Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qXxvuvhbUXw5zjihRfGS9XKYgxA.roa
File:                     qXxvuvhbUXw5zjihRfGS9XKYgxA.roa (raw, json)
Hash identifier:          /MgpppsNegyNN33QZkgv/5u2AR1wZw1D1Lr8FzFbHJA=
Subject key identifier:   A9:7C:6F:BA:F8:5B:51:7C:39:CE:38:A1:45:F1:92:F5:72:98:83:10
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0115
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qXxvuvhbUXw5zjihRfGS9XKYgxA.roa
Signing time:             Tue 06 Sep 2022 03:00:33 +0000
ROA not before:           Tue 06 Sep 2022 03:00:33 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        14.8.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Sep  6 03:00:33 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=A97C6FBAF85B517C39CE38A145F192F572988310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:10:bb:d9:66:ae:cf:bd:42:a3:b6:60:41:
                    ac:a0:c7:86:78:4e:3a:1c:fa:c9:2b:b7:e2:b6:4c:
                    88:7b:c8:91:8b:38:8d:8c:39:82:8a:0c:5b:52:56:
                    4a:1b:02:86:a2:e7:2a:c1:cd:6e:df:03:ab:84:73:
                    c5:fb:2a:3c:28:72:8b:17:0d:46:22:56:91:25:ff:
                    cc:e5:40:13:38:89:91:39:29:13:14:0b:39:7c:71:
                    d0:a7:98:28:cb:70:1c:51:67:2b:0a:a4:cc:bf:23:
                    a0:09:34:2a:76:48:31:be:3e:ec:7d:34:c4:e6:c0:
                    6e:ee:ce:d2:71:17:ee:19:ab:93:d2:23:64:05:b9:
                    64:eb:90:6e:6e:5e:1c:33:5e:c8:fd:26:85:a6:fc:
                    f6:c5:5f:6b:e2:da:18:91:39:52:5b:b4:aa:32:29:
                    a1:b6:8b:23:fd:a7:1c:db:1d:79:45:f5:70:68:39:
                    33:aa:8e:e1:88:8f:e5:89:78:2e:c4:15:cc:60:b2:
                    f1:d8:36:8b:67:c9:a0:07:40:db:f7:f8:ad:4d:1d:
                    07:ca:05:b5:47:af:e3:2f:1f:f3:d3:a8:28:9c:a0:
                    99:45:40:b7:57:c7:17:09:be:64:a7:d9:fa:32:d8:
                    ba:ac:57:eb:3c:cd:53:70:4a:5c:ce:52:8d:87:1e:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:6F:BA:F8:5B:51:7C:39:CE:38:A1:45:F1:92:F5:72:98:83:10
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qXxvuvhbUXw5zjihRfGS9XKYgxA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.8.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:fe:fb:64:98:41:bd:10:48:fa:23:68:c7:fb:6a:85:0e:53:
         eb:cd:b7:72:b5:ac:2e:1e:42:5a:b5:5a:02:03:8e:7e:f2:66:
         2e:e2:ef:01:e8:47:7e:87:f1:96:95:f0:c3:79:a8:c2:3e:01:
         3d:03:80:92:e3:79:1c:0c:04:31:47:94:23:3c:2d:76:33:d4:
         3d:f8:e3:61:55:79:71:9a:8d:ea:dd:15:b8:5e:f5:28:2a:b1:
         f1:e4:cf:57:0b:b4:09:a1:22:78:33:52:4a:e7:0d:56:ef:f5:
         31:b3:39:f6:e9:11:32:83:a8:f6:55:0f:d7:b2:92:78:52:a5:
         ba:95:d3:64:70:96:f7:4d:cd:5d:03:1a:1b:24:4a:62:3f:63:
         36:26:fd:fb:33:31:40:98:d8:8b:44:e9:4d:f7:4d:c0:10:35:
         42:b7:67:14:b4:cc:3d:1a:d1:9e:54:83:fd:33:28:c8:83:b6:
         e1:4b:3c:c1:ca:e1:9b:bd:d8:5c:2a:06:c6:27:15:7a:26:bb:
         14:26:2a:55:a3:38:58:50:82:3c:2a:61:29:5c:5f:0a:d2:47:
         ec:50:95:c2:e7:52:fa:eb:0f:52:63:d1:9a:03:25:c4:1d:00:
         d1:45:0a:68:65:be:ba:37:ff:52:29:b0:4b:59:69:1a:0a:5a:
         7f:79:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 02:04:59 2023 by rpki-client on console-fra.rpki-client.org