Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vjPpfaKruNRWz3o8_pmvSbvcLIM.roa
File:                     vjPpfaKruNRWz3o8_pmvSbvcLIM.roa (raw, json)
Hash identifier:          OD1rgQXCEas6EE3/MHYxS9Wcq9ZDT7owW8DT+Q9fKXY=
Subject key identifier:   BE:33:E9:7D:A2:AB:B8:D4:56:CF:7A:3C:FE:99:AF:49:BB:DC:2C:83
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0298
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vjPpfaKruNRWz3o8_pmvSbvcLIM.roa
Signing time:             Tue 30 May 2023 16:36:30 +0000
ROA not before:           Tue 30 May 2023 16:36:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BE33E97DA2ABB8D456CF7A3CFE99AF49BBDC2C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:66:df:59:e3:a6:73:4f:5e:38:95:fd:95:
                    7b:1b:61:97:f3:7e:f0:05:4b:5b:6b:2a:df:fc:f4:
                    5a:6e:44:a8:48:96:3a:cd:b8:6e:2e:94:2e:b0:c6:
                    83:7f:18:7d:bd:35:01:39:00:43:8a:93:23:81:38:
                    0e:53:44:b9:48:a8:14:1b:7c:2f:64:4d:04:e6:4e:
                    d5:d5:29:3e:a9:82:04:10:79:e6:53:e0:10:08:b8:
                    0d:74:25:f4:01:2e:32:d8:cc:0d:ea:fb:24:97:45:
                    d8:1f:50:b9:18:99:d7:28:45:46:a0:4f:6f:2f:d4:
                    34:59:a3:f2:33:99:25:11:a5:7f:81:9a:98:88:91:
                    59:59:dd:69:83:f7:dd:61:c1:69:f3:61:8b:54:c2:
                    83:3e:71:cf:f5:7e:a7:60:74:f2:43:bc:da:a6:a7:
                    ca:63:1d:57:bb:45:4a:d9:3c:fd:e7:5f:66:64:02:
                    e9:38:83:c3:7c:18:97:42:fc:62:9f:82:7e:a5:9f:
                    68:36:08:b1:15:8c:f1:2e:29:28:09:c6:2b:cc:03:
                    70:cc:f6:e6:70:de:9b:00:18:d6:73:ef:24:e8:c8:
                    d0:13:f7:b0:88:e1:fb:3a:6e:04:c9:de:4f:10:f0:
                    28:24:ef:f0:f4:e7:30:97:93:0b:b5:7c:40:4d:19:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:33:E9:7D:A2:AB:B8:D4:56:CF:7A:3C:FE:99:AF:49:BB:DC:2C:83
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vjPpfaKruNRWz3o8_pmvSbvcLIM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d0:65:8f:3e:02:63:64:f2:51:a6:bc:61:b3:7c:9e:4d:1e:e5:
         a0:fb:7a:21:eb:53:60:2d:af:ce:b9:f3:a3:08:c8:d3:52:c8:
         ab:0b:01:56:4b:93:76:0d:93:ee:38:c2:d2:b9:cd:ac:75:06:
         c3:6a:d4:71:53:d6:c7:d2:fb:b0:92:23:79:19:96:e2:0f:cd:
         2b:28:99:b1:2f:e9:28:38:e8:73:31:64:18:a5:14:5a:c5:32:
         3b:35:ba:ff:2e:2a:fd:b4:1c:63:f2:42:9b:e8:30:1b:9f:e6:
         5c:75:71:9b:4d:4a:4b:1c:17:90:c4:0a:c1:ac:fb:2d:4d:7e:
         b6:22:cf:3e:d8:02:2d:3e:d0:9b:f4:ca:82:15:1c:32:19:b6:
         d2:0f:97:c8:df:17:9c:26:7e:7a:7e:9f:35:a8:f7:ad:27:a6:
         1c:43:e8:ec:8e:9d:8f:2c:a8:d3:8a:61:16:0e:21:30:5d:0f:
         29:72:23:d8:6d:d7:5f:a7:14:3c:60:8d:a4:c3:0e:76:87:49:
         6d:86:88:58:10:c1:5f:cd:44:cd:b1:d5:95:a8:d6:80:37:2e:
         a2:ca:f6:d7:ac:c6:ea:ba:d5:de:32:40:b5:d8:13:eb:3e:5e:
         58:b4:c6:23:0f:ab:1b:32:9d:f7:41:3f:43:95:57:1c:2c:e3:
         2a:4c:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org