03:11:31:68:78:a7:10:
         65:09:a7:7f:2e:1c:4e:a8:de:09:15:86:e3:41:00:e9:01:7a:
         af:f1:7b:cc:6a:31:30:46:e7:fb:3a:3a:4e:f1:a3:f5:bb:1a:
         ca:6e:12:3a:a6:37:de:83:bf:99:55:26:88:1e:81:08:fe:88:
         32:dd:c9:ec:02:63:b3:92:e5:18:0c:04:a4:87:61:15:71:29:
         85:ba:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org