Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/88T1y-otDEDR_Max_iYeeTvq0T0.roa
File:                     88T1y-otDEDR_Max_iYeeTvq0T0.roa (raw, json)
Hash identifier:          DlYSREH7+3yrRbVN0V1jYu45Cz4jw510Kk/2jx+zktc=
Subject key identifier:   F3:C4:F5:CB:EA:2D:0C:40:D1:FC:C6:B1:FE:26:1E:79:3B:EA:D1:3D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01A6
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/88T1y-otDEDR_Max_iYeeTvq0T0.roa
Signing time:             Mon 20 Feb 2023 07:53:11 +0000
ROA not before:           Mon 20 Feb 2023 07:53:11 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.141/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:11 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F3C4F5CBEA2D0C40D1FCC6B1FE261E793BEAD13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:12:d9:71:d4:b3:ab:dc:2c:f6:41:c0:a9:
                    22:fe:cd:cf:7c:68:68:71:24:7d:d1:a7:1d:63:6d:
                    18:f5:95:be:7e:01:3b:14:55:1f:25:b9:eb:c9:cb:
                    85:59:c5:bf:df:ee:29:87:e1:58:24:05:36:32:85:
                    64:30:d8:da:40:53:ee:51:bd:8c:5e:d5:08:bb:93:
                    32:fc:54:98:99:0a:ce:75:61:af:0d:01:c9:74:54:
                    e2:1a:78:70:aa:61:ec:63:b9:47:0c:b2:33:d3:a3:
                    7e:7e:28:96:22:aa:58:97:0a:38:bf:10:fb:c2:98:
                    24:cc:12:98:0a:46:a7:b3:95:f0:56:90:92:20:98:
                    cc:93:ec:51:14:46:e7:34:6b:65:fe:70:ac:b7:25:
                    d3:09:b2:55:ae:83:04:7a:8a:73:83:7e:25:7a:86:
                    04:07:0e:e9:76:2e:0b:a1:e9:96:86:8a:9a:94:80:
                    f8:47:c0:7a:73:82:97:04:2f:3f:a9:9f:c7:94:2c:
                    27:f9:3c:a9:51:d7:56:eb:20:31:2e:4f:38:df:96:
                    47:dc:00:a2:c7:b7:7b:5d:7c:54:83:46:c5:d7:52:
                    e9:fa:3d:7f:0d:31:78:fd:57:f5:d8:26:26:22:39:
                    30:ae:db:e6:e5:23:f8:ed:38:42:d3:bf:6d:40:f4:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C4:F5:CB:EA:2D:0C:40:D1:FC:C6:B1:FE:26:1E:79:3B:EA:D1:3D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/88T1y-otDEDR_Max_iYeeTvq0T0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.141/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ad:79:a7:00:ac:fb:e0:d2:f9:41:8c:16:58:fb:7c:34:04:
         f6:50:f1:69:47:9d:ba:f0:2a:2d:41:b8:de:1e:89:97:8c:ea:
         ce:a2:c7:ca:2e:4a:b3:3f:86:fa:55:5a:c6:5d:15:8a:16:7c:
         38:2e:cd:84:2f:15:91:ed:ff:0b:bc:5c:c3:ad:12:c4:6f:fd:
         89:4b:6c:7c:3f:22:e1:13:08:08:34:93:25:96:9f:08:fb:be:
         e5:64:97:54:2c:f2:3f:61:98:5d:53:ad:3e:5d:eb:cc:50:b4:
         08:cb:28:10:b8:ee:29:96:38:98:90:95:76:32:a0:c7:83:55:
         6c:f9:7e:a4:ed:22:7d:c3:ec:de:4d:84:ba:1e:67:96:f2:b7:
         86:43:bb:c5:1e:03:49:8b:98:5c:30:4e:07:45:03:a9:0d:1e:
         c7:55:7e:e2:8a:88:98:9b:51:04:57:46:ea:58:c5:7e:b1:20:
         cc:a8:b5:a6:f6:43:fc:82:c8:15:53:86:d3:85:66:f6:25:a8:
         39:5e:7b:9d:84:bd:ce:f5:e1:40:17:fd:08:3e:f6:a0:84:bc:
         78:c4:9b:d3:c4:6c:fb:73:40:e2:68:4f:9d:49:06:0b:f9:37:
         31:b5:b9:14:e2:d7:46:50:62:cb:bc:1a:c7:d3:9c:d1:a0:40:
         96:8e:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org