Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4CsWSFiE5FITH6DJu3eGA3WSckQ.roa
File:                     4CsWSFiE5FITH6DJu3eGA3WSckQ.roa (raw, json)
Hash identifier:          6SS41MHMIRDtf28njsqHzUDrbVkEp9k/7wSdY5JBZP8=
Subject key identifier:   E0:2B:16:48:58:84:E4:52:13:1F:A0:C9:BB:77:86:03:75:92:72:44
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0204
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4CsWSFiE5FITH6DJu3eGA3WSckQ.roa
Signing time:             Mon 20 Feb 2023 07:57:34 +0000
ROA not before:           Mon 20 Feb 2023 07:57:34 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.116/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:34 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=E02B16485884E452131FA0C9BB77860375927244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:29:10:80:ef:89:76:14:a7:d7:0e:85:19:
                    28:05:11:f9:34:55:c2:d1:91:2f:41:73:a0:93:75:
                    4a:d4:e5:f4:e5:33:48:a0:7c:a7:cc:b7:2c:f7:01:
                    7f:ca:72:9f:c1:dc:bb:cc:ac:b7:c9:8f:b3:a4:ea:
                    f8:13:4e:3e:96:5d:2d:13:fc:76:de:6b:59:c6:b5:
                    04:c8:67:73:34:1e:53:f3:8e:d9:d3:a1:b9:91:88:
                    4a:a5:22:6e:a0:75:e0:70:94:62:0c:d3:71:c3:80:
                    00:33:23:22:fd:4c:37:24:7d:0c:87:eb:20:25:05:
                    73:d5:52:3d:43:ac:14:c3:dd:de:1e:0c:ae:cb:4e:
                    9a:f1:2b:7e:52:ec:0e:cc:14:e2:4d:1a:94:71:e3:
                    06:5e:95:01:34:3d:e2:bc:d5:89:2f:01:7c:3a:1e:
                    4b:41:2c:70:85:5d:75:35:a2:a7:45:36:a5:1c:5f:
                    d3:7a:5b:e6:bb:74:f2:72:da:99:ce:fb:da:29:d0:
                    23:41:12:fc:52:77:ca:db:54:9a:2b:00:cf:c4:87:
                    83:ce:e9:7a:06:b9:98:f6:db:6c:8f:95:e1:d5:b9:
                    b3:88:b7:7f:99:02:8a:b7:cc:73:bb:a3:ba:f7:50:
                    19:0b:92:59:38:a3:01:e3:f8:b6:d0:b9:14:30:24:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:16:48:58:84:E4:52:13:1F:A0:C9:BB:77:86:03:75:92:72:44
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4CsWSFiE5FITH6DJu3eGA3WSckQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.116/32

    Signature Algorithm: sha256WithRSAEncryption
         89:5e:c3:f8:d3:70:f7:bb:11:a5:a5:9e:da:2e:f0:65:f1:d5:
         ee:7e:64:20:54:ab:c8:d8:59:f6:b9:48:a2:d1:ce:e6:5d:f5:
         1b:10:a4:0a:88:59:89:3d:72:40:70:25:83:7e:35:dc:dc:5a:
         a1:98:77:a7:8a:b5:3d:48:e9:fc:e9:0e:21:5b:5f:56:71:e0:
         ad:57:e7:8b:77:01:4b:e8:7e:15:71:0b:cb:7e:b7:6e:89:f5:
         41:b4:e7:49:ba:db:32:9d:c4:47:15:18:c5:17:11:6b:18:47:
         f8:4b:f0:0a:a1:2e:60:ec:7d:2d:0d:58:03:7b:ba:eb:0e:e0:
         01:30:7d:f2:56:97:bf:b8:4b:27:df:ba:fb:07:55:6a:cc:c1:
         e2:30:8b:9e:60:83:b7:36:9e:9b:a5:6c:f3:b6:95:b4:fb:5c:
         44:50:73:f4:bd:49:5d:20:a8:84:b0:ea:c9:d1:c3:d7:02:d9:
         59:8a:f1:fc:f5:49:7d:1f:30:80:92:2a:28:2e:fe:c2:c6:89:
         da:e8:30:f4:b0:1b:a5:34:20:5c:5e:45:d0:3a:13:a7:8f:74:
         53:ca:19:29:11:5d:f0:51:0f:f6:e0:a0:51:ca:85:1f:5a:b5:
         31:83:87:45:84:90:84:e8:2c:10:1a:94:f4:7e:9a:d4:3b:2b:
         95:50:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:03 2023 by rpki-client on console-fra.rpki-client.org