Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/BrIvW74a-3yUBqMrrAk5lt_GcZs.roa
File:                     BrIvW74a-3yUBqMrrAk5lt_GcZs.roa (raw, json)
Hash identifier:          g7lLsFtBVXOb1NB/kHSRucQwQ8hcer4JYcuw4kbuNT8=
Subject key identifier:   06:B2:2F:5B:BE:1A:FB:7C:94:06:A3:2B:AC:09:39:96:DF:C6:71:9B
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       25
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/BrIvW74a-3yUBqMrrAk5lt_GcZs.roa
Signing time:             Mon 01 Aug 2022 01:29:16 +0000
ROA not before:           Mon 01 Aug 2022 01:29:16 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     16509
IP address blocks:        150.70.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: Aug  1 01:29:16 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=06B22F5BBE1AFB7C9406A32BAC093996DFC6719B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:f0:ad:a0:03:88:b8:e0:04:2c:e4:69:c6:
                    d9:b8:aa:a1:58:50:e1:30:98:b3:46:28:09:95:8b:
                    ec:61:cd:95:eb:a6:ba:52:7f:b9:ef:da:ba:90:7f:
                    9e:65:3d:06:7e:3c:5c:e1:c3:b0:80:97:06:0a:6f:
                    3a:7a:d5:05:8f:cf:3e:20:e5:09:37:ad:f1:73:99:
                    58:02:5a:32:b6:f9:39:c3:13:8d:70:86:ab:90:1f:
                    21:a6:79:1d:cd:5b:6c:47:4e:ae:87:36:74:b4:fa:
                    d6:df:40:ef:dd:80:08:f1:8e:b4:6b:ec:75:24:5b:
                    95:fb:24:df:01:e8:dc:4f:8d:ae:e4:59:93:9f:cb:
                    17:95:1d:14:10:5c:b4:5f:84:bd:83:01:ab:e8:20:
                    2a:b2:3b:e9:38:bb:34:1f:1a:f6:af:c3:05:a3:1e:
                    3d:1e:12:63:c7:25:32:0e:44:8a:f2:3b:52:6c:d2:
                    c5:7e:40:32:84:2e:8b:ba:87:a5:b5:f6:d5:86:90:
                    34:01:21:8e:7b:2b:57:17:eb:74:76:85:87:47:f1:
                    4c:43:d5:2f:91:cd:26:49:4c:53:75:91:c1:a8:65:
                    e7:90:d6:aa:d5:de:e6:54:31:ac:fb:8b:b4:5a:0c:
                    ca:13:c6:86:40:dd:66:24:74:a9:4f:4f:48:52:5d:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:2F:5B:BE:1A:FB:7C:94:06:A3:2B:AC:09:39:96:DF:C6:71:9B
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/BrIvW74a-3yUBqMrrAk5lt_GcZs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:ca:1c:20:08:a6:cf:2f:43:74:f2:51:2b:9d:2f:d3:1c:94:
         12:81:41:1e:ef:30:fd:45:78:61:0f:e5:03:7e:08:81:82:ac:
         fa:db:2f:90:9b:f8:ba:6b:1d:49:2c:61:ed:56:8a:3a:d8:ae:
         a4:a0:12:16:c7:6a:84:60:2d:a9:e3:f2:05:ed:81:ca:e7:32:
         59:26:35:11:21:07:97:b5:20:7a:07:00:ad:85:67:2a:dd:cc:
         8d:21:4a:82:24:1b:fc:b4:a5:76:c8:6f:82:3e:08:67:6e:92:
         34:63:73:c8:1d:f0:e5:ca:24:c7:cf:32:bc:09:ee:11:e0:52:
         78:e0:82:4b:20:7e:eb:4b:9a:5d:c2:12:cb:9e:a5:7c:5d:4d:
         82:81:7c:6c:3a:22:27:fa:9b:59:84:76:05:25:75:e5:b7:07:
         08:1a:91:c1:60:15:5d:fa:83:3d:ea:52:df:c1:29:e8:c1:14:
         fd:34:c1:b1:69:e2:73:8d:5a:03:65:60:5d:90:34:5f:82:c6:
         54:32:5e:a0:8d:87:41:13:01:37:87:a7:51:1d:c8:5d:b7:06:
         12:77:ea:70:c2:c3:8f:ad:13:e8:da:67:c6:0f:aa:93:c7:8e:
         5d:e4:29:82:f5:18:08:74:26:65:a7:d6:6d:46:67:d8:b4:49:
         99:26:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org