Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jJJ_2sc_-5rOrmt_TMjAWnGcWlU.roa
File:                     jJJ_2sc_-5rOrmt_TMjAWnGcWlU.roa (raw, json)
Hash identifier:          lGUY5hzC/I9JH1mUKxWSlxcYmVoxzeRVG6A23saqAY4=
Subject key identifier:   8C:92:7F:DA:C7:3F:FB:9A:CE:AE:6B:7F:4C:C8:C0:5A:71:9C:5A:55
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       014A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jJJ_2sc_-5rOrmt_TMjAWnGcWlU.roa
Signing time:             Fri 28 Oct 2022 05:47:41 +0000
ROA not before:           Fri 28 Oct 2022 05:47:41 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:47:41 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8C927FDAC73FFB9ACEAE6B7F4CC8C05A719C5A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:9b:7d:db:57:7c:e5:c1:68:5e:fe:13:69:
                    47:06:39:a6:f8:8f:62:6f:14:38:de:28:ea:5f:1c:
                    72:53:43:c9:d1:33:ef:0b:ac:25:42:f2:25:fc:0b:
                    81:a5:47:6c:22:20:96:a3:9a:cd:ef:c8:6b:f0:b9:
                    38:d9:5b:bb:e6:5c:f8:da:47:4b:d1:11:9a:1e:e7:
                    a6:c5:c0:a7:4b:88:21:be:03:cd:64:30:03:a7:31:
                    37:c7:9b:fb:af:f3:8a:d8:93:26:cb:b7:4f:96:dc:
                    49:3e:7b:fd:e0:f8:b4:7b:0b:3b:57:70:aa:c7:d2:
                    61:5e:50:6e:78:99:ca:fb:66:de:d4:ae:b2:be:18:
                    c3:db:90:0e:63:87:b4:cc:db:f1:b4:60:b9:21:04:
                    ef:ae:0b:63:bf:cd:80:41:5e:11:dd:f6:ec:6f:4e:
                    71:40:12:05:d6:72:2f:40:8e:64:3a:02:43:b0:51:
                    86:97:4d:a6:7d:69:45:91:a2:3f:b2:db:d3:3c:6f:
                    5b:18:bd:96:00:b8:c8:5e:89:ce:da:f9:ce:e8:c0:
                    6b:3b:4b:21:bc:a6:f2:43:e2:38:92:77:73:68:bc:
                    b3:8f:f1:bc:82:b9:1d:d7:0d:21:cc:fc:c2:58:d5:
                    a1:5b:84:a9:2a:8e:99:fe:f7:1b:0c:1e:07:2e:86:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:92:7F:DA:C7:3F:FB:9A:CE:AE:6B:7F:4C:C8:C0:5A:71:9C:5A:55
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jJJ_2sc_-5rOrmt_TMjAWnGcWlU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         92:20:df:4e:6a:1c:e7:b3:a4:3b:a5:83:33:85:d7:ce:4a:10:
         5d:7f:e4:97:56:e1:1c:47:39:8f:a5:24:a1:12:7c:58:e7:b5:
         21:c7:33:06:ac:f6:9b:b1:77:72:74:6c:da:d4:42:41:d5:4a:
         25:61:1d:49:e1:bc:ca:ed:b7:46:41:cc:c3:43:b1:94:d0:99:
         1c:30:6d:d9:48:82:ce:c9:0e:32:3d:da:df:02:47:5b:d3:6e:
         32:ce:1c:73:36:57:8b:7e:58:e6:bf:36:8e:65:35:5c:83:f9:
         64:c0:08:18:2a:21:ba:02:52:78:26:7e:83:4c:a7:0e:61:5d:
         48:6d:95:0d:b1:4b:1b:34:5a:42:c1:8e:2b:ca:55:16:47:a5:
         15:13:ac:7d:b7:a8:0e:ab:a1:f8:0c:3c:80:ea:70:c5:cc:2c:
         87:01:99:f1:cd:0c:08:ff:9a:7b:a0:15:43:43:e8:c4:80:81:
         3d:b4:e0:30:76:c0:df:fa:08:dd:26:b7:e9:26:40:3f:55:c8:
         a4:47:24:22:72:33:31:c0:82:d2:d1:5f:49:50:38:0f:07:7e:
         6b:27:1d:b4:d8:57:dd:9a:ca:28:8a:b3:6b:b6:31:6c:21:a5:
         99:38:6a:72:66:d2:30:34:e3:2b:0f:a3:d6:59:a0:e7:53:5b:
         79:a2:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:09 2023 by rpki-client on console-ams.rpki-client.org