Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/3x_A4NeQpMZSnG5NRJBSObG8_OY.roa
File:                     3x_A4NeQpMZSnG5NRJBSObG8_OY.roa (raw, json)
Hash identifier:          BGyopmvhE3Rf8LO36f72H418yrdK8WCeK4FCPcJd/BI=
Subject key identifier:   DF:1F:C0:E0:D7:90:A4:C6:52:9C:6E:4D:44:90:52:39:B1:BC:FC:E6
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       019B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/3x_A4NeQpMZSnG5NRJBSObG8_OY.roa
Signing time:             Mon 20 Feb 2023 07:53:06 +0000
ROA not before:           Mon 20 Feb 2023 07:53:06 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.62/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:06 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=DF1FC0E0D790A4C6529C6E4D44905239B1BCFCE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:b2:f6:54:3f:fc:d7:b8:c8:1b:50:cd:de:
                    04:b9:08:9c:3f:ac:0d:75:53:a6:bd:8e:72:7a:8c:
                    d4:a5:ed:94:c7:89:89:d4:df:cd:ba:8d:92:e4:8d:
                    3c:b1:93:af:be:26:52:a1:02:cd:57:2d:e1:b9:63:
                    73:72:70:2e:09:5a:b0:6d:1d:9e:e2:11:44:db:bc:
                    ca:64:f3:3f:10:b3:71:0d:dd:1e:9f:66:67:fc:db:
                    c9:c2:66:a0:b5:00:11:bc:d3:5a:ba:c0:28:5d:e2:
                    fb:76:10:a1:18:10:c0:4e:b2:0a:03:ae:aa:de:d7:
                    97:f8:51:79:df:c4:df:a1:8f:aa:2c:09:41:30:0c:
                    5e:77:41:7a:01:48:36:2c:1e:a6:95:95:a7:bc:05:
                    e6:47:9d:38:bf:b9:f5:a7:8d:76:d5:44:b3:5b:16:
                    8e:9f:0f:c4:48:79:41:fd:71:1e:da:41:16:8b:53:
                    5c:91:0f:11:7b:b5:04:2f:12:6f:74:6f:64:dd:8a:
                    f7:bf:31:16:ee:04:f6:e1:19:13:c1:5f:40:06:6a:
                    d5:de:ad:95:c6:de:5d:9f:c6:38:01:9e:0f:cb:88:
                    13:87:39:86:f8:ce:c3:59:2f:25:ed:ae:7a:5b:14:
                    64:39:9c:61:47:29:35:bd:23:ce:b0:ca:5e:3c:49:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1F:C0:E0:D7:90:A4:C6:52:9C:6E:4D:44:90:52:39:B1:BC:FC:E6
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/3x_A4NeQpMZSnG5NRJBSObG8_OY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.62/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:df:49:f0:79:ec:02:44:01:c3:1f:ce:83:b6:b5:1c:b8:61:
         68:ad:41:0f:ab:96:81:24:c8:74:53:57:93:95:c6:72:38:47:
         52:ea:c2:11:f1:1d:ab:cc:31:bb:40:15:41:b1:84:92:88:ea:
         44:92:d4:09:c3:a8:b9:a3:4a:0e:36:1a:ee:06:22:45:52:ce:
         b9:03:54:cd:6d:19:9b:d2:04:51:37:9d:98:8a:e0:8e:06:0c:
         b9:fa:15:2c:4c:44:01:35:6c:9a:90:64:0c:61:a8:2a:af:dd:
         5e:0e:a7:90:20:b8:39:d0:f8:e7:52:f1:a0:d6:78:60:eb:a7:
         d9:74:c0:0c:3c:c9:99:f8:08:3f:24:3b:08:74:ad:ad:9f:12:
         1c:14:88:de:d5:52:04:f5:e8:a0:e8:0e:91:d5:a1:70:2b:e5:
         f5:4b:a9:a8:90:9d:34:e2:a3:b5:ed:99:a2:79:68:0c:a2:29:
         6c:8a:c4:b9:66:08:0a:64:f3:c1:0c:86:c3:1f:fe:07:89:13:
         b0:61:d7:17:4d:0a:1c:00:42:f6:09:fe:24:29:38:a3:a7:e1:
         64:4c:77:e1:bf:6d:f1:1a:b9:1a:5f:53:57:a4:05:c3:cd:57:
         d0:2a:43:08:ba:23:8f:f2:3c:0b:54:0c:0b:d5:98:4d:14:20:
         53:43:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:03 2023 by rpki-client on console-fra.rpki-client.org