Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tJkIAkNUbKDxqujuMx-m1Re-01Q.roa
File:                     tJkIAkNUbKDxqujuMx-m1Re-01Q.roa (raw, json)
Hash identifier:          wpSAvUswWZNsVOa3oH8N6Cr/f0xmGuw+Ytzht/6MX68=
Subject key identifier:   B4:99:08:02:43:54:6C:A0:F1:AA:E8:EE:33:1F:A6:D5:17:BE:D3:54
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tJkIAkNUbKDxqujuMx-m1Re-01Q.roa
Signing time:             Wed 29 Mar 2023 16:05:57 +0000
ROA not before:           Wed 29 Mar 2023 16:05:57 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.164.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:57 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B499080243546CA0F1AAE8EE331FA6D517BED354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:28:9d:a2:e9:a1:74:e9:16:ae:cc:3e:1c:
                    3f:a3:5c:e2:48:91:bc:7f:f2:f9:f6:54:a9:e4:6d:
                    0f:91:79:2d:72:c4:61:a2:e4:7b:03:66:c9:a6:ca:
                    94:d5:74:96:e8:10:c1:f8:4c:bc:73:94:b5:0c:c1:
                    0f:76:23:f2:65:a8:56:7f:9e:41:a1:5c:d8:2e:df:
                    e3:f6:44:11:18:a4:2c:f9:cb:1a:10:1e:e0:af:4f:
                    61:a6:23:18:71:50:31:f9:42:c8:d6:2b:73:f1:ca:
                    b5:87:1d:c3:8d:39:7b:e2:72:a3:8f:95:ea:38:f0:
                    25:a2:10:2b:67:98:6f:ac:fd:a5:76:0c:44:a6:86:
                    16:99:f5:fb:56:cb:f6:66:1b:ba:90:1a:32:21:f7:
                    5e:33:bd:81:0f:02:af:74:10:93:8d:9c:b6:48:32:
                    de:7d:d2:b7:83:85:83:7a:ef:79:3f:b8:1a:0e:b4:
                    07:7d:5b:fe:b5:1d:ee:f2:6d:99:f3:cf:2f:f1:4b:
                    91:24:1b:19:e3:9a:b1:79:f7:15:31:9b:18:1d:24:
                    f7:ca:fc:46:d9:b1:c0:c3:3d:9c:59:03:91:f4:f8:
                    35:ec:c7:e3:83:30:e9:67:28:18:59:af:51:36:22:
                    ff:9d:92:2e:b7:24:74:89:75:81:6c:ac:5c:90:eb:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:99:08:02:43:54:6C:A0:F1:AA:E8:EE:33:1F:A6:D5:17:BE:D3:54
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tJkIAkNUbKDxqujuMx-m1Re-01Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:13:9b:38:d1:d1:2b:c6:7d:56:8f:64:28:b5:9a:a5:16:7e:
         f3:7f:5d:8a:49:cf:90:8e:d2:6c:66:f4:9d:e2:4b:40:bb:52:
         0a:d0:f2:a1:fc:f4:1d:b7:d7:b3:8c:ab:23:96:52:73:0a:1f:
         89:05:0d:dd:2d:d3:e6:10:d7:da:66:a1:50:33:54:3f:67:5f:
         2b:4c:45:29:8b:4f:aa:ee:c3:61:3d:88:0b:91:a7:d9:ac:9c:
         9c:e9:35:6d:f6:c9:bd:68:ef:bc:42:3b:d2:cb:4c:d8:4d:07:
         7b:7c:b1:27:b7:8f:59:78:c2:17:4e:13:90:40:db:16:97:13:
         9f:d9:4d:0d:3d:b6:f1:5e:4a:a7:ee:ef:a0:04:c3:f9:53:5b:
         03:f1:78:bd:97:10:0c:80:29:71:57:93:6c:03:ab:0a:8f:18:
         f2:e2:56:2d:38:11:f7:3c:7d:e5:10:d7:ad:76:b9:be:a8:5b:
         67:6d:6f:1c:37:5e:52:3d:74:31:bd:55:b5:7d:25:f6:43:43:
         7a:ef:44:d4:5d:7d:0c:e5:ca:99:aa:7e:06:6e:84:89:0f:1c:
         5b:e1:7e:3e:b0:9a:de:64:15:06:ab:53:4f:5a:2d:7e:fe:39:
         06:27:e9:43:80:f5:66:62:e8:5d:3b:bd:32:cb:31:78:b9:9e:
         0e:f1:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org