Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa
File:                     L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa (raw, json)
Hash identifier:          CNBuWcx7kJfWRFpRxH42ofb8ZeAmwTiVd8eoWwLkPTE=
Subject key identifier:   2F:A9:29:7B:F7:4F:96:47:FD:CB:3C:32:C4:5E:05:5B:81:E8:67:52
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01EC
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa
Signing time:             Mon 20 Feb 2023 07:57:26 +0000
ROA not before:           Mon 20 Feb 2023 07:57:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.235/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2FA9297BF74F9647FDCB3C32C45E055B81E86752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:e4:93:34:75:ed:95:42:05:b7:20:f3:20:
                    18:7b:57:61:0b:bb:b2:66:d4:9d:80:93:4e:9e:4f:
                    ee:8e:af:65:c1:88:0e:b6:aa:40:78:85:d0:75:5a:
                    5d:a6:23:d4:cd:5c:91:47:6e:25:af:cf:62:bb:0e:
                    69:ac:2b:fd:dd:23:c0:46:f8:db:b4:04:0a:54:53:
                    91:66:72:1f:09:23:fb:43:d7:a2:6d:50:c6:20:af:
                    dd:ad:72:9c:08:72:30:0c:c9:69:1c:00:cd:a3:b0:
                    2f:24:3b:e7:37:3a:1d:9b:46:44:0e:5e:27:fe:5e:
                    9e:56:bd:60:08:bd:97:71:f9:e6:87:b6:6b:a9:61:
                    a1:ce:5e:58:d7:ba:ca:a6:83:b7:6c:76:94:f8:78:
                    b3:01:16:c4:7e:de:43:d1:ae:68:9b:d2:8a:7f:6f:
                    1c:41:da:b6:54:b1:f1:50:5c:96:0e:de:1e:9f:4b:
                    2a:fa:17:8b:99:83:ae:0f:e6:72:da:fd:61:aa:e5:
                    f7:a7:a9:84:6c:4c:fc:4e:36:44:7c:fe:43:2a:bf:
                    58:5c:66:e5:db:df:f6:49:37:c0:8d:90:e8:39:04:
                    ba:f9:de:c9:97:c2:1b:ab:67:17:14:8f:21:08:8c:
                    2a:f8:4f:71:e1:e9:b9:56:f9:60:b9:40:df:a2:47:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A9:29:7B:F7:4F:96:47:FD:CB:3C:32:C4:5E:05:5B:81:E8:67:52
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.235/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:51:53:d1:1b:6b:4e:cf:e0:ad:28:0a:04:c1:39:2a:7c:3b:
         63:00:d9:a3:d0:60:b7:8b:57:a1:f3:17:89:6a:78:54:23:24:
         cc:cf:0c:02:e5:4f:74:ab:fa:36:7c:c2:2b:61:99:95:a5:14:
         bb:13:aa:5c:e0:65:5e:ea:f9:f5:24:c0:af:47:ff:4d:85:fe:
         e6:0c:80:f5:74:12:2d:3c:a4:20:a8:ec:13:a2:63:0f:54:4d:
         d4:82:eb:ea:ad:df:51:0b:01:01:7c:6c:ad:46:0f:1d:b6:50:
         44:8a:67:3c:fc:0c:ed:9e:de:c7:1c:96:80:f8:45:80:67:34:
         f6:bd:19:af:20:0a:58:fd:44:fa:f8:ae:de:28:e4:ef:30:af:
         79:75:e5:11:85:cf:b3:c9:c1:ed:54:1e:a4:a6:23:d7:f8:26:
         dc:7b:25:96:db:8e:27:29:97:f4:a2:cf:01:bb:3c:b7:e9:ed:
         55:cc:fd:18:fd:15:33:21:eb:39:b7:86:9f:86:1c:61:24:82:
         c9:8a:14:e1:4b:4f:40:e8:88:e1:15:82:10:14:db:fd:cb:31:
         f4:05:f8:da:c2:05:52:36:b2:cb:ff:59:57:79:08:b2:f1:eb:
         8f:dd:b4:af:57:f5:76:2c:b7:49:37:cc:ad:32:e3:fe:22:58:
         bb:fd:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:04 2023 by rpki-client on console-fra.rpki-client.org