Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJlbcqHKktli4_6QbTXxPTPOpA4.roa
File:                     WJlbcqHKktli4_6QbTXxPTPOpA4.roa (raw, json)
Hash identifier:          zqPRLIirDzEsyRjUJbQViS4bLHdc6L6c8a2R0bAPZJs=
Subject key identifier:   58:99:5B:72:A1:CA:92:D9:62:E3:FE:90:6D:35:F1:3D:33:CE:A4:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0384
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJlbcqHKktli4_6QbTXxPTPOpA4.roa
Signing time:             Thu 01 Jun 2023 17:57:36 +0000
ROA not before:           Thu 01 Jun 2023 17:57:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.38.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=58995B72A1CA92D962E3FE906D35F13D33CEA40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:92:58:b8:af:85:2e:e7:fd:bc:50:02:e4:
                    eb:63:1b:2c:01:42:42:9d:d5:a3:ac:fc:f8:0a:f8:
                    f5:f1:a1:de:f2:a5:d5:16:86:5e:31:f8:17:3d:eb:
                    cc:34:01:96:8c:03:6a:8f:e8:ea:f8:0b:4f:e5:a4:
                    4c:a0:1a:67:27:b9:5d:61:04:58:d4:63:6c:17:6f:
                    f2:d2:39:13:02:36:be:b2:22:e5:89:e0:32:08:f0:
                    87:24:4f:c1:ab:70:3e:d2:28:22:fe:2f:12:5a:c1:
                    c9:ed:04:4a:e5:ea:fc:35:80:d5:4b:d7:1a:7a:0d:
                    d6:e6:a8:46:37:5b:7a:c4:bf:6c:0c:e2:79:92:89:
                    76:49:9c:3a:08:e6:f2:8c:43:f9:0d:84:95:35:15:
                    f7:a9:90:1b:18:69:00:cd:08:20:53:7c:a3:12:b5:
                    6e:7b:6c:ae:5e:df:8b:01:89:99:56:c6:af:62:06:
                    a9:30:f8:11:13:88:d7:cc:0e:03:dc:7e:ee:73:25:
                    d2:d9:e4:71:d7:8f:b9:21:e9:40:e9:0a:4e:36:ba:
                    98:94:f3:7d:7b:c7:30:d7:3e:cb:f7:12:46:d7:a1:
                    41:f7:ba:f1:fb:b2:e8:f7:9c:89:b4:08:f2:8a:2c:
                    72:66:e2:4e:ed:21:3b:67:64:de:52:5a:51:6c:af:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:99:5B:72:A1:CA:92:D9:62:E3:FE:90:6D:35:F1:3D:33:CE:A4:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WJlbcqHKktli4_6QbTXxPTPOpA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:cd:ff:27:1a:20:54:25:f5:db:39:6c:82:58:bf:13:8f:4f:
         28:7e:fd:48:38:49:44:b3:cb:ff:77:38:0a:ea:e5:15:20:25:
         9a:be:09:4d:fd:96:56:42:e2:ee:c1:dc:67:dd:5d:d5:0f:e8:
         90:8c:87:78:27:75:36:d3:a6:df:ba:9d:45:78:03:d1:2d:23:
         94:e0:09:3e:88:5e:9f:d8:aa:a7:79:57:55:c3:07:3a:56:b2:
         53:a7:fd:77:63:dd:ab:f6:8c:b2:0e:9a:36:ac:1e:d9:ea:26:
         a5:ca:fa:c6:3c:c5:98:66:a3:64:25:a3:68:2d:3c:ef:d1:53:
         5c:9d:d6:be:30:9e:35:91:86:2e:27:5a:c5:a9:f9:9b:97:60:
         e2:3e:e2:3a:42:3a:d0:ab:dc:47:0a:bf:e5:4e:cb:8b:d7:d7:
         f4:99:7e:18:d7:a8:7f:3c:66:18:f3:0c:f2:1c:24:be:c9:e9:
         eb:3d:05:73:12:d5:17:eb:87:fd:9c:c6:23:34:19:8e:1b:6d:
         bc:31:06:ff:ea:d0:ad:03:80:e3:67:cc:95:d3:e9:17:d6:07:
         20:7d:45:d9:12:89:55:ef:59:88:c9:b8:53:ae:43:9a:3e:bf:
         ce:7c:48:89:38:85:80:da:0d:b2:73:3b:09:62:c7:27:d0:32:
         c7:a4:a9:91
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU3MzZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDU4OTk1QjcyQTFDQTky
RDk2MkUzRkU5MDZEMzVGMTNEMzNDRUE0MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4bZJYuK+FLuf9vFAC5OtjGywBQkKd1aOs/PgK+PXxod7ypdUW
hl4x+Bc968w0AZaMA2qP6Or4C0/lpEygGmcnuV1hBFjUY2wXb/LSORMCNr6yIuWJ
4DII8IckT8GrcD7SKCL+LxJawcntBErl6vw1gNVL1xp6DdbmqEY3W3rEv2wM4nmS
iXZJnDoI5vKMQ/kNhJU1FfepkBsYaQDNCCBTfKMStW57bK5e34sBiZlWxq9iBqkw
+BETiNfMDgPcfu5zJdLZ5HHXj7kh6UDpCk42upiU8317xzDXPsv3EkbXoUH3uvH7
suj3nIm0CPKKLHJm4k7tITtnZN5SWlFsr8DFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUWJlbcqHKktli4/6QbTXxPTPOpA4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1dKbGJjcUhLa3RsaTRfNlFiVFh4UFRQT3BBNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaCYwDQYJKoZIhvcNAQELBQADggEBANrN/ycaIFQl9ds5bIJYvxOPTyh+
/Ug4SUSzy/93OArq5RUgJZq+CU39llZC4u7B3GfdXdUP6JCMh3gndTbTpt+6nUV4
A9EtI5TgCT6IXp/Yqqd5V1XDBzpWslOn/Xdj3av2jLIOmjasHtnqJqXK+sY8xZhm
o2Qlo2gtPO/RU1yd1r4wnjWRhi4nWsWp+ZuXYOI+4jpCOtCr3EcKv+VOy4vX1/SZ
fhjXqH88ZhjzDPIcJL7J6es9BXMS1Rfrh/2cxiM0GY4bbbwxBv/q0K0DgONnzJXT
6RfWByB9RdkSiVXvWYjJuFOuQ5o+v858SIk4hYDaDbJzOwlixyfQMsekqZE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org