Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WDKV67UxxZpK8gDw7QK8cRGA1EY.roa
File:                     WDKV67UxxZpK8gDw7QK8cRGA1EY.roa (raw, json)
Hash identifier:          Lkki06WhWA+XW03rq7RvSfyndFYSqu+dQD61BZXyDp0=
Subject key identifier:   58:32:95:EB:B5:31:C5:9A:4A:F2:00:F0:ED:02:BC:71:11:80:D4:46
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       F7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WDKV67UxxZpK8gDw7QK8cRGA1EY.roa
Signing time:             Fri 01 Sep 2023 01:28:51 +0000
ROA not before:           Fri 01 Sep 2023 01:28:51 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        116.118.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:28:51 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=583295EBB531C59A4AF200F0ED02BC711180D446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:4f:e5:10:14:10:ea:af:1e:9b:86:c2:0a:
                    be:3c:be:0d:86:fd:6c:df:07:e9:9c:ee:29:fd:bc:
                    65:3b:01:6c:26:9b:3d:ad:4c:56:1b:f1:14:5b:5c:
                    0f:9b:4e:03:f7:c5:eb:f2:e8:08:0b:b4:c9:82:c3:
                    a8:72:e4:0a:71:65:c6:05:63:f1:6b:7d:25:b0:ad:
                    c2:1e:81:a5:ea:15:78:92:df:09:50:74:b4:3c:b8:
                    70:cd:85:87:83:9f:22:ab:95:57:ed:6a:e8:5a:d1:
                    d3:dc:2f:5e:c2:f0:a1:5a:50:33:66:1b:d5:70:3c:
                    78:28:3d:82:b9:cf:b7:8a:5d:cb:7b:11:90:ef:5f:
                    20:ad:2a:29:95:2b:67:46:3e:36:65:96:ca:15:80:
                    5b:3c:3a:54:7c:19:10:34:77:8a:18:5b:bb:0a:18:
                    da:eb:93:55:c7:8e:3b:16:5e:93:af:99:48:be:a3:
                    5b:7b:b2:53:8d:3f:d9:8d:c9:2f:e3:c8:f1:62:88:
                    62:4b:40:ff:17:7a:e3:1c:a1:73:82:92:de:3b:cb:
                    07:4d:7a:19:a5:86:3e:3b:2b:2c:cd:a4:c4:6c:0e:
                    c7:e9:74:36:5e:d0:a0:d6:3e:73:da:01:63:34:17:
                    1a:5c:40:0e:c5:72:9c:8d:43:a8:b0:a1:d2:5d:21:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:95:EB:B5:31:C5:9A:4A:F2:00:F0:ED:02:BC:71:11:80:D4:46
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WDKV67UxxZpK8gDw7QK8cRGA1EY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.118.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:f6:38:55:47:a6:10:9f:ff:5a:98:76:f4:53:9c:2e:5d:
         1c:de:db:81:87:88:f6:7b:46:6d:ca:59:97:b3:3d:d3:87:7d:
         42:de:ff:59:d2:17:ff:44:a6:0a:df:e3:93:b1:e0:ee:db:a1:
         87:39:43:0c:3f:5e:2f:44:7e:35:45:e0:60:66:eb:fc:e7:9e:
         5e:47:2b:cf:fa:68:47:bd:91:dd:f5:1f:72:aa:48:c0:01:cc:
         de:f4:76:b4:39:0e:b9:a2:85:dd:f0:c2:d6:c6:11:0b:ee:e2:
         76:67:b5:00:56:b2:59:5a:cf:7e:b0:ca:ee:d9:2b:63:44:df:
         6e:76:00:88:bf:c5:5b:66:f6:a2:a8:59:8f:b1:b2:5b:52:bf:
         5d:4c:48:c2:16:e2:e1:64:6c:60:56:1c:0c:b3:99:c6:05:db:
         4c:bc:fe:6c:97:e6:53:1f:2c:30:fe:27:5b:78:78:3b:e8:5f:
         8a:6f:e3:51:a4:80:c3:54:51:ba:fd:7c:15:50:06:34:5b:9c:
         7c:1c:94:70:40:a2:b9:3c:f8:66:03:5b:e0:3f:25:fb:8e:b4:
         54:f6:06:80:5a:63:60:8a:35:73:29:43:11:f9:17:6a:53:21:
         f9:9e:2d:05:d8:89:3b:ca:97:56:83:73:ba:ab:c4:79:8a:f7:
         5d:55:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org