Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/JDlxz5tYLey5y9MvYIZVM30rMmI.roa
File:                     JDlxz5tYLey5y9MvYIZVM30rMmI.roa (raw, json)
Hash identifier:          woVxwRggXN1UhRLT5wCj8NyFVm9J0SjFIdEDddnnFZg=
Subject key identifier:   24:39:71:CF:9B:58:2D:EC:B9:CB:D3:2F:60:86:55:33:7D:2B:32:62
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0251
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/JDlxz5tYLey5y9MvYIZVM30rMmI.roa
Signing time:             Mon 20 Feb 2023 08:01:30 +0000
ROA not before:           Mon 20 Feb 2023 08:01:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.27/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=243971CF9B582DECB9CBD32F608655337D2B3262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:d7:b3:48:9c:8a:89:ff:74:b3:b0:72:ee:
                    68:7b:a4:bc:98:73:72:14:98:7d:47:de:a6:94:b2:
                    26:54:2e:8d:b2:60:f2:d5:7a:9a:9b:0f:5c:3d:bd:
                    20:fa:df:a0:e2:84:60:4f:38:ed:2f:dd:70:f9:f0:
                    a5:7d:81:b4:2c:c4:85:78:16:0d:6c:61:5d:3c:53:
                    1d:16:de:c2:6f:2c:a1:7b:9e:08:c3:4e:5d:b6:43:
                    e9:79:d3:1a:d3:74:c6:0e:a6:75:a1:fd:46:af:5c:
                    bd:c1:dd:07:ed:67:14:8d:38:5f:f1:b5:95:e1:ca:
                    02:4c:ac:30:62:e1:4b:b8:2d:36:76:9b:ef:92:67:
                    c8:b9:3b:2d:75:8b:4f:b6:0b:ca:a7:6e:dc:ae:05:
                    42:af:f2:f1:db:fb:b6:1d:41:50:33:51:77:34:86:
                    84:d6:40:8f:e4:16:68:08:11:23:67:23:b9:d7:af:
                    83:0f:6f:0c:ae:cb:7e:66:f2:93:33:e1:9d:ae:13:
                    08:e6:70:8b:65:2c:66:71:b2:f0:00:a7:0b:2f:8b:
                    7a:a2:80:40:2a:df:b3:b6:7f:13:27:be:d3:2c:4e:
                    71:31:91:ca:ba:6b:2b:51:38:7a:e3:ea:68:35:25:
                    73:9c:6c:9e:75:54:b3:33:0e:cf:63:d2:e4:67:f2:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:71:CF:9B:58:2D:EC:B9:CB:D3:2F:60:86:55:33:7D:2B:32:62
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/JDlxz5tYLey5y9MvYIZVM30rMmI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.27/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:fa:8f:ad:8b:29:c7:4d:66:91:06:a5:70:b0:b9:ae:30:77:
         27:7c:28:2f:33:e8:76:0d:e6:f2:7f:b6:3f:d4:19:db:a7:f6:
         03:23:b4:e5:b6:6a:c3:03:7d:8f:da:90:96:22:de:88:db:75:
         0e:ae:b5:9c:2c:a3:d2:96:e3:c1:c5:ba:06:b8:00:c1:9a:f1:
         86:de:c2:16:44:fe:1e:23:cd:d7:47:b3:63:75:54:c5:01:4e:
         30:40:81:11:5b:d5:70:46:d6:31:75:22:4c:c4:49:81:4f:ac:
         ef:3d:08:af:ab:70:7c:78:71:68:46:10:a8:df:57:ae:4a:48:
         45:9e:b5:0e:c9:76:3c:4f:27:ad:c9:93:6b:27:e6:bb:76:26:
         3a:9a:85:65:e6:3f:a3:a8:79:b1:63:2b:00:63:08:f9:1d:f9:
         b4:23:76:d0:c2:78:83:76:35:0a:63:fb:02:13:84:e2:2e:78:
         93:4d:5d:58:56:85:19:cd:9f:06:24:5b:db:48:6b:f4:37:3f:
         1c:85:88:6f:7b:9c:b2:e3:8c:aa:b6:42:7d:e4:73:93:b3:46:
         38:4b:5f:74:81:4d:ef:33:13:68:a1:21:16:51:0b:9f:9c:68:
         6a:35:f5:a2:2e:eb:02:f5:ca:7a:57:8d:cf:8e:d3:ba:4c:26:
         95:31:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:04 2023 by rpki-client on console-fra.rpki-client.org