Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KglGfCZT4qPUjKtJklhFZ-7GX3E.roa
File:                     KglGfCZT4qPUjKtJklhFZ-7GX3E.roa (raw, json)
Hash identifier:          MEutV8CKKIPLe/nsaC5W1RdJIaTMeJ6i13NDHdUnGL8=
Subject key identifier:   2A:09:46:7C:26:53:E2:A3:D4:8C:AB:49:92:58:45:67:EE:C6:5F:71
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       52
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KglGfCZT4qPUjKtJklhFZ-7GX3E.roa
Signing time:             Fri 10 Feb 2023 07:41:28 +0000
ROA not before:           Fri 10 Feb 2023 07:41:28 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.252/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:28 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2A09467C2653E2A3D48CAB4992584567EEC65F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:a2:16:eb:99:64:d9:c6:6c:d6:b5:d1:4c:
                    74:8f:8f:3f:c8:76:02:19:fb:fc:54:c0:67:47:4c:
                    d9:44:01:df:c7:fd:dc:19:d1:e0:fd:e2:01:4c:bc:
                    9d:ca:ab:58:68:e6:4b:96:0f:75:23:ce:32:9d:de:
                    6d:b9:ba:c5:17:b0:96:c8:be:43:ba:4f:fc:52:a7:
                    9a:22:86:a2:90:e5:48:ee:84:8f:65:5d:4b:03:98:
                    2f:c5:a2:0d:8e:fe:4d:e2:bf:b6:b1:c3:92:8b:c6:
                    f3:ce:b4:44:ba:2d:58:81:7e:d9:1d:67:bd:54:5c:
                    2a:c1:9d:cb:0e:6d:c3:4c:13:00:c6:8d:35:7c:b3:
                    6b:c3:8c:e3:96:f8:76:ac:64:42:21:32:d5:6a:eb:
                    ed:9e:f9:cd:84:6e:4c:6d:4f:18:05:0e:8d:40:b8:
                    e4:91:2f:b0:da:59:96:1e:5e:26:2e:82:3a:23:de:
                    53:d1:59:97:bc:05:03:fa:a2:ea:fa:01:b9:fa:2c:
                    af:ed:fc:8c:22:76:cb:52:76:2b:8e:72:91:b4:97:
                    a6:44:ee:70:c5:f9:48:be:32:b3:67:6c:28:5a:1f:
                    14:8e:dc:40:27:ec:3a:44:65:d5:a3:36:74:09:60:
                    f8:13:6c:5d:c5:14:b2:63:8d:b6:03:89:40:23:6f:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:46:7C:26:53:E2:A3:D4:8C:AB:49:92:58:45:67:EE:C6:5F:71
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KglGfCZT4qPUjKtJklhFZ-7GX3E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.252/32

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:e0:8b:e9:d3:6f:e8:32:a3:52:0e:59:98:7b:4a:0d:70:
         a8:38:a6:3c:b8:75:e0:83:d4:92:9a:ac:ba:bb:77:09:e0:26:
         0e:8e:6e:d7:3a:62:d3:03:bf:4e:07:f7:96:11:15:87:65:6f:
         cb:27:56:42:a3:4c:a5:b1:68:ec:8d:32:49:f4:29:c2:c0:f1:
         5b:f6:b5:1a:d4:f0:86:46:c9:c0:6b:c0:c4:fb:2c:97:b3:3d:
         86:1b:8c:fa:c5:c5:e4:19:ad:66:aa:dc:a4:2c:79:3b:8f:e6:
         ae:6d:26:6f:22:b3:f7:18:23:ad:00:c1:be:ea:cf:46:a2:79:
         38:6c:73:e3:b2:24:cf:17:18:d0:79:ae:09:f8:51:b8:19:1b:
         99:31:a7:2b:b2:a5:63:83:c8:46:7d:a3:ef:58:06:ba:3a:2f:
         bb:5f:98:af:9a:15:00:54:06:cb:b3:d5:66:6e:05:5f:17:53:
         03:0e:17:b8:23:ff:85:f8:a0:73:11:87:09:7b:2b:31:b5:13:
         65:11:e2:93:e3:1b:9e:24:f1:b0:71:69:d8:e7:6c:25:9d:d2:
         9d:f9:83:3f:cd:ad:37:ca:59:94:ac:15:1c:a5:39:30:7d:ac:
         47:b3:22:d5:61:5e:1b:4f:9a:48:74:dd:9a:50:55:e7:64:31:
         ff:10:7e:72
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjA2
QkVCMTM3Qjg4REJCRUVCQTc4NTFBMEE4RjhEN0QxODI5NEFGMB4XDTIzMDIxMDA3
NDEyOFoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMkEwOTQ2N0MyNjUzRTJB
M0Q0OENBQjQ5OTI1ODQ1NjdFRUM2NUY3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN8lohbrmWTZxmzWtdFMdI+PP8h2Ahn7/FTAZ0dM2UQB38f93BnR
4P3iAUy8ncqrWGjmS5YPdSPOMp3ebbm6xRewlsi+Q7pP/FKnmiKGopDlSO6Ej2Vd
SwOYL8WiDY7+TeK/trHDkovG8860RLotWIF+2R1nvVRcKsGdyw5tw0wTAMaNNXyz
a8OM45b4dqxkQiEy1Wrr7Z75zYRuTG1PGAUOjUC45JEvsNpZlh5eJi6COiPeU9FZ
l7wFA/qi6voBufosr+38jCJ2y1J2K45ykbSXpkTucMX5SL4ys2dsKFofFI7cQCfs
OkRl1aM2dAlg+BNsXcUUsmONtgOJQCNvBQ8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQqCUZ8JlPio9SMq0mSWEVn7sZfcTAfBgNVHSMEGDAWgBQWBr6xN7iNu+66eFGg
qPjX0YKUrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODMvRmdhLXNUZTRqYnZ1dW5oUm9LajQxOUdDbEs4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRmdhLXNUZTRqYnZ1dW5oUm9LajQx
OUdDbEs4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTgzL0tnbEdmQ1pUNHFQVWpLdEprbGhGWi03R1gzRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgABMAcDBQDK7Fr8MA0GCSqGSIb3DQEBCwUAA4IBAQAxSuCL6dNv6DKjUg5ZmHtK
DXCoOKY8uHXgg9SSmqy6u3cJ4CYOjm7XOmLTA79OB/eWERWHZW/LJ1ZCo0ylsWjs
jTJJ9CnCwPFb9rUa1PCGRsnAa8DE+yyXsz2GG4z6xcXkGa1mqtykLHk7j+aubSZv
IrP3GCOtAMG+6s9Gonk4bHPjsiTPFxjQea4J+FG4GRuZMacrsqVjg8hGfaPvWAa6
Oi+7X5ivmhUAVAbLs9VmbgVfF1MDDhe4I/+F+KBzEYcJeysxtRNlEeKT4xueJPGw
cWnY52wlndKd+YM/za03ylmUrBUcpTkwfaxHsyLVYV4bT5pIdN2aUFXnZDH/EH5y
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:04 2023 by rpki-client on console-fra.rpki-client.org