Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SQpxKVIicQyESomyJ6WJr47TNRo.roa
File:                     SQpxKVIicQyESomyJ6WJr47TNRo.roa (raw, json)
Hash identifier:          wAPfkuzaAHAYgJzil7blDKqL2bjHJHaUoyfLVgb+MpE=
Subject key identifier:   49:0A:71:29:52:22:71:0C:84:4A:89:B2:27:A5:89:AF:8E:D3:35:1A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0377
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SQpxKVIicQyESomyJ6WJr47TNRo.roa
Signing time:             Thu 09 Mar 2023 07:22:55 +0000
ROA not before:           Thu 09 Mar 2023 07:22:55 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Mar  9 07:22:55 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=490A71295222710C844A89B227A589AF8ED3351A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:88:85:fa:ff:c3:9d:3e:bd:75:7d:de:67:
                    d0:0e:e3:0f:f1:53:c0:30:87:59:9f:98:bb:fa:dd:
                    af:fe:46:20:e5:e9:b3:98:53:d7:d2:09:7c:58:c1:
                    1b:51:75:27:92:f5:ca:32:7f:17:f0:62:f4:ce:e7:
                    fa:78:81:04:2e:65:b9:7f:2d:73:05:1d:a5:fc:97:
                    b7:54:d1:e2:fa:17:c5:b6:b9:f3:6c:2a:3e:ca:fa:
                    24:0e:a9:83:36:f7:24:c4:e1:c1:92:f5:d0:cd:6b:
                    fd:d1:61:a4:24:eb:56:4d:d0:9a:35:72:84:f2:61:
                    0f:a6:53:1b:c5:36:56:de:08:64:d9:aa:e2:68:50:
                    d8:f1:b5:59:47:53:fb:87:36:81:af:46:0b:35:de:
                    55:c3:ab:3d:b7:15:15:bf:05:05:d6:ea:c4:1d:bd:
                    79:dd:24:53:87:9e:0f:f9:94:26:20:4c:31:eb:f7:
                    49:0f:a9:95:05:fa:7a:99:81:50:d1:44:1f:22:f5:
                    75:6a:9c:4c:38:a8:df:12:a3:ce:d0:db:08:98:2d:
                    86:14:a0:ec:8a:c9:99:37:3e:2b:81:be:ad:e1:c3:
                    ce:bf:88:4f:c9:e7:f6:8a:85:32:71:d7:ce:de:9d:
                    75:53:63:34:47:b8:36:e3:ee:d8:56:67:ba:aa:8d:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0A:71:29:52:22:71:0C:84:4A:89:B2:27:A5:89:AF:8E:D3:35:1A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SQpxKVIicQyESomyJ6WJr47TNRo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:76:34:2e:79:86:31:f0:4e:f6:55:03:09:b1:69:03:de:
         85:7f:cc:75:96:b9:a0:d3:a8:67:cf:d5:5c:2c:6e:0d:30:69:
         da:39:b3:24:f1:d9:3a:04:c7:06:d1:d5:87:48:bd:6d:e3:88:
         be:6b:a4:15:82:f9:4e:b3:da:5e:c1:17:c0:18:93:aa:7c:f2:
         b4:8a:e8:89:0f:8c:d3:53:ac:a6:4a:5b:e0:c5:8e:e7:08:47:
         7a:80:b5:00:8e:e2:7c:0b:af:26:c6:db:a6:f2:71:ca:e9:0d:
         5f:42:be:85:e1:4a:2b:31:29:3b:40:cf:8e:bb:b9:9e:fe:b1:
         24:1b:1a:16:d1:a8:52:fa:47:2a:97:5f:43:1c:06:ea:c0:16:
         59:af:ae:aa:ba:c7:26:08:fe:8d:cd:52:cf:a9:9a:5f:0c:0d:
         ff:90:75:de:34:90:85:e9:21:d5:a3:49:4d:65:f7:76:fc:9d:
         1c:db:9a:3d:94:51:0a:18:dd:f2:89:1a:4c:19:59:55:e9:12:
         1e:eb:77:e0:57:44:d9:42:4d:3a:07:14:27:ba:71:25:c7:0e:
         7b:c7:03:23:f9:63:3c:e3:58:c9:3b:4d:5c:5d:e2:d9:9a:76:
         41:8d:40:46:29:35:df:4f:95:6e:3e:c1:11:3d:c4:d3:ea:da:
         0c:ba:4e:ed
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAzMDkw
NzIyNTVaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ5MEE3MTI5NTIyMjcx
MEM4NDRBODlCMjI3QTU4OUFGOEVEMzM1MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRSIiF+v/DnT69dX3eZ9AO4w/xU8Awh1mfmLv63a/+RiDl6bOY
U9fSCXxYwRtRdSeS9coyfxfwYvTO5/p4gQQuZbl/LXMFHaX8l7dU0eL6F8W2ufNs
Kj7K+iQOqYM29yTE4cGS9dDNa/3RYaQk61ZN0Jo1coTyYQ+mUxvFNlbeCGTZquJo
UNjxtVlHU/uHNoGvRgs13lXDqz23FRW/BQXW6sQdvXndJFOHng/5lCYgTDHr90kP
qZUF+nqZgVDRRB8i9XVqnEw4qN8So87Q2wiYLYYUoOyKyZk3PiuBvq3hw86/iE/J
5/aKhTJx187enXVTYzRHuDbj7thWZ7qqjVyhAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUSQpxKVIicQyESomyJ6WJr47TNRowHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9TUXB4S1ZJaWNReUVTb215SjZXSnI0N1ROUm8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyuxYMA0GCSqGSIb3DQEBCwUAA4IBAQBlCnY0LnmGMfBO9lUDCbFp
A96Ff8x1lrmg06hnz9VcLG4NMGnaObMk8dk6BMcG0dWHSL1t44i+a6QVgvlOs9pe
wRfAGJOqfPK0iuiJD4zTU6ymSlvgxY7nCEd6gLUAjuJ8C68mxtum8nHK6Q1fQr6F
4UorMSk7QM+Ou7me/rEkGxoW0ahS+kcql19DHAbqwBZZr66quscmCP6NzVLPqZpf
DA3/kHXeNJCF6SHVo0lNZfd2/J0c25o9lFEKGN3yiRpMGVlV6RIe63fgV0TZQk06
BxQnunElxw57xwMj+WM841jJO01cXeLZmnZBjUBGKTXfT5VuPsERPcTT6toMuk7t
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-ams.rpki-client.org