Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/woTe-RV8_zwZ3tbOsZJpKDOdmgk.roa
File:                     woTe-RV8_zwZ3tbOsZJpKDOdmgk.roa (raw, json)
Hash identifier:          YYOr6IVGDr9lvhvawrJPY36skqeugLqltekslXNgts8=
Subject key identifier:   C2:84:DE:F9:15:7C:FF:3C:19:DE:D6:CE:B1:92:69:28:33:9D:9A:09
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0491
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/woTe-RV8_zwZ3tbOsZJpKDOdmgk.roa
Signing time:             Thu 27 Jul 2023 16:46:05 +0000
ROA not before:           Thu 27 Jul 2023 16:46:05 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.72.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:05 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C284DEF9157CFF3C19DED6CEB1926928339D9A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:65:ec:f2:54:dd:8b:3e:fa:10:55:5e:8d:
                    18:d5:cd:b2:98:7f:7d:31:dd:df:83:0b:0b:23:e8:
                    8b:a4:c6:04:1b:c8:d5:af:c5:6e:a8:8b:ab:0b:83:
                    a2:3f:e7:2f:41:fc:50:29:19:f1:d3:43:6c:12:2d:
                    8d:02:28:a3:03:03:d3:b0:54:0b:22:db:c7:fa:ce:
                    17:3b:ac:2d:0d:fc:6b:6f:83:ff:bc:e8:2b:25:0d:
                    a8:fb:79:86:3e:fc:b2:72:2d:55:29:24:0f:e3:db:
                    7b:02:65:b4:e5:da:35:55:b9:05:30:d2:29:13:d1:
                    b9:a1:e8:f7:94:78:fb:e3:41:e6:f9:58:00:c5:fb:
                    42:5e:ae:f9:b8:eb:32:82:19:e5:72:34:a3:ec:49:
                    0a:9d:1e:a2:1e:b2:a8:86:a8:80:b4:0b:41:74:73:
                    de:85:0c:72:c0:58:02:44:cb:b5:4b:21:0b:ce:95:
                    1d:d4:cf:f7:cd:9c:da:e6:13:e5:e0:15:ae:91:1c:
                    67:b2:af:7b:8b:ab:1b:70:6d:54:0f:6b:be:9e:1d:
                    01:80:6b:d2:5a:4b:53:e6:9d:b5:69:fa:6d:23:27:
                    90:a3:62:6d:66:d7:c7:f0:ca:d3:8d:c4:fc:7d:5f:
                    42:eb:8f:7d:24:b0:d9:9c:bf:15:a6:0d:73:ce:89:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:84:DE:F9:15:7C:FF:3C:19:DE:D6:CE:B1:92:69:28:33:9D:9A:09
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/woTe-RV8_zwZ3tbOsZJpKDOdmgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c0:df:74:55:50:7d:4d:30:27:83:7c:1c:4c:48:50:9f:27:86:
         d6:07:45:fd:b0:b3:a8:3b:dc:98:5d:00:74:90:39:dc:9c:7e:
         37:5f:6c:66:7a:37:8c:15:60:5e:1b:5e:1a:61:7f:2b:a4:63:
         be:f0:c3:0e:41:75:15:7d:55:0a:20:91:c2:4f:d2:28:33:ec:
         f4:00:34:53:fe:fe:24:46:8b:e8:3d:3d:45:1f:b8:fc:e2:42:
         28:30:f9:43:a2:91:dc:a2:ce:d8:07:27:04:2d:fe:54:ad:77:
         f2:8c:ae:70:16:27:de:3a:d7:58:29:0c:9c:72:99:9f:34:3f:
         d3:87:3c:be:29:aa:4b:fa:91:3e:eb:fd:0f:e1:90:a4:ea:bf:
         e1:b3:0c:78:f9:b3:79:46:84:a3:d2:1e:ac:8f:2f:62:b9:54:
         dc:e7:f4:01:88:b0:0e:dd:1f:13:c6:ac:c4:c6:10:ac:00:1e:
         a0:ac:bd:a2:f1:67:dd:6a:56:4b:2c:c1:21:93:df:4e:50:b7:
         7c:f5:a2:d8:83:c7:ff:4f:1c:26:e9:e1:3c:cc:77:be:3e:c9:
         1e:e0:45:92:f2:fc:75:55:5f:5c:55:d5:1b:20:93:30:1d:3e:
         28:e2:6e:af:41:72:40:87:ae:f8:25:75:0a:0f:11:ac:f9:08:
         e0:92:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org