Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/wZkmqqels9QCRUFfa28q4mHQ37s.roa
File:                     wZkmqqels9QCRUFfa28q4mHQ37s.roa (raw, json)
Hash identifier:          OE2fykib1O0EC+XXkGKSyCkb5umu8JisYtk6FAg59ZM=
Subject key identifier:   C1:99:26:AA:A7:A5:B3:D4:02:45:41:5F:6B:6F:2A:E2:61:D0:DF:BB
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       37
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/wZkmqqels9QCRUFfa28q4mHQ37s.roa
Signing time:             Thu 13 Apr 2023 09:52:35 +0000
ROA not before:           Thu 13 Apr 2023 09:52:35 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: Apr 13 09:52:35 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C19926AAA7A5B3D40245415F6B6F2AE261D0DFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:45:f8:a2:76:b8:f4:2c:ea:f2:1f:22:d5:
                    ca:31:b7:f2:6d:ec:95:8d:7f:1b:83:1b:92:32:ae:
                    48:b8:96:2b:10:44:34:5d:97:bf:2b:3e:32:06:3c:
                    93:16:47:5f:01:63:9d:00:cf:cb:36:5d:62:c0:84:
                    b8:f9:b1:85:55:b8:52:68:31:33:96:e7:ad:b9:d6:
                    3c:ee:7b:fd:2c:22:a6:c8:6d:b3:1e:85:2b:e5:0d:
                    cd:2d:8f:aa:bf:51:43:14:a7:aa:54:cc:b3:8a:2b:
                    87:94:67:30:45:e9:b7:bc:52:96:b1:27:2d:81:33:
                    2a:f2:14:08:89:8a:57:54:9b:3a:9e:0c:a3:ab:01:
                    3d:59:83:fa:4c:40:34:d5:49:cc:a3:b7:53:a9:7e:
                    0e:dc:ec:6e:cb:54:62:89:91:9d:29:b9:62:1c:30:
                    08:4a:59:6a:19:49:eb:d9:0e:16:d6:1d:c1:23:38:
                    27:d3:94:4c:34:dc:35:6f:65:26:86:85:ff:97:82:
                    ce:3b:d6:f2:65:2b:85:67:12:77:34:97:c9:0e:9c:
                    17:90:9d:9a:54:fa:91:eb:da:ff:8a:61:e1:7d:a8:
                    61:5d:5a:9b:78:6a:b6:18:c0:16:99:7f:0d:54:b4:
                    76:9e:ca:1b:67:72:f0:80:50:f3:fa:91:28:7b:df:
                    41:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:99:26:AA:A7:A5:B3:D4:02:45:41:5F:6B:6F:2A:E2:61:D0:DF:BB
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/wZkmqqels9QCRUFfa28q4mHQ37s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:3d:af:b2:2b:fc:19:3c:64:32:92:be:93:70:8f:65:21:9b:
         80:a2:b8:55:75:a8:2d:27:bb:ee:08:d4:6b:3a:8c:47:b4:e9:
         bd:bb:54:aa:f7:12:26:f2:54:f7:93:ea:3c:3f:14:8c:c2:04:
         cf:76:12:5c:96:d5:5f:c2:41:ef:e0:22:1a:e2:c0:9f:80:9d:
         19:61:b0:0b:01:a0:f6:1e:2b:b3:f4:a9:ea:37:f7:15:ae:01:
         24:59:2f:e1:40:df:ad:79:93:9b:00:b5:5d:80:8c:a4:95:a5:
         4d:a1:b9:2f:a1:a6:f0:33:e5:4a:1c:86:af:b6:d3:ce:84:ad:
         f6:d1:2c:dd:e0:ff:f6:f5:15:d3:e4:a8:d3:e7:dd:f1:21:4a:
         67:99:03:7a:d3:30:a6:75:51:82:1c:c3:59:9e:3b:64:45:49:
         39:db:8d:a4:f2:0a:58:37:95:90:36:93:4d:c3:a9:8e:c8:cb:
         c7:82:74:e0:e5:44:47:c2:93:6d:b8:d1:7a:3b:2b:d2:61:b5:
         06:c2:5a:2b:c4:7b:92:89:4a:3b:a6:f9:f1:5c:91:c1:4f:fd:
         44:45:2b:76:6d:3b:86:d0:97:51:b1:dc:83:03:42:8c:bb:8a:
         66:fe:96:6c:00:6e:0d:7c:d3:e9:27:42:c1:e0:49:73:d8:b1:
         64:fe:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org