Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ygm_zqH36Fv4biPpD9su9Cv3Gto.roa
File:                     ygm_zqH36Fv4biPpD9su9Cv3Gto.roa (raw, json)
Hash identifier:          bqFuUytIAGQ3Ei4jbLG4Ux33/xMObItP2W1PPh0QLTQ=
Subject key identifier:   CA:09:BF:CE:A1:F7:E8:5B:F8:6E:23:E9:0F:DB:2E:F4:2B:F7:1A:DA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       45
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ygm_zqH36Fv4biPpD9su9Cv3Gto.roa
Signing time:             Mon 27 Mar 2023 16:04:22 +0000
ROA not before:           Mon 27 Mar 2023 16:04:22 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:04:22 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=CA09BFCEA1F7E85BF86E23E90FDB2EF42BF71ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:8d:56:d8:74:81:30:ea:cc:13:6b:26:33:
                    16:58:07:57:6e:49:93:ac:6d:f3:ca:be:c6:b0:a0:
                    1a:75:a9:4b:f5:82:44:89:83:17:c5:0a:f1:ed:e5:
                    8a:7d:16:e4:71:44:3a:4f:99:d5:6d:85:56:4f:ff:
                    d9:22:52:d2:86:1e:c6:4d:77:37:76:62:93:88:62:
                    02:6f:3f:97:53:db:f8:71:6d:a3:9e:3d:c9:2d:f9:
                    15:c5:45:21:c2:42:30:ff:09:83:a5:2b:22:b6:49:
                    a2:fc:9f:67:88:e9:ef:40:90:15:19:15:1f:da:8b:
                    14:65:78:df:2a:4e:41:ff:37:aa:b9:fc:5a:7e:13:
                    fc:01:82:38:a7:13:54:59:67:40:c1:6d:ba:66:b3:
                    91:46:25:d4:a8:98:cd:d0:6e:59:82:eb:bf:69:3e:
                    d5:93:89:ed:08:0a:82:b2:90:9d:f4:99:e9:17:1d:
                    a0:d1:cb:d9:2c:a3:18:f6:77:93:fa:5d:fe:58:16:
                    25:c8:f1:3b:76:58:85:f4:43:1d:91:63:80:19:d8:
                    c1:38:f4:77:39:42:d7:38:48:c7:25:4a:12:13:bc:
                    e9:e6:f7:da:49:0a:ca:11:1b:1a:8b:9d:49:89:32:
                    88:21:de:c4:1f:25:e2:01:4a:bb:ee:1b:68:e7:d2:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:09:BF:CE:A1:F7:E8:5B:F8:6E:23:E9:0F:DB:2E:F4:2B:F7:1A:DA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ygm_zqH36Fv4biPpD9su9Cv3Gto.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:d9:9f:be:fc:31:2d:9c:bf:ac:ac:50:12:5d:f8:59:4e:83:
         a7:24:fb:47:81:2a:c9:b9:bd:ce:ae:2a:b3:87:a7:88:a7:04:
         78:0b:54:8b:58:81:29:60:46:73:4f:30:0a:93:c3:0e:78:14:
         1b:4a:49:e6:41:4a:d5:05:b6:73:a5:89:69:48:12:47:cb:39:
         38:11:3f:5f:31:0c:e0:86:af:3c:1e:62:99:e1:a8:ac:d4:b7:
         50:14:fa:5b:40:a7:ae:52:a9:59:61:3a:35:dd:75:67:6c:ac:
         65:c6:1b:5a:b4:7c:1d:13:97:55:d5:ec:58:1b:2c:ca:e5:e5:
         aa:7e:68:08:95:c9:95:57:ca:fa:ff:a2:07:0c:78:17:c2:b0:
         68:e7:43:d3:d5:94:d4:73:5d:0f:c9:c3:e9:94:1e:18:cc:3a:
         1c:12:65:0f:30:69:70:24:f1:22:36:d9:56:cb:42:46:bd:2a:
         28:62:9f:09:ab:1c:8f:50:f4:54:7f:e7:de:11:08:88:9f:5a:
         86:c6:05:28:70:6e:c8:be:67:67:6b:42:a8:33:7b:56:c7:0a:
         d8:2a:be:86:43:64:84:d3:42:27:ac:c7:1d:df:ff:95:ee:3f:
         1f:a2:4e:d1:16:00:60:23:9f:34:ae:91:f8:ed:07:e2:22:f9:
         87:23:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org