Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/T91c-p32qL0rTteK3ItJoC1GHNg.roa
File:                     T91c-p32qL0rTteK3ItJoC1GHNg.roa (raw, json)
Hash identifier:          IOKdXHXo4A6e2KyWvBLn+YX3UJhQscGNjfZFlGzi95I=
Subject key identifier:   4F:DD:5C:FA:9D:F6:A8:BD:2B:4E:D7:8A:DC:8B:49:A0:2D:46:1C:D8
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       1C
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/T91c-p32qL0rTteK3ItJoC1GHNg.roa
Signing time:             Mon 07 Nov 2022 05:34:57 +0000
ROA not before:           Mon 07 Nov 2022 05:34:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     131921
IP address blocks:        157.120.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Nov  7 05:34:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=4FDD5CFA9DF6A8BD2B4ED78ADC8B49A02D461CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:b2:fe:e0:b4:88:c7:4a:fb:c1:a6:43:d9:
                    36:06:80:65:9c:b7:11:76:61:7a:ca:ec:20:fa:2f:
                    d1:e7:85:b9:35:fa:72:dc:ed:aa:04:06:0a:c6:42:
                    37:98:8a:62:22:a1:aa:9d:7c:47:13:9f:85:c2:5e:
                    3e:1a:48:f7:ea:8a:c8:cb:90:d8:f9:54:8a:b5:f3:
                    1c:df:95:bc:5a:04:ee:03:22:2b:22:83:f5:90:7f:
                    a7:49:34:25:c1:c5:2c:56:30:11:6d:4f:b3:6b:b4:
                    7d:04:cd:3c:d4:fb:03:71:f6:9e:c8:23:64:f2:6a:
                    a6:18:04:81:09:d5:dd:a4:79:72:8c:93:47:eb:59:
                    6c:55:52:f7:d3:8c:9f:b4:54:bf:96:6c:f3:8b:f6:
                    91:2d:9b:87:f7:3a:2b:4f:c5:51:bd:c3:22:b8:9b:
                    c6:22:d5:89:90:d9:80:53:d3:72:d1:5f:81:24:e3:
                    dc:b7:d1:cf:a8:9d:52:b9:7c:eb:71:d3:e8:f9:1f:
                    ff:b1:71:df:9e:dd:da:47:33:61:3c:98:77:7b:97:
                    02:05:d3:8e:be:e5:78:0e:3c:4e:15:8b:43:e0:53:
                    f5:e3:3c:58:2f:19:3e:ad:87:5e:ff:5a:73:e4:99:
                    a9:35:eb:89:37:71:14:0f:bb:ff:a9:09:ad:b7:76:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DD:5C:FA:9D:F6:A8:BD:2B:4E:D7:8A:DC:8B:49:A0:2D:46:1C:D8
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/T91c-p32qL0rTteK3ItJoC1GHNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:00:84:c9:e3:55:b3:74:b3:aa:fb:1c:a5:07:f3:2b:6f:0f:
         20:9f:3b:d0:4b:13:1a:d7:31:17:40:8a:ef:ae:86:d9:39:ea:
         ba:da:7e:83:93:e7:74:c7:f5:cc:0d:93:ff:a1:0f:a4:b1:e6:
         77:14:bf:ab:93:a6:ef:40:ce:2c:e6:83:1f:9d:ba:df:b6:2d:
         fe:3b:08:e9:41:72:19:e6:32:29:63:e8:9b:b5:3f:cd:92:a8:
         19:e8:71:98:01:ef:18:12:bb:6c:d0:8d:ba:55:f4:f2:26:cb:
         4f:1c:02:84:b5:82:bb:cf:41:7c:c6:db:99:5f:96:ce:49:23:
         43:c7:7b:bc:31:91:c4:c8:16:26:55:f8:68:ce:4e:5f:f2:92:
         ff:28:9d:fc:a9:2e:2c:71:49:70:7a:b4:97:51:b2:71:29:2d:
         71:11:76:01:c6:66:8f:94:34:21:3d:86:20:bf:8c:e3:86:f0:
         16:b6:05:55:48:3b:bc:78:8d:b5:b6:40:05:39:2c:96:e4:5f:
         7b:b1:1a:1c:67:73:bd:b0:fc:d8:b3:32:fb:8f:f1:12:a6:38:
         ed:e9:e1:4c:f4:05:01:1d:3b:ee:91:d3:35:fc:52:b7:38:d8:
         1e:d7:77:41:ba:a6:0e:c0:0e:53:50:50:c5:c0:76:1e:e4:d1:
         3c:1c:6c:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:09 2023 by rpki-client on console-ams.rpki-client.org