Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zvHfOsZ2mfyCWF76EpTjrKjd4E8.roa
File:                     zvHfOsZ2mfyCWF76EpTjrKjd4E8.roa (raw, json)
Hash identifier:          ecrSO4Gxs43gM+s7Fi62cpSffq7c0OkPntM5+4t4Eq4=
Subject key identifier:   CE:F1:DF:3A:C6:76:99:FC:82:58:5E:FA:12:94:E3:AC:A8:DD:E0:4F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0210
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zvHfOsZ2mfyCWF76EpTjrKjd4E8.roa
Signing time:             Tue 30 May 2023 16:29:32 +0000
ROA not before:           Tue 30 May 2023 16:29:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.100.192.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CEF1DF3AC67699FC82585EFA1294E3ACA8DDE04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:35:eb:3f:51:c0:35:38:6f:d3:2c:4f:f1:
                    41:dd:37:d5:1a:52:74:95:60:4e:1a:83:e9:d4:c2:
                    b9:ca:7a:af:33:3f:63:0a:f3:35:34:2e:92:f1:26:
                    5d:7b:86:16:fc:a5:97:97:a9:69:e8:32:35:ad:d9:
                    eb:56:f6:96:68:2a:e7:fd:a1:b4:75:94:9c:1d:2b:
                    00:bc:0d:ca:71:ad:d6:99:9a:eb:6a:8f:d9:97:bb:
                    4f:8d:97:1b:ac:ee:56:1e:d3:d8:eb:fd:52:06:e5:
                    10:d5:3b:03:f0:a1:4a:b1:f4:e0:a4:99:9d:2a:0b:
                    0a:5c:a4:e3:77:ec:ef:ed:34:02:be:6c:05:24:cb:
                    f3:d1:40:46:71:91:a4:98:5d:62:13:1d:7f:ae:1c:
                    b4:8b:09:09:b7:12:36:f4:65:c4:99:3b:d6:da:91:
                    55:4d:30:5a:5b:2b:07:6d:06:5d:de:b7:d9:22:46:
                    85:f3:96:03:7b:fe:66:ca:e2:a0:f4:1c:8b:58:8b:
                    2c:d9:81:d9:3f:fc:4e:33:30:21:6f:db:c8:56:86:
                    71:86:e5:9f:6a:ff:4f:3b:e1:23:5f:f2:17:e4:e7:
                    e8:7b:b1:68:2a:15:9e:d4:d8:5e:db:b1:f2:1f:55:
                    b6:67:98:a7:e4:ee:25:1a:97:fa:7e:80:42:8d:f0:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:DF:3A:C6:76:99:FC:82:58:5E:FA:12:94:E3:AC:A8:DD:E0:4F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zvHfOsZ2mfyCWF76EpTjrKjd4E8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.100.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:6a:76:c2:aa:52:28:53:f1:6c:89:cf:64:e7:b0:c3:f1:9d:
         05:96:8d:ca:d0:20:be:75:0f:31:f7:22:49:10:51:d8:d9:54:
         1b:9a:0a:3c:38:b4:94:c0:41:8d:63:6a:d2:15:9f:8c:ba:66:
         48:33:0f:bc:34:12:93:27:52:2d:cd:58:43:b4:2c:4b:35:52:
         8c:cc:c5:fe:1b:ab:91:99:c0:8e:b1:81:5e:bb:60:b0:20:ae:
         3d:19:56:35:88:1f:89:76:75:21:3e:da:95:2e:8d:d2:c0:c1:
         85:c6:4d:44:b0:ef:ce:3d:98:81:9f:f9:17:8e:96:5b:8b:66:
         dd:61:6c:9e:72:2f:6e:89:a8:03:b2:96:61:f3:f5:74:36:c8:
         0a:70:42:6e:95:78:59:97:40:43:63:42:a1:32:13:ef:7b:d1:
         89:ae:06:1f:17:6f:04:9d:3a:3d:6d:70:f8:15:a9:a3:3c:05:
         0b:94:6e:be:a2:e9:b2:34:cb:e3:64:1d:6f:62:3f:7f:f4:6f:
         41:6e:d6:2f:8e:37:b7:84:11:38:6d:fa:1b:31:ba:40:66:24:
         89:a1:cc:ee:73:91:d0:d6:4a:0a:74:e9:ee:6f:6b:66:9d:80:
         18:b5:35:1c:f3:9a:d3:0c:21:a4:8a:f5:73:72:13:98:27:a8:
         7a:e1:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:36 2024 by rpki-client on console-fra.rpki-client.org