Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/WmH6fz95x-3aHq_0JcCsjCSVwLg.roa
File:                     WmH6fz95x-3aHq_0JcCsjCSVwLg.roa (raw, json)
Hash identifier:          qIUQ1jDqomK6y80M1CaVFrnVMGCsKnrYV5SUen1oxKI=
Subject key identifier:   5A:61:FA:7F:3F:79:C7:ED:DA:1E:AF:F4:25:C0:AC:8C:24:95:C0:B8
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       07
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/WmH6fz95x-3aHq_0JcCsjCSVwLg.roa
Signing time:             Thu 14 Sep 2023 00:30:57 +0000
ROA not before:           Thu 14 Sep 2023 00:30:57 +0000
ROA not after:            Fri 30 Aug 2024 02:51:12 +0000
asID:                     2519
IP address blocks:        219.121.255.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 02:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Sep 14 00:30:57 2023 GMT
            Not After : Aug 30 02:51:12 2024 GMT
        Subject: CN=5A61FA7F3F79C7EDDA1EAFF425C0AC8C2495C0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:68:b0:e0:60:0b:21:67:f4:44:fc:f2:ce:
                    b5:61:07:b5:ff:5d:99:dd:64:fb:02:88:0c:78:09:
                    cb:6f:9e:bf:4f:8d:e0:1a:84:ae:99:4b:e6:61:65:
                    8c:93:41:59:6c:75:db:09:df:01:26:5b:54:71:ec:
                    46:a4:5c:fe:ac:d3:6e:39:cd:da:63:57:22:55:38:
                    2f:b8:cf:08:14:15:a1:22:c9:64:70:c5:3f:44:a1:
                    07:56:46:01:cd:e9:19:b0:79:76:e4:78:92:15:85:
                    1b:46:87:dc:f6:fa:c0:9b:5a:fa:2c:84:74:1c:1b:
                    fe:5f:a9:91:9c:7a:3e:dc:46:77:86:ca:a4:9e:8b:
                    43:ab:91:e4:41:48:ae:3f:d0:c7:3d:4c:44:d6:88:
                    8c:17:48:17:d5:0c:34:d7:a9:01:87:13:ed:9b:42:
                    65:74:58:44:81:02:ce:69:7b:e7:8c:7c:0f:36:9d:
                    49:16:b8:d8:c5:da:af:eb:a0:80:af:8b:b9:81:29:
                    89:de:cb:54:03:15:95:a3:de:50:ab:9f:7e:32:91:
                    3a:31:f4:b5:f8:f3:02:83:a0:4b:94:b2:fa:92:65:
                    9c:2e:dd:a4:72:5c:6e:76:ea:74:51:c8:64:41:6c:
                    53:5e:7d:56:f3:6b:cf:40:ab:bd:52:54:34:16:d4:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:FA:7F:3F:79:C7:ED:DA:1E:AF:F4:25:C0:AC:8C:24:95:C0:B8
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/WmH6fz95x-3aHq_0JcCsjCSVwLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c2:62:2e:85:f4:10:47:90:b1:e5:28:d8:ac:80:ea:ba:78:
         a8:81:00:27:5d:77:85:97:cc:5f:c7:8b:d4:c5:a2:a4:a8:e9:
         82:67:ca:fe:da:f1:28:91:41:44:a2:9d:e6:62:ed:f4:04:de:
         4b:a8:66:8c:b8:36:8d:b9:9e:a4:68:b5:a4:40:b7:29:4d:25:
         2a:55:f4:a1:aa:90:1b:89:9a:c7:f7:05:81:d6:4c:e2:0e:d8:
         2c:64:fd:3f:e6:91:98:2e:f7:ff:a7:6f:e0:66:80:c7:a7:be:
         d5:69:67:03:37:50:51:bf:d3:1b:c2:0f:88:c2:09:f9:e8:d7:
         66:0a:15:48:ee:a1:76:1a:29:7f:2b:7a:c8:08:9d:70:7b:1b:
         2f:c3:a2:93:36:b9:f4:71:24:b1:c1:4b:41:56:02:31:cb:b4:
         e0:bc:22:5c:6b:a2:dd:e1:54:6c:a6:8b:a7:f1:6f:e2:16:4e:
         44:13:29:81:74:35:b1:5c:5a:89:af:24:bc:20:2a:64:d3:7a:
         ea:a3:08:dc:20:6b:28:62:e2:af:ef:38:c2:e1:26:95:4d:5b:
         af:93:23:dd:ae:89:84:6f:c4:ce:e4:e3:e6:20:c6:ce:25:29:
         b7:ca:92:f2:a3:13:a2:f8:c3:43:0a:c9:a0:2f:3d:20:96:13:
         39:a4:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 05:22:42 2024 by rpki-client on console-fra.rpki-client.org