Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w0f0_oKlFGYFzK3dIlOtnSPbpto.roa
File:                     w0f0_oKlFGYFzK3dIlOtnSPbpto.roa (raw, json)
Hash identifier:          Vtl9pTKbSmbM8DkLRuN8GqRhXAaVGRJxXNt3bkPCmXg=
Subject key identifier:   C3:47:F4:FE:82:A5:14:66:05:CC:AD:DD:22:53:AD:9D:23:DB:A6:DA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       2A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w0f0_oKlFGYFzK3dIlOtnSPbpto.roa
Signing time:             Mon 27 Mar 2023 16:02:03 +0000
ROA not before:           Mon 27 Mar 2023 16:02:03 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:02:03 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C347F4FE82A5146605CCADDD2253AD9D23DBA6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:63:4c:ab:1f:25:b4:fb:49:23:bf:0b:16:
                    09:34:ce:47:c4:bd:7c:bf:9b:6b:a2:8e:80:9c:9e:
                    55:92:e3:be:55:cb:ce:69:6a:e7:ea:5c:01:1d:81:
                    dd:ca:a4:35:08:63:a1:bc:f6:3a:8f:81:e5:98:08:
                    fe:f6:d2:0f:ee:15:c5:7d:b3:c1:6a:69:2d:36:f8:
                    8d:de:5e:76:de:37:c3:32:8e:f6:1e:eb:24:45:03:
                    82:d7:fa:a8:6e:d3:c7:ec:b4:74:6b:5a:02:ea:61:
                    93:01:2e:ba:bf:e6:cb:3f:ab:af:10:32:7c:33:ca:
                    5a:ea:39:31:0c:ae:60:73:b9:28:73:7c:61:23:3d:
                    20:f4:82:86:8b:e1:1d:cc:40:7c:f3:98:7e:c9:34:
                    f2:81:bf:6b:26:2e:1e:30:e9:2a:29:b8:63:cd:da:
                    35:5d:1a:32:08:46:9b:fb:31:c3:c2:e3:a3:bb:16:
                    02:3e:91:ec:79:59:dc:71:89:43:de:19:9d:5d:de:
                    00:26:e9:ed:77:ce:dd:f5:22:99:12:c5:74:f3:d5:
                    9c:b1:df:91:70:24:6b:d5:7e:38:f4:f1:5b:a0:17:
                    61:c2:0f:2e:3c:07:65:2f:4b:61:d8:28:f0:9d:e3:
                    d7:9c:d5:4e:15:6d:1f:8b:37:9d:1b:6e:36:35:68:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:47:F4:FE:82:A5:14:66:05:CC:AD:DD:22:53:AD:9D:23:DB:A6:DA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w0f0_oKlFGYFzK3dIlOtnSPbpto.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:f7:bf:74:ca:b9:e5:e1:c6:2b:3f:58:e5:37:94:1b:cb:
         63:95:ba:6b:0d:5d:31:3d:cb:e7:ea:77:30:51:80:c6:1d:9f:
         f4:0f:74:8b:cb:bf:a5:74:44:44:2b:c9:e9:6d:0a:d8:58:61:
         fb:f6:6f:4a:99:ea:1d:0a:70:31:55:bd:97:46:a6:ab:35:c4:
         80:85:b3:28:64:19:f4:50:3a:0e:59:28:f1:31:eb:9e:f5:3f:
         11:c5:d6:13:0e:a1:13:b6:d7:56:82:92:19:2f:a3:7d:6c:e9:
         8c:72:6a:7c:e2:34:b8:09:fe:45:13:a3:ca:b6:1d:99:8d:4d:
         aa:d8:36:15:e9:28:7f:ab:ab:9a:7a:9c:d2:96:bd:dc:2d:aa:
         3f:1a:f0:31:18:9c:03:ee:0b:c9:3e:8e:62:f5:ba:e1:62:7f:
         7c:af:04:5d:f6:6c:2a:07:f5:f7:2f:e9:7e:e4:36:a5:59:42:
         75:a3:06:3a:c4:ad:0e:ec:3d:bb:10:53:d3:77:4c:e8:73:5d:
         c2:95:b4:4a:cf:28:53:bb:29:e6:da:b3:b6:05:0b:d7:0d:e0:
         37:4e:f1:f7:12:d4:25:11:cf:74:4a:f7:66:31:de:12:81:5d:
         29:b6:d5:4a:43:9a:c7:6a:a1:d8:30:1f:7e:d4:f9:6c:9e:f3:
         07:4c:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org