Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/St0S1-3uZN9tdyq9FWpS8R4mDGQ.roa
File:                     St0S1-3uZN9tdyq9FWpS8R4mDGQ.roa (raw, json)
Hash identifier:          HKdVSLlTUqnOWGIsliK7vQ4Aod/G5mrPzghzlgoeZTc=
Subject key identifier:   4A:DD:12:D7:ED:EE:64:DF:6D:77:2A:BD:15:6A:52:F1:1E:26:0C:64
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0127
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/St0S1-3uZN9tdyq9FWpS8R4mDGQ.roa
Signing time:             Fri 05 Aug 2022 04:38:39 +0000
ROA not before:           Fri 05 Aug 2022 04:38:39 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.164.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:38:39 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=4ADD12D7EDEE64DF6D772ABD156A52F11E260C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4d:d4:86:25:64:db:8b:2a:6a:69:62:4a:2c:
                    2a:96:94:f5:91:e7:0a:49:4c:b6:24:4c:92:e8:31:
                    90:1d:72:c9:af:1d:28:f8:5d:83:8f:a6:8d:fe:ce:
                    1f:fb:d7:34:65:68:b9:21:b7:bf:5a:b9:2c:37:96:
                    6d:90:e7:d1:70:50:d8:ef:8c:e1:73:04:d4:66:b9:
                    be:dc:c5:29:e7:7d:f6:e8:da:6d:d2:22:0a:dd:70:
                    37:db:28:aa:7f:26:d8:76:21:e4:7e:1a:dc:4e:fa:
                    27:e2:46:e9:d2:2a:8a:c9:3c:54:42:9a:07:3e:1c:
                    fa:59:3b:6e:56:3d:5e:e6:04:e0:9d:21:80:a0:24:
                    b5:24:aa:f0:f9:56:c9:17:5c:6f:74:d4:04:9c:d4:
                    df:88:9a:14:74:b7:a1:7d:07:5c:65:0a:7a:87:1e:
                    67:fc:29:0c:71:4f:d8:2c:a1:a5:e9:16:05:eb:4c:
                    76:f4:32:cf:a2:56:7f:61:d5:8c:15:49:4f:dc:b7:
                    58:3b:e7:ca:85:06:c2:ff:8c:b0:00:1f:e8:1c:07:
                    a0:c8:1c:11:78:38:67:ff:ed:76:0e:94:92:18:31:
                    0a:c7:b4:ab:1a:5d:ed:52:eb:26:47:ab:77:79:b4:
                    52:89:8c:c7:77:50:81:c8:16:1b:e8:b8:92:20:52:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:12:D7:ED:EE:64:DF:6D:77:2A:BD:15:6A:52:F1:1E:26:0C:64
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/St0S1-3uZN9tdyq9FWpS8R4mDGQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:a1:00:2a:bd:bf:d5:52:0e:8f:b5:32:09:0e:dc:05:dd:ad:
         12:57:4a:e1:6d:73:e8:98:68:29:84:c7:aa:6f:b8:7e:5d:0f:
         04:2c:b1:51:0a:ce:d8:39:41:6d:9b:73:52:83:c1:16:fa:4e:
         6b:23:bc:c9:8e:18:07:45:e2:7d:5f:77:26:7b:b5:71:82:ac:
         f4:d5:3d:cb:01:ca:43:f6:1f:2f:a4:b2:a1:ac:b4:fe:93:e1:
         23:26:c1:49:2b:a5:60:36:89:7d:90:ec:1c:e2:97:8c:b0:71:
         69:01:8c:4c:f5:43:4e:aa:c6:a3:96:33:77:ec:6f:d5:8f:80:
         04:53:38:a8:43:29:7a:93:01:61:67:21:8a:59:aa:39:a6:41:
         ac:63:fd:c6:a3:48:1f:e3:91:55:e9:87:8b:6d:ef:a4:c8:38:
         58:c3:ba:14:37:cd:8b:98:38:8b:ae:13:a1:69:88:c1:9b:be:
         e6:bc:f5:bd:b9:6c:c0:cf:7a:d5:6c:89:e4:15:7e:3f:fd:20:
         7e:3f:d2:bf:73:64:21:b6:63:b4:67:24:d5:cd:96:e9:11:e3:
         6c:f8:66:0e:29:c2:b6:9d:fa:d1:c0:f4:a8:1d:70:33:d7:ed:
         45:96:07:26:3e:21:02:63:55:15:4e:77:a4:0a:77:d8:9f:11:
         01:c1:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org