Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa
File:                     wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa (raw, json)
Hash identifier:          SnLZiitZGfZw/6aUGhRN6pgDO9/d9vmVxpYV41DMYVE=
Subject key identifier:   C0:BE:66:7C:6A:68:D4:C6:89:1D:85:85:EC:24:71:41:FB:E1:0C:86
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0395
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa
Signing time:             Thu 01 Jun 2023 17:59:27 +0000
ROA not before:           Thu 01 Jun 2023 17:59:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:59:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C0BE667C6A68D4C6891D8585EC247141FBE10C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:d1:db:b9:21:22:63:1b:64:a8:47:7c:bb:
                    c9:2b:70:a9:31:d2:2f:c6:60:87:57:93:9e:29:86:
                    ff:6a:e1:fc:dd:8e:46:a1:c5:1c:8c:1c:12:3b:49:
                    91:71:be:de:25:d9:7a:97:bf:c5:63:c2:41:de:07:
                    5f:37:74:ae:08:28:6a:a5:fe:c0:cc:07:1a:0e:37:
                    5a:3e:2b:50:b9:18:88:73:6c:6c:bf:8a:c3:2c:4f:
                    29:5e:1b:87:bc:17:93:ec:41:20:c3:1f:ff:1f:9f:
                    28:0b:73:c1:76:01:56:41:08:7c:50:5b:14:f4:13:
                    1b:41:55:92:bc:f6:59:90:f0:ab:4d:e6:ce:ec:4b:
                    7a:f2:e4:5a:2e:97:01:41:41:69:c3:c8:c3:8c:5c:
                    c4:08:b9:a0:20:30:64:65:88:9c:dc:d0:72:09:0f:
                    30:b2:f3:a2:49:81:55:95:4b:96:48:c8:9c:35:41:
                    aa:ba:c5:6e:6a:85:ec:10:78:13:6e:fd:a9:24:f4:
                    09:aa:24:e7:bc:bb:dc:f7:59:c9:b1:d5:5e:b1:d9:
                    67:9e:71:41:51:8e:e6:77:7b:dd:25:08:70:c4:89:
                    38:57:49:13:67:fd:0e:8f:f3:fd:19:53:c7:25:0d:
                    59:80:41:d9:72:85:51:6c:de:fc:b6:ca:6b:a1:f9:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BE:66:7C:6A:68:D4:C6:89:1D:85:85:EC:24:71:41:FB:E1:0C:86
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wL5mfGpo1MaJHYWF7CRxQfvhDIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:17:23:4f:17:95:cc:5c:cc:ab:01:b5:1b:b6:3d:0f:49:f9:
         95:0c:4b:b4:06:32:e7:e1:ff:4a:ba:30:85:4a:52:18:f3:5b:
         3a:9e:61:83:12:fd:ab:84:6b:af:d4:91:92:40:2a:64:67:ac:
         fd:82:63:40:66:18:27:e3:4b:41:b1:f7:49:23:c2:e8:e2:24:
         55:78:5d:8b:10:31:85:89:10:f1:95:f0:00:ba:87:cf:1f:e6:
         97:7a:bb:42:f9:b0:ca:f0:c1:44:3a:cc:db:fc:7f:1c:a6:95:
         d8:30:6f:f2:bb:aa:12:93:63:d5:15:f2:c4:55:cc:0d:69:df:
         56:76:d4:ab:21:28:01:cf:38:c7:2a:9a:33:9e:95:99:fa:8a:
         cd:c7:8d:7a:57:ce:53:89:36:5b:7a:09:3b:b7:8e:f6:8b:c3:
         a3:2f:0b:d1:c3:fc:07:19:ee:f0:84:94:80:47:52:61:bb:b0:
         1d:fd:7b:b6:41:1a:4a:e2:97:c8:65:f3:89:75:3c:4e:6d:d7:
         3d:4c:cb:4d:d0:09:2c:70:ec:11:a3:49:89:a6:ab:50:45:29:
         9a:1f:bc:a6:d8:b5:a7:f4:1f:46:3c:9e:be:3a:ec:14:9a:f2:
         0b:c8:31:d2:57:85:11:1f:bc:e0:5b:70:d8:da:47:41:15:ae:
         d4:87:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org