Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LyZq7T4Xf1lGBpA6ZEZAmllZ9GE.roa
File:                     LyZq7T4Xf1lGBpA6ZEZAmllZ9GE.roa (raw, json)
Hash identifier:          YWjhjajVQSp9tHpJPbzqZKUxDqmNX1T6lTunzsE5mFs=
Subject key identifier:   2F:26:6A:ED:3E:17:7F:59:46:06:90:3A:64:46:40:9A:59:59:F4:61
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0253
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LyZq7T4Xf1lGBpA6ZEZAmllZ9GE.roa
Signing time:             Mon 20 Feb 2023 08:01:31 +0000
ROA not before:           Mon 20 Feb 2023 08:01:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.23/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2F266AED3E177F594606903A6446409A5959F461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:54:30:ce:17:40:41:c5:73:34:27:c8:37:
                    fe:4d:7b:8c:63:4e:09:cc:98:eb:bb:3a:aa:08:ce:
                    49:a6:98:b8:27:06:b0:a1:39:cd:be:54:c4:0c:2b:
                    93:8d:b9:15:30:4f:7a:0a:4f:e4:51:45:cd:46:5a:
                    39:21:b3:97:85:c4:ee:1b:7e:0f:34:71:c3:41:d3:
                    5c:2f:6e:d1:d8:e9:db:03:66:2f:40:ba:cd:1f:a0:
                    81:32:fc:db:56:35:56:45:8a:b7:31:cb:39:bb:dd:
                    ce:b2:ba:ee:f9:b0:6b:03:a7:7b:56:6b:40:93:fa:
                    f3:be:81:fa:2d:1a:1b:fd:f8:04:63:c0:2f:25:84:
                    1f:9c:bb:28:f5:52:97:68:b1:dd:2b:db:49:32:22:
                    89:e8:00:f3:0e:91:a4:4d:6c:41:4b:7a:e0:b9:46:
                    7d:38:66:15:87:b5:de:24:7a:77:37:0f:15:84:ac:
                    72:8c:23:ad:43:2a:61:f0:74:3d:9b:f7:bf:2a:f2:
                    28:d7:8b:b2:18:b2:9d:56:6c:00:06:44:33:29:fd:
                    53:fd:85:4a:1d:28:26:c4:35:b9:74:e3:e7:c3:44:
                    cd:64:0a:2a:ba:92:69:8c:6d:8d:3b:e3:1b:79:42:
                    e3:32:1b:7a:8a:80:33:8e:6b:7f:f8:00:fb:ed:d8:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:26:6A:ED:3E:17:7F:59:46:06:90:3A:64:46:40:9A:59:59:F4:61
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LyZq7T4Xf1lGBpA6ZEZAmllZ9GE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.23/32

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:56:ed:7a:a6:48:12:9b:18:89:8a:51:7d:26:cf:3c:91:
         75:00:9f:83:e7:4b:8b:67:07:16:b6:48:78:8d:15:9f:fe:f3:
         e9:6a:cc:c2:2a:25:d5:4b:53:bd:d1:7d:3c:bc:85:fc:f2:1b:
         54:f0:60:23:66:6d:ed:e2:94:69:79:37:04:66:5a:f8:29:3e:
         40:79:7e:c2:be:01:92:f3:bd:5f:3e:f5:19:2d:13:40:93:08:
         be:81:70:f9:e5:f5:36:90:0f:2b:57:85:8c:ce:e0:41:d3:71:
         ee:93:c9:68:9c:0f:f7:8a:48:60:eb:6b:a7:d0:9f:4e:96:96:
         ab:f7:ff:bc:c1:8b:ae:37:a1:3f:9c:ed:73:64:d9:0f:ce:c9:
         a9:ae:b5:a4:2a:ef:95:68:0f:28:bc:9c:ce:41:41:69:ad:ed:
         5d:5b:d9:08:e6:6c:22:17:bb:91:cd:5c:5f:2b:fe:08:54:0a:
         d4:5a:3b:a1:86:da:80:46:c7:53:ee:1e:ae:f7:66:ad:78:f8:
         9c:bf:01:44:23:86:a7:8a:4e:46:94:1d:80:68:71:5b:13:9c:
         0b:2d:6f:c7:4f:5f:8b:fa:64:ac:cc:25:10:92:2a:fb:18:7e:
         2e:3c:91:65:ec:98:91:af:44:33:ee:f0:48:bc:98:a9:26:24:
         b0:5b:00:43
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODAxMzFaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJGMjY2QUVEM0UxNzdG
NTk0NjA2OTAzQTY0NDY0MDlBNTk1OUY0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvSVQwzhdAQcVzNCfIN/5Ne4xjTgnMmOu7OqoIzkmmmLgnBrCh
Oc2+VMQMK5ONuRUwT3oKT+RRRc1GWjkhs5eFxO4bfg80ccNB01wvbtHY6dsDZi9A
us0foIEy/NtWNVZFircxyzm73c6yuu75sGsDp3tWa0CT+vO+gfotGhv9+ARjwC8l
hB+cuyj1Updosd0r20kyIonoAPMOkaRNbEFLeuC5Rn04ZhWHtd4kenc3DxWErHKM
I61DKmHwdD2b978q8ijXi7IYsp1WbAAGRDMp/VP9hUodKCbENbl04+fDRM1kCiq6
kmmMbY074xt5QuMyG3qKgDOOa3/4APvt2Jb/AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQULyZq7T4Xf1lGBpA6ZEZAmllZ9GEwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9MeVpxN1Q0WGYxbEdCcEE2WkVaQW1sbFo5R0Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcFzANBgkqhkiG9w0BAQsFAAOCAQEAdPpW7XqmSBKbGImKUX0m
zzyRdQCfg+dLi2cHFrZIeI0Vn/7z6WrMwiol1UtTvdF9PLyF/PIbVPBgI2Zt7eKU
aXk3BGZa+Ck+QHl+wr4BkvO9Xz71GS0TQJMIvoFw+eX1NpAPK1eFjM7gQdNx7pPJ
aJwP94pIYOtrp9CfTpaWq/f/vMGLrjehP5ztc2TZD87Jqa61pCrvlWgPKLyczkFB
aa3tXVvZCOZsIhe7kc1cXyv+CFQK1Fo7oYbagEbHU+4ervdmrXj4nL8BRCOGp4pO
RpQdgGhxWxOcCy1vx09fi/pkrMwlEJIq+xh+LjyRZeyYka9EM+7wSLyYqSYksFsA
Qw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-ams.rpki-client.org