Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8WNLE7U2KqmiSrxeoEZAsWfBv38.roa
File:                     8WNLE7U2KqmiSrxeoEZAsWfBv38.roa (raw, json)
Hash identifier:          rsps4YaL6mgafGf0/UmUQVwh57KsODo49o/CeL2txFo=
Subject key identifier:   F1:63:4B:13:B5:36:2A:A9:A2:4A:BC:5E:A0:46:40:B1:67:C1:BF:7F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8WNLE7U2KqmiSrxeoEZAsWfBv38.roa
Signing time:             Tue 30 May 2023 16:29:25 +0000
ROA not before:           Tue 30 May 2023 16:29:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F1634B13B5362AA9A24ABC5EA04640B167C1BF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:e6:39:8e:1d:7c:f5:32:c1:97:08:2d:1b:
                    0c:76:c6:e1:41:72:e7:f6:98:8d:a8:d1:8a:69:8c:
                    25:9e:87:07:0d:8c:fe:85:51:38:ad:9e:47:ec:4a:
                    18:2f:7c:f8:e3:e3:b6:d8:60:6e:53:f0:09:34:82:
                    9a:64:63:2a:01:75:ca:71:34:7a:e4:f7:b5:1d:1f:
                    fc:18:6a:7a:43:94:27:8e:cb:81:f6:04:63:2f:51:
                    c9:c6:de:61:5a:d8:8e:8a:af:65:d2:6a:51:be:7d:
                    02:6b:90:ad:7c:92:1c:f1:be:7e:14:54:17:a5:a6:
                    46:c2:d7:66:ea:84:4e:10:63:65:e9:4a:e0:43:41:
                    eb:82:e3:c3:fc:bb:96:e9:1e:2f:8b:9f:6a:10:f1:
                    08:4b:fa:1e:90:a7:dc:7f:2b:85:7e:20:75:aa:7b:
                    bb:0d:f2:f9:4d:c6:12:6a:08:73:fe:ec:77:4d:aa:
                    e7:b1:3c:d7:35:e9:a6:bd:4a:0e:fd:ac:68:6d:74:
                    ea:cb:6e:e6:35:ee:cf:d6:6d:9a:ab:27:ef:6f:56:
                    c7:6d:6d:35:c5:06:dc:67:98:e3:0f:b1:31:bc:03:
                    eb:27:c6:44:96:f8:69:48:a8:cd:58:be:48:ab:9c:
                    7f:4b:62:27:c3:cb:c1:66:fd:5c:97:39:45:fb:3e:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:4B:13:B5:36:2A:A9:A2:4A:BC:5E:A0:46:40:B1:67:C1:BF:7F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8WNLE7U2KqmiSrxeoEZAsWfBv38.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:41:59:7b:fc:fc:a5:16:a4:78:1e:0a:79:9f:f3:16:63:
         2b:17:f9:bd:e3:ef:a6:ae:76:e1:97:4d:23:cc:cd:f8:95:53:
         cb:d8:d5:25:31:5e:a3:3c:3b:13:68:bf:0c:10:86:82:dd:c0:
         d0:e7:0a:d6:7a:3e:97:74:38:7f:fb:d7:48:e3:85:11:72:03:
         de:46:08:db:6b:6d:dc:22:b3:b5:12:0d:3e:eb:e3:5d:b2:d1:
         bb:53:39:02:22:ad:59:27:f4:44:99:19:bf:af:1c:f8:b6:c2:
         f9:ae:c0:cd:ef:7c:c5:be:dc:09:dc:55:d9:3a:7d:bc:1b:25:
         e0:73:c5:4d:29:fd:76:91:ac:22:30:b8:8c:dd:e3:94:b3:51:
         1c:16:d1:bd:49:62:42:0b:62:0a:30:55:e7:1e:a3:90:cf:2a:
         5d:3a:42:14:41:01:6c:44:9b:dd:3d:fb:fa:55:5d:f5:90:0a:
         60:8e:99:14:74:47:e2:fb:c0:49:5c:22:8d:fb:ac:2f:1f:83:
         c5:75:2d:69:ed:8f:7a:35:7c:a2:7c:bf:6c:ba:ac:0d:95:53:
         16:56:54:fa:29:76:46:6d:12:b0:2a:48:0f:69:7e:52:ad:ca:
         57:d2:2f:6f:c0:af:93:4c:1c:91:99:25:13:5c:7c:1c:47:1c:
         b7:94:a5:82
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjI5MjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEYxNjM0QjEzQjUzNjJB
QTlBMjRBQkM1RUEwNDY0MEIxNjdDMUJGN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMkOY5jh189TLBlwgtGwx2xuFBcuf2mI2o0YppjCWehwcNjP6F
UTitnkfsShgvfPjj47bYYG5T8Ak0gppkYyoBdcpxNHrk97UdH/wYanpDlCeOy4H2
BGMvUcnG3mFa2I6Kr2XSalG+fQJrkK18khzxvn4UVBelpkbC12bqhE4QY2XpSuBD
QeuC48P8u5bpHi+Ln2oQ8QhL+h6Qp9x/K4V+IHWqe7sN8vlNxhJqCHP+7HdNquex
PNc16aa9Sg79rGhtdOrLbuY17s/WbZqrJ+9vVsdtbTXFBtxnmOMPsTG8A+snxkSW
+GlIqM1YvkirnH9LYifDy8Fm/VyXOUX7PvBHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU8WNLE7U2KqmiSrxeoEZAsWfBv38wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzhXTkxFN1UyS3FtaVNyeGVvRVpBc1dmQnYzOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUBSCAwDQYJKoZIhvcNAQELBQADggEBAC9eQVl7/PylFqR4Hgp5n/MWYysX
+b3j76auduGXTSPMzfiVU8vY1SUxXqM8OxNovwwQhoLdwNDnCtZ6Ppd0OH/710jj
hRFyA95GCNtrbdwis7USDT7r412y0btTOQIirVkn9ESZGb+vHPi2wvmuwM3vfMW+
3AncVdk6fbwbJeBzxU0p/XaRrCIwuIzd45SzURwW0b1JYkILYgowVeceo5DPKl06
QhRBAWxEm909+/pVXfWQCmCOmRR0R+L7wElcIo37rC8fg8V1LWntj3o1fKJ8v2y6
rA2VUxZWVPopdkZtErAqSA9pflKtylfSL2/Ar5NMHJGZJRNcfBxHHLeUpYI=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org