Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wl5ump5iRF_VNs1sYdaoeD20MBE.roa
File:                     wl5ump5iRF_VNs1sYdaoeD20MBE.roa (raw, json)
Hash identifier:          BSOqJryXOLKuTgr6c7tiV+c0tjK7FhRu88QWxQZT2xQ=
Subject key identifier:   C2:5E:6E:9A:9E:62:44:5F:D5:36:CD:6C:61:D6:A8:78:3D:B4:30:11
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       040A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wl5ump5iRF_VNs1sYdaoeD20MBE.roa
Signing time:             Tue 06 Jun 2023 16:05:52 +0000
ROA not before:           Tue 06 Jun 2023 16:05:52 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1034 (0x40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:52 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C25E6E9A9E62445FD536CD6C61D6A8783DB43011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:03:ce:9e:f2:2f:18:d6:37:45:8c:09:0c:
                    de:e3:8d:57:c1:a2:75:ce:48:83:1e:c2:f2:92:00:
                    e4:f8:a0:b8:44:1d:5b:6d:0a:45:51:d7:b4:7d:97:
                    52:a6:e7:72:5a:7b:28:31:97:32:e0:02:d8:82:9b:
                    ae:5c:f0:f1:00:d3:4a:ad:0d:45:0b:35:46:bc:9d:
                    0d:ad:fb:d1:36:3c:a5:fc:22:17:6c:b2:80:fb:a2:
                    58:2f:31:d6:17:08:e6:ba:2a:90:63:c2:7f:75:62:
                    d3:9e:c1:da:1a:8f:4b:fa:ab:c1:5c:fb:ba:95:73:
                    f2:de:2c:f1:63:31:05:4c:bc:de:37:af:00:97:bf:
                    a8:25:a4:b0:a7:c3:dd:ac:d9:07:40:a3:04:9d:52:
                    ac:41:93:43:e2:db:21:70:8b:bd:6a:10:a1:be:6c:
                    de:77:77:12:a8:c8:e9:de:4b:c8:76:b1:84:c9:e1:
                    75:fe:cc:9e:56:97:76:a5:3c:11:e7:d6:78:5b:af:
                    2b:15:3d:59:c0:6c:d2:c5:cf:a2:50:64:fc:09:68:
                    ef:8d:27:fd:25:cb:1f:17:4f:04:8d:13:09:05:d2:
                    79:41:4a:e4:37:61:b8:d7:a7:70:d3:dd:c5:95:b6:
                    d5:f5:bf:59:30:1e:38:60:a3:c3:05:14:78:0b:ee:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5E:6E:9A:9E:62:44:5F:D5:36:CD:6C:61:D6:A8:78:3D:B4:30:11
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wl5ump5iRF_VNs1sYdaoeD20MBE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:f8:02:3f:38:ac:9a:65:24:30:dc:ed:42:d1:22:1c:f4:
         fb:47:26:fb:cc:d5:14:2c:53:85:aa:b1:85:19:7e:31:dc:b8:
         53:7a:ca:0c:c1:34:db:64:3b:39:67:6d:ab:5b:c9:2a:6c:07:
         f7:97:2a:05:0b:2f:7e:4b:40:81:69:ef:04:d9:2a:0f:c4:33:
         5a:38:90:7f:bd:ae:4d:67:41:0d:88:23:94:97:96:37:26:0d:
         9d:07:3e:ff:da:f0:2c:71:c7:32:28:5c:20:3f:4c:64:bc:0a:
         5e:12:96:ea:51:97:0b:f9:94:e3:9c:d2:ee:7e:ec:19:02:db:
         b9:7f:9d:47:f1:5b:fa:5e:1d:36:6e:f6:47:7f:c9:49:bc:9a:
         1b:26:87:3d:47:26:62:f2:db:1d:1a:ce:4f:20:41:09:db:c2:
         fd:48:7c:4c:7a:c5:87:12:73:f0:be:e9:74:6f:ab:49:5a:59:
         22:b8:fb:f3:7b:75:00:1d:46:4e:a4:44:97:67:2f:7b:a4:20:
         fd:eb:6f:5c:a1:ba:2e:61:ba:68:eb:82:00:c2:66:3a:84:a0:
         10:32:53:4e:c9:a8:32:a0:e5:c4:e9:9c:8c:50:49:d4:ae:81:
         e5:dc:49:e5:e0:65:cc:f9:d6:0b:dd:9d:03:7a:e7:42:dd:37:
         04:2f:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:36 2024 by rpki-client on console-fra.rpki-client.org