Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KxFGwT4CHV9Swzj3N4MvHGxb74U.roa
File:                     KxFGwT4CHV9Swzj3N4MvHGxb74U.roa (raw, json)
Hash identifier:          0POd/M3iOWqdRuGtGIQclhbSbnrwgnux2MXSpt+n5p4=
Subject key identifier:   2B:11:46:C1:3E:02:1D:5F:52:C3:38:F7:37:83:2F:1C:6C:5B:EF:85
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       025D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KxFGwT4CHV9Swzj3N4MvHGxb74U.roa
Signing time:             Mon 20 Feb 2023 08:01:35 +0000
ROA not before:           Mon 20 Feb 2023 08:01:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.211/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2B1146C13E021D5F52C338F737832F1C6C5BEF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:02:82:c2:23:50:11:72:c2:82:73:d4:0b:
                    88:06:a5:c1:f0:d9:b2:b1:e7:4b:77:c8:5f:d7:51:
                    5a:73:26:73:16:4a:69:dc:3e:4c:5d:fb:eb:3e:cc:
                    e7:ed:6d:f4:63:96:e0:81:e7:bb:91:b9:b2:6e:80:
                    b8:70:f0:d7:77:55:dc:11:8e:f3:dc:0f:a5:da:72:
                    a0:67:4d:fb:61:35:3d:36:06:b6:dd:4b:0e:c7:75:
                    ca:97:7d:33:a3:62:37:0d:48:54:aa:20:86:20:54:
                    3a:82:90:ff:55:f4:5d:c1:95:9c:5b:dd:25:f2:b9:
                    e5:e8:8b:fc:0a:46:79:a8:af:a6:cd:56:7d:6c:1d:
                    14:43:fd:47:35:c6:4e:3e:d8:f9:b6:c1:d9:59:94:
                    85:20:02:66:53:09:20:0d:25:3a:87:6e:05:7d:d8:
                    18:dc:2a:81:4a:a1:bc:8e:37:f3:d7:ef:d6:8f:5f:
                    3e:e0:6e:b0:e3:d4:3a:33:62:a4:b7:4c:76:63:01:
                    74:4c:3e:1a:1c:99:eb:49:53:a3:0d:5a:d6:a7:5d:
                    ed:48:2a:9a:70:5b:78:18:13:01:ed:8a:e6:03:46:
                    2b:bf:c0:a9:95:6b:15:5d:8e:ab:bd:5b:b8:3a:75:
                    60:42:5e:89:1b:f8:e2:80:3a:51:eb:37:e0:c6:b6:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:11:46:C1:3E:02:1D:5F:52:C3:38:F7:37:83:2F:1C:6C:5B:EF:85
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KxFGwT4CHV9Swzj3N4MvHGxb74U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.211/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:6b:86:0a:9f:3f:f4:2e:b5:74:ee:09:aa:5c:ef:bf:d2:
         3f:8e:5e:ca:20:fd:15:1f:e7:58:f2:cc:2b:fd:4f:36:86:ff:
         8b:ba:50:a7:71:a3:40:37:52:27:60:bd:1c:9d:f6:f6:b0:5c:
         45:21:0a:71:6b:4a:87:2b:d2:92:8f:fe:fa:28:4b:98:1e:be:
         8d:37:51:92:21:6e:d7:0d:06:e3:b6:c9:7c:17:72:aa:8f:65:
         7f:26:12:3c:64:0f:fd:b8:98:25:93:01:10:b8:48:a0:ad:ac:
         11:66:bf:33:39:ea:39:0e:c7:06:16:eb:a4:ce:75:62:86:23:
         53:57:9c:3b:56:d0:4c:9c:e0:5d:6e:8e:31:c8:38:b1:5c:fb:
         98:96:e9:7c:0c:fd:d0:17:6a:6b:d9:32:8e:39:fd:85:d4:ae:
         6b:12:37:b4:6c:9c:6c:07:ce:1a:30:c2:c8:95:fa:a5:0f:2f:
         f0:6d:23:f0:be:6c:16:53:ef:24:dc:87:f0:fd:92:c6:6a:87:
         17:8e:cc:27:d4:22:84:9d:56:73:1f:dd:6b:50:d7:04:02:a2:
         d7:71:ab:dc:7e:8c:3e:43:06:3e:d6:35:1c:00:e8:fc:de:19:
         f5:32:31:cf:d6:24:9d:f4:d3:61:41:e6:b3:fe:d3:51:18:c4:
         43:79:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:04 2023 by rpki-client on console-fra.rpki-client.org