Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/zSffljP1GAdy81tn2C-BNwC6Pkw.roa
File:                     zSffljP1GAdy81tn2C-BNwC6Pkw.roa (raw, json)
Hash identifier:          WXJpAxVW1TF8TRDvYlTIaoPFOyN8FCtUF9BbvfHWZes=
Subject key identifier:   CD:27:DF:96:33:F5:18:07:72:F3:5B:67:D8:2F:81:37:00:BA:3E:4C
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       48
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/zSffljP1GAdy81tn2C-BNwC6Pkw.roa
Signing time:             Fri 06 Jan 2023 09:39:57 +0000
ROA not before:           Fri 06 Jan 2023 09:39:57 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        210.198.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  6 09:39:57 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=CD27DF9633F5180772F35B67D82F813700BA3E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:5e:09:9a:3d:50:d5:1d:4c:94:a3:83:2b:
                    4c:5b:2b:94:a8:4a:66:16:4a:41:ff:f1:a0:88:42:
                    ce:f3:30:f7:c2:a5:e7:82:70:c0:32:1f:de:eb:12:
                    86:c8:b9:f9:fc:73:03:70:24:7c:38:50:34:ca:c8:
                    06:75:ee:05:2a:6e:6f:ba:b0:00:06:fc:0d:2f:93:
                    46:97:52:34:2a:72:0f:cf:6a:cf:08:01:b6:1d:6d:
                    6a:9d:c9:91:09:7f:46:0b:54:83:12:5c:08:4e:f6:
                    37:0b:b6:fa:13:a5:0b:32:16:8a:47:e4:fa:c3:64:
                    bf:e3:09:6d:cb:59:26:d3:08:77:f3:21:f8:90:2d:
                    76:cb:ed:89:39:df:f2:cb:3c:a7:93:86:b5:81:f1:
                    2d:fd:34:a2:98:29:5b:de:05:3d:39:27:06:77:b2:
                    c1:ef:a6:b7:74:ba:06:35:55:64:48:79:05:ff:ff:
                    7c:2c:4d:34:3c:ec:7e:c6:03:00:23:f0:41:67:16:
                    3b:2d:a5:86:9c:49:9b:5f:98:6a:a8:4d:ac:bd:61:
                    46:f9:d3:31:45:3b:0a:18:2a:09:22:b6:a1:66:78:
                    f8:f1:dc:0b:18:9d:65:2a:4e:f2:b8:ad:5c:75:38:
                    ae:c1:2b:e8:ee:ac:af:e8:b3:8b:03:48:15:98:c2:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:27:DF:96:33:F5:18:07:72:F3:5B:67:D8:2F:81:37:00:BA:3E:4C
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/zSffljP1GAdy81tn2C-BNwC6Pkw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:e3:49:28:06:2d:d7:17:88:b0:8b:01:10:4f:f6:33:6e:
         bc:cb:b9:30:f5:9b:3b:62:ca:00:77:e3:ab:7f:54:f1:e1:ae:
         7e:b4:01:24:90:88:d0:3c:ae:8d:00:31:aa:ab:c6:b6:ad:ad:
         76:90:86:39:c2:6a:3b:19:82:68:c2:70:f0:0e:11:f5:65:b3:
         1e:65:f1:d7:e6:34:e5:a0:b0:4e:98:ce:35:fc:e5:37:c8:d3:
         6b:66:0b:96:46:d5:03:83:8c:b2:65:72:1e:be:5d:61:ca:36:
         35:4a:41:22:d7:61:5c:9b:e1:56:1e:b5:0e:2c:35:ff:4e:fb:
         da:ba:16:21:70:ad:de:3e:c5:60:83:91:cf:43:b3:38:b2:3c:
         04:c4:e0:3b:c2:9a:28:f7:c9:71:2f:7e:33:e4:b8:c6:f4:d9:
         0c:3c:c0:38:08:63:02:7b:df:fb:52:88:41:a3:67:5b:10:ab:
         5b:8a:e4:0f:d8:ef:eb:e4:f4:b2:dc:7b:a1:ef:c1:99:53:7a:
         ca:ef:69:3f:ac:b5:40:1a:f8:52:89:64:bb:88:e1:75:1f:ae:
         43:60:8f:49:6d:42:51:42:cd:f8:2f:89:a3:29:35:5c:c2:9f:
         b1:de:11:ab:62:ad:ac:80:1a:92:c4:6d:1f:c8:de:81:f3:5d:
         a6:06:68:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 1 02:02:47 2023 by rpki-client on console-fra.rpki-client.org