Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WVd6BWgfen8pq6D8AGZrr1dh8nc.roa
File:                     WVd6BWgfen8pq6D8AGZrr1dh8nc.roa (raw, json)
Hash identifier:          juegIgF/Eu15rCfguKTzUgX7oYi3/8T2AHUbMR9VOKA=
Subject key identifier:   59:57:7A:05:68:1F:7A:7F:29:AB:A0:FC:00:66:6B:AF:57:61:F2:77
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0305
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WVd6BWgfen8pq6D8AGZrr1dh8nc.roa
Signing time:             Thu 01 Jun 2023 16:05:26 +0000
ROA not before:           Thu 01 Jun 2023 16:05:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.64.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=59577A05681F7A7F29ABA0FC00666BAF5761F277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:f8:d1:ae:1e:e5:a1:76:53:e4:7c:9b:d6:
                    56:94:08:5d:40:66:42:1e:98:c0:54:9d:3c:48:79:
                    6a:52:97:ad:bb:c4:0e:1d:b3:62:32:af:46:6d:21:
                    aa:c3:47:c1:41:a5:69:a0:8c:a2:86:6a:99:d8:e3:
                    df:0f:61:e8:d3:73:05:41:e5:c6:1d:6f:2c:d5:06:
                    49:f8:90:21:75:d9:1e:2f:a7:74:39:74:d9:5e:84:
                    97:68:ad:da:91:78:2e:f4:da:fb:52:26:af:fe:38:
                    0c:ee:bb:e0:f1:58:d2:59:35:a1:b1:5e:fd:77:3d:
                    e5:a6:25:92:19:6a:66:fe:3f:75:48:95:df:46:ec:
                    6f:3f:51:4d:54:9e:43:47:04:64:58:bc:05:01:88:
                    5b:a9:33:89:fd:45:9b:7f:f4:12:c2:20:c5:52:bf:
                    5e:06:3e:e7:1c:44:78:0b:da:83:ef:c0:e8:24:70:
                    c1:1a:ec:39:8f:95:dc:47:31:bc:c4:8c:2e:94:30:
                    56:20:81:ea:3c:33:87:28:47:a3:de:af:95:3e:ac:
                    13:9b:2f:bf:7b:11:45:f3:3b:fb:8c:af:d9:46:5a:
                    41:4a:a1:81:73:6b:bc:e4:86:e5:23:7f:3d:03:6c:
                    58:51:29:f3:87:2a:6e:06:77:09:db:91:d9:ee:17:
                    24:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:57:7A:05:68:1F:7A:7F:29:AB:A0:FC:00:66:6B:AF:57:61:F2:77
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WVd6BWgfen8pq6D8AGZrr1dh8nc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:09:6a:85:2c:e5:2b:e9:ce:6c:d5:4e:16:d5:56:d6:3e:
         0a:67:41:2a:bc:f2:30:46:bf:f0:8c:e0:d4:5a:f1:36:1a:d2:
         57:bb:88:b8:ff:7e:9d:74:b4:3e:27:9e:9c:e7:05:5a:d7:a0:
         ee:5b:81:cb:74:35:5b:bd:e8:fb:d2:a0:1d:66:2c:29:94:89:
         19:8b:89:42:be:0d:9b:4f:b4:d8:8f:13:5e:75:79:dd:cb:e2:
         8d:b8:63:8c:45:5e:b1:23:41:fb:57:be:23:8e:35:3e:74:05:
         18:85:53:d7:9c:bd:0f:10:50:08:2a:93:0c:92:31:19:c6:6d:
         e6:00:61:2d:2b:2b:26:63:3a:b4:e2:f2:92:e9:ae:62:2e:40:
         ea:04:ad:9d:7a:84:94:49:fd:6d:f1:4a:8d:ad:53:73:49:d8:
         c7:fc:2b:17:12:7b:56:81:08:a3:a4:a8:90:a2:fc:3b:f2:cf:
         7c:51:db:75:5b:5a:70:32:a6:f3:8b:a9:e1:9f:21:74:9d:a9:
         69:20:b1:d6:80:67:ea:27:52:44:9e:53:c3:12:e8:71:11:41:
         a7:7c:f7:e2:ac:44:ec:07:fc:b3:d5:14:d0:1c:18:16:ae:d7:
         8b:7d:b2:96:51:ee:37:55:45:eb:07:ea:21:d1:d8:22:94:93:
         13:95:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org