Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/t2LPmmGEkcO2WaO7uSgyTcr_Xp8.roa
File:                     t2LPmmGEkcO2WaO7uSgyTcr_Xp8.roa (raw, json)
Hash identifier:          Dq/viR8m0mHnlNbP+5+7Lso5a1DoLVObF73TVRndo+c=
Subject key identifier:   B7:62:CF:9A:61:84:91:C3:B6:59:A3:BB:B9:28:32:4D:CA:FF:5E:9F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       62
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t2LPmmGEkcO2WaO7uSgyTcr_Xp8.roa
Signing time:             Mon 27 Mar 2023 16:04:33 +0000
ROA not before:           Mon 27 Mar 2023 16:04:33 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:33 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B762CF9A618491C3B659A3BBB928324DCAFF5E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:22:38:ec:a0:5b:5b:5d:88:2d:5b:27:bb:
                    8c:be:98:29:ac:a0:eb:8c:81:db:82:2c:8c:df:36:
                    ae:aa:11:45:31:1a:7a:28:aa:f5:f4:37:98:e1:e9:
                    c2:9a:7a:ba:d6:ed:eb:99:e3:9c:b9:80:2f:eb:52:
                    0d:f9:4a:91:7b:8d:e4:61:cd:6d:92:70:36:70:07:
                    bb:ba:42:81:1e:b5:35:fc:38:a4:d8:2e:0d:4a:7f:
                    41:38:1e:69:92:db:2d:88:4b:96:2a:28:69:21:d5:
                    9a:90:ae:d6:b5:ab:20:95:f8:38:71:44:eb:ec:0b:
                    80:82:c9:51:78:97:e1:77:51:ef:82:3d:bb:ad:ad:
                    7d:6e:ea:c2:71:3b:39:08:b3:88:84:6a:bc:40:40:
                    9d:bb:9b:e7:34:33:00:d4:d2:50:55:28:25:0b:91:
                    b7:b7:ff:55:a9:06:d1:70:d3:cb:bd:29:14:03:09:
                    2e:79:a8:2d:79:df:07:55:eb:4f:0c:1d:3f:5e:0d:
                    aa:9e:7b:a2:c2:5a:2e:79:f7:de:f4:97:4d:e1:10:
                    8b:76:02:ca:00:d2:80:28:e8:e4:c3:91:40:b5:ef:
                    b6:27:64:a6:fd:83:46:3c:af:ae:b8:e5:79:3a:c4:
                    07:0a:29:35:86:08:86:e6:10:ec:be:4b:4a:5f:fb:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:CF:9A:61:84:91:C3:B6:59:A3:BB:B9:28:32:4D:CA:FF:5E:9F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/t2LPmmGEkcO2WaO7uSgyTcr_Xp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:17:b0:d7:32:45:e3:34:d6:23:70:be:58:4b:85:e5:ee:e2:
         aa:80:0f:86:75:2b:18:ef:4e:19:95:b4:42:da:17:a5:67:89:
         79:89:5b:ee:dc:8e:90:6d:46:8c:30:bf:bd:7c:0c:93:b2:56:
         31:38:f1:de:61:49:da:73:c4:7a:a9:44:0c:3e:40:08:02:24:
         54:a3:2c:ee:69:1a:2d:b3:7f:92:c6:fc:4b:64:9b:99:27:29:
         1f:c1:c9:94:de:69:e8:53:91:d8:b6:19:36:a6:2b:3d:b0:6e:
         41:04:fa:b7:ad:99:06:b3:f3:d8:e4:c8:05:fc:1d:12:bc:37:
         e5:6d:49:6c:34:18:8d:48:17:95:45:94:bd:6c:27:b6:cb:1a:
         88:99:1d:ba:24:0a:15:fd:28:65:f4:c2:bd:af:c2:71:e8:35:
         28:47:13:5b:5a:43:a1:c0:a5:9a:a7:00:a0:2d:c7:c8:7f:6c:
         58:00:02:a3:c5:b6:c1:35:77:e6:a3:07:51:2c:ea:5f:18:2c:
         c6:ec:c2:24:96:8a:4c:50:70:12:15:75:c8:99:1c:0c:ad:b4:
         9c:74:dd:5c:5b:e3:8f:80:83:96:4c:37:d0:81:16:e3:ea:dc:
         35:b7:10:bf:39:fc:cf:f6:98:6c:03:42:88:8e:4d:d2:9e:9d:
         62:d2:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org