Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/WGYw9P5N4QMAOqwvhVDcgU697D4.roa
File:                     WGYw9P5N4QMAOqwvhVDcgU697D4.roa (raw, json)
Hash identifier:          o3JsFT8AZNxfQ3rp1T/HNKlK7U6Af/0Hg966ILWdO84=
Subject key identifier:   58:66:30:F4:FE:4D:E1:03:00:3A:AC:2F:85:50:DC:81:4E:BD:EC:3E
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       19
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/WGYw9P5N4QMAOqwvhVDcgU697D4.roa
Signing time:             Tue 30 May 2023 06:05:25 +0000
ROA not before:           Tue 30 May 2023 06:05:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     17958
IP address blocks:        220.247.184.0/21 maxlen: 32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 01:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: May 30 06:05:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=586630F4FE4DE103003AAC2F8550DC814EBDEC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:66:4e:be:29:14:22:30:a8:4f:b0:66:b4:
                    28:b2:11:94:d9:00:f9:69:59:a1:71:ed:4b:7e:7d:
                    bd:c9:92:af:4f:8f:1d:32:68:cb:9a:03:b1:cf:8e:
                    1d:5c:44:89:8e:d3:6c:bc:25:60:d3:9c:ec:80:0a:
                    9b:73:97:36:70:e2:1d:2c:ee:6c:0b:f4:50:7f:a3:
                    81:8f:39:80:d7:0b:9f:3f:0d:af:10:81:1b:b1:de:
                    d1:85:c0:bc:ca:f6:58:21:f4:1c:e4:f6:e8:74:76:
                    70:ac:64:46:f9:f9:96:ec:15:c2:b9:c0:57:fa:64:
                    70:c5:09:83:e4:f2:22:32:d2:e2:5a:ca:d5:0c:47:
                    e8:64:8c:a7:bb:0b:ee:af:73:68:ca:39:ef:69:95:
                    22:1c:b2:d0:05:16:b3:51:e9:bc:e9:8e:ff:8a:82:
                    56:9c:c7:13:f0:23:d4:6f:00:2b:d8:6e:57:b0:c1:
                    00:31:38:81:54:4b:1f:b2:c8:e0:a5:e0:82:22:d6:
                    61:ea:02:f8:76:bd:58:0e:ff:44:8b:e0:8d:71:0e:
                    00:64:85:6c:7a:54:c8:bb:64:b3:20:bf:16:33:f3:
                    5c:ba:ae:13:72:4a:c2:80:f7:89:4c:c4:b6:73:1e:
                    63:07:8c:35:52:78:10:9b:e5:bf:da:5d:12:0f:e2:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:66:30:F4:FE:4D:E1:03:00:3A:AC:2F:85:50:DC:81:4E:BD:EC:3E
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/WGYw9P5N4QMAOqwvhVDcgU697D4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:d9:f9:19:5b:db:5d:99:9b:34:ae:19:0b:2b:4e:6e:ac:
         ef:45:e4:8e:cb:05:d0:f9:8f:71:2e:a1:c2:9f:5d:d2:9e:5e:
         42:9f:8f:d2:4c:55:d9:5e:ca:8a:8b:77:55:1d:24:b2:01:31:
         6c:8e:81:61:74:54:67:db:d7:ec:63:32:0a:49:fa:bd:3a:f1:
         1f:69:c3:e6:2a:18:f1:68:59:12:47:2a:81:28:bf:20:59:62:
         ca:29:cd:f2:22:4e:64:df:ca:6e:3d:78:e3:42:c9:f3:7e:0d:
         8c:3a:3a:de:39:6c:b3:2a:a6:2e:6d:11:4e:79:ff:09:32:6f:
         71:14:81:3a:09:89:f8:1d:9d:0c:63:47:dc:3c:dd:2c:55:02:
         1f:20:0c:30:94:2f:3f:d8:b1:68:7a:38:82:17:a0:64:3a:5e:
         80:9a:62:54:80:58:0c:d2:9c:d5:46:5b:ed:7f:7f:7c:13:ac:
         e5:af:f3:99:64:d6:11:7c:ad:e1:19:86:e2:00:03:62:b0:11:
         5e:27:5f:91:3a:b3:4e:73:c8:53:3d:49:7d:d6:14:66:c3:df:
         49:25:78:60:a4:b9:2f:ad:6d:59:48:6f:fe:13:0c:93:6f:6c:
         4b:d1:3d:ee:09:5e:2e:29:70:ed:e1:e6:d6:00:f4:01:ad:4a:
         2d:05:9a:3a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG
MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTIzMDUzMDA2
MDUyNVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoNTg2NjMwRjRGRTRERTEw
MzAwM0FBQzJGODU1MERDODE0RUJERUMzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKXXZk6+KRQiMKhPsGa0KLIRlNkA+WlZoXHtS359vcmSr0+PHTJo
y5oDsc+OHVxEiY7TbLwlYNOc7IAKm3OXNnDiHSzubAv0UH+jgY85gNcLnz8NrxCB
G7He0YXAvMr2WCH0HOT26HR2cKxkRvn5luwVwrnAV/pkcMUJg+TyIjLS4lrK1QxH
6GSMp7sL7q9zaMo572mVIhyy0AUWs1HpvOmO/4qCVpzHE/Aj1G8AK9huV7DBADE4
gVRLH7LI4KXggiLWYeoC+Ha9WA7/RIvgjXEOAGSFbHpUyLtksyC/FjPzXLquE3JK
woD3iUzEtnMeYweMNVJ4EJvlv9pdEg/i080CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRYZjD0/k3hAwA6rC+FUNyBTr3sPjAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V
mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx
cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzkvV0dZdzlQNU40UU1BT3F3dmhWRGNnVTY5N0Q0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9z3uDANBgkqhkiG9w0BAQsFAAOCAQEAC5DZ+Rlb212ZmzSuGQsrTm6s70Xk
jssF0PmPcS6hwp9d0p5eQp+P0kxV2V7Kiot3VR0ksgExbI6BYXRUZ9vX7GMyCkn6
vTrxH2nD5ioY8WhZEkcqgSi/IFliyinN8iJOZN/Kbj1440LJ834NjDo63jlssyqm
Lm0RTnn/CTJvcRSBOgmJ+B2dDGNH3DzdLFUCHyAMMJQvP9ixaHo4ghegZDpegJpi
VIBYDNKc1UZb7X9/fBOs5a/zmWTWEXyt4RmG4gADYrARXidfkTqzTnPIUz1JfdYU
ZsPfSSV4YKS5L61tWUhv/hMMk29sS9E97gleLilw7eHm1gD0Aa1KLQWaOg==
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:36 2024 by rpki-client on console-fra.rpki-client.org