Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LaPVQUuNOj_XFqmwkQA0ImiEKWY.roa
File:                     LaPVQUuNOj_XFqmwkQA0ImiEKWY.roa (raw, json)
Hash identifier:          HcW/1USGbP+lDH6BXQyxzUYkH6MPG2Uh+sYgFVV+bTE=
Subject key identifier:   2D:A3:D5:41:4B:8D:3A:3F:D7:16:A9:B0:91:00:34:22:68:84:29:66
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02D3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LaPVQUuNOj_XFqmwkQA0ImiEKWY.roa
Signing time:             Mon 20 Feb 2023 08:07:30 +0000
ROA not before:           Mon 20 Feb 2023 08:07:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.115/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2DA3D5414B8D3A3FD716A9B09100342268842966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:a5:2f:44:74:00:5e:78:79:53:5c:53:3a:
                    43:30:04:d7:69:45:df:fc:10:4e:d6:81:6e:b7:93:
                    0d:75:f6:39:0f:68:50:d5:50:78:03:aa:ad:67:86:
                    ed:af:3e:3d:d3:77:3f:82:c9:a4:47:b2:eb:c5:16:
                    8e:08:c0:34:e8:18:bd:d8:53:ff:d2:53:5a:09:c3:
                    c5:d3:fe:ff:8c:13:f6:b0:c1:e4:aa:bf:4d:a5:10:
                    42:cc:70:43:90:3d:c6:64:36:66:a1:83:99:28:ae:
                    aa:6d:45:a3:79:46:78:0c:62:81:4a:e4:95:6f:39:
                    7a:70:57:d6:a5:b7:db:c8:fa:de:08:cf:71:48:24:
                    d8:99:79:b2:b0:82:c7:4c:1a:4d:c1:78:7f:3e:3b:
                    da:de:d6:4c:1b:83:ce:e8:57:cd:3b:aa:0c:0d:6b:
                    eb:9d:ca:73:f5:f6:d5:0b:45:f4:69:b6:da:db:de:
                    e1:b1:6e:17:57:84:8d:56:cc:4a:42:6d:19:0c:b0:
                    47:b3:66:0d:ee:50:e4:8f:e2:df:43:31:1a:92:48:
                    65:e8:30:c8:05:9f:83:d1:89:67:1d:1d:c8:dc:35:
                    a6:08:43:c6:70:7f:f8:17:b3:93:ad:03:9e:6e:41:
                    bd:f0:bc:77:e6:f4:1a:d0:1e:45:5c:80:96:e0:f6:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:D5:41:4B:8D:3A:3F:D7:16:A9:B0:91:00:34:22:68:84:29:66
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LaPVQUuNOj_XFqmwkQA0ImiEKWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.115/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:50:75:e1:10:cc:e5:02:2f:1f:09:64:be:52:0b:66:78:
         b8:81:ad:1e:c5:2a:22:4f:52:26:77:55:f3:c1:69:50:b6:e3:
         58:4b:f4:56:5f:42:13:4e:9a:34:a7:8b:56:ec:f1:70:74:ea:
         9f:9f:6d:fa:f2:09:dc:06:2d:9e:7e:49:91:3d:31:30:14:6e:
         44:26:f9:ff:bb:77:28:5a:8f:0a:54:9a:26:9f:1e:5a:9c:fc:
         7d:76:f0:3b:ce:13:fe:df:9e:16:50:bb:17:8f:55:8e:60:ea:
         c5:d9:43:8e:30:4f:57:cf:16:b2:fe:a7:7f:b8:c9:59:c9:22:
         4c:26:96:32:d1:8b:f8:dc:d0:c1:1c:36:7f:fb:4e:76:bc:0b:
         79:5d:f9:1f:69:db:39:a0:4c:bd:65:94:9d:8c:fe:fe:64:fe:
         68:54:9d:69:db:6b:b8:19:4b:b4:3e:1a:17:6c:68:cb:d5:ea:
         38:24:ec:94:c3:f3:1e:f8:2d:ce:3e:57:9b:77:2f:3c:ba:a2:
         6c:a8:2b:f4:ee:01:91:92:e6:5b:e9:67:a0:d0:e6:c0:f3:29:
         26:f8:69:9a:ef:41:6e:35:6d:5e:7e:f4:18:01:57:44:84:6b:
         dd:32:58:af:35:db:ab:a6:6e:a5:b1:cb:0d:ac:dc:32:bd:90:
         1b:0b:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:04 2023 by rpki-client on console-fra.rpki-client.org