Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/dVGwoG-rV2LeChmWU0ASUsXEqF0.roa
File:                     dVGwoG-rV2LeChmWU0ASUsXEqF0.roa (raw, json)
Hash identifier:          O4I0MIfATIBU/hfW8gIWFcA9qserBJT5J0c4GQsh72w=
Subject key identifier:   75:51:B0:A0:6F:AB:57:62:DE:0A:19:96:53:40:12:52:C5:C4:A8:5D
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       31
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/dVGwoG-rV2LeChmWU0ASUsXEqF0.roa
Signing time:             Wed 01 Feb 2023 01:28:50 +0000
ROA not before:           Wed 01 Feb 2023 01:28:50 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     55392
IP address blocks:        130.62.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Feb  1 01:28:50 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=7551B0A06FAB5762DE0A199653401252C5C4A85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:06:7c:a0:bd:b6:ad:74:85:71:b1:b4:06:
                    c6:e7:cb:4e:8a:88:5a:4c:c3:09:c3:23:59:ed:6f:
                    0a:46:6f:05:95:09:ab:e2:87:a8:d5:d6:b2:f0:21:
                    3b:17:c5:f5:2d:26:7a:fe:2e:a6:a3:3a:88:15:1b:
                    86:1b:2e:4e:7e:c8:13:e9:dd:a6:87:fa:ea:61:d3:
                    e8:4a:9b:9e:6e:6e:a1:51:2b:34:91:91:a1:bd:fc:
                    95:0b:90:4a:89:55:06:9a:87:fe:55:33:12:a1:f8:
                    59:e1:85:27:fb:c2:d1:23:57:b0:a5:62:e9:e9:ce:
                    be:3d:e5:f0:a1:bd:88:e0:89:0f:73:72:8d:fc:57:
                    b0:69:6d:ea:ca:f1:3f:8d:26:97:81:29:00:35:cb:
                    93:0d:ec:ad:a9:ad:d2:ae:bc:85:0a:73:92:e3:28:
                    51:55:3f:e9:8a:fc:cc:0b:24:2a:52:a9:aa:de:5b:
                    54:a3:a5:e5:2f:fb:e9:03:bf:80:03:5c:d7:48:30:
                    5f:45:e2:48:2a:90:23:cc:f9:84:b6:be:9f:8a:cd:
                    5c:01:dd:29:ce:9d:44:13:23:0f:a9:d4:9c:c7:3b:
                    80:89:12:5f:55:f3:bf:17:b7:e9:0a:77:af:93:da:
                    66:61:f9:76:7f:f0:43:0c:2e:41:dc:54:9a:53:56:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:51:B0:A0:6F:AB:57:62:DE:0A:19:96:53:40:12:52:C5:C4:A8:5D
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/dVGwoG-rV2LeChmWU0ASUsXEqF0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2a:43:47:f9:b0:b4:c6:27:c4:22:ff:ba:57:15:e7:42:3b:53:
         57:4e:0a:c4:c0:4c:8f:f0:54:83:84:5c:06:b4:8f:3b:cc:9c:
         22:af:76:4c:42:22:66:e1:35:ff:0b:4d:3e:6d:19:d1:43:1c:
         f7:89:75:1a:82:3b:d1:78:15:61:42:e3:50:72:b5:5b:c7:46:
         43:96:19:e4:0f:65:94:44:fe:ae:0b:4b:71:fa:17:fd:69:d9:
         18:6e:29:af:2a:89:ab:e5:3a:13:87:2f:e3:3b:46:b2:9b:f2:
         6e:7e:d2:94:dd:2f:40:44:36:ac:03:d7:b7:75:60:47:b9:6f:
         08:a3:d9:68:94:18:3e:43:3f:66:bf:18:2d:c7:25:b4:1e:eb:
         98:37:20:69:22:ca:df:67:7e:af:55:7d:63:46:bf:56:38:27:
         8f:5f:03:ec:cf:71:dd:4c:5e:eb:8c:d8:45:b5:38:9c:ef:eb:
         05:16:16:f1:65:06:bc:7b:f7:cb:79:fa:79:4b:25:cb:7c:df:
         89:55:1c:da:c7:f1:89:9d:58:6b:04:68:ee:11:ae:bd:df:9b:
         1b:39:43:bc:bd:86:d8:2f:73:47:46:36:d2:f3:84:e0:cd:83:
         58:59:50:c7:fc:5e:fe:fe:8c:5a:59:16:19:81:0a:15:68:7b:
         8e:c7:df:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:22:59 2024 by rpki-client on console-fra.rpki-client.org