Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XHeo-YCi8-vrUo9c-XKGBJFDjww.roa
File:                     XHeo-YCi8-vrUo9c-XKGBJFDjww.roa (raw, json)
Hash identifier:          RdS6rDxU9mqMnwyLV7scr3RzA5GKD00fuq8Dzye3KFo=
Subject key identifier:   5C:77:A8:F9:80:A2:F3:EB:EB:52:8F:5C:F9:72:86:04:91:43:8F:0C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01E2
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XHeo-YCi8-vrUo9c-XKGBJFDjww.roa
Signing time:             Mon 20 Feb 2023 07:55:31 +0000
ROA not before:           Mon 20 Feb 2023 07:55:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.20/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5C77A8F980A2F3EBEB528F5CF972860491438F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:32:95:ee:fd:a4:b7:43:01:a3:66:2f:a8:0f:
                    be:94:af:9d:83:01:36:a9:39:0c:f6:22:57:86:ad:
                    f4:f2:21:5a:63:a2:d9:85:81:b6:c8:10:13:45:e6:
                    79:d5:06:e0:52:83:d3:8e:a6:5f:ea:5c:6f:62:b3:
                    87:e9:ff:21:09:51:57:0a:8a:af:ca:87:74:ba:7c:
                    66:6a:84:3a:da:56:44:da:b3:17:96:cc:66:3c:9a:
                    23:38:ed:7f:cd:37:a1:dc:23:41:bb:6d:c9:1d:2c:
                    ff:fc:9c:8c:5a:fa:aa:a4:de:00:9a:a6:c5:c9:b7:
                    4b:45:98:8d:4d:3a:82:4f:aa:20:45:5c:17:1d:b4:
                    98:d2:6b:ed:64:87:de:76:dc:24:65:53:46:59:10:
                    bd:08:33:fb:db:7b:b1:3d:aa:d1:f6:fe:e4:57:ea:
                    aa:28:32:9b:0a:8f:df:2f:13:25:3a:85:e6:20:50:
                    b8:88:32:cc:ec:93:90:b3:53:a5:07:6d:50:3c:b2:
                    1b:a3:fd:dc:46:61:0a:a0:ab:bc:e7:f7:2a:b2:21:
                    26:96:d5:fc:ff:94:d3:c7:77:de:17:73:e3:15:1c:
                    95:07:c6:0f:f5:29:da:90:51:2b:a1:91:0a:39:ef:
                    e3:4e:3b:80:8c:00:75:0b:f8:7d:c4:88:60:81:fe:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:77:A8:F9:80:A2:F3:EB:EB:52:8F:5C:F9:72:86:04:91:43:8F:0C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XHeo-YCi8-vrUo9c-XKGBJFDjww.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.20/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:13:30:6f:57:6a:76:a2:fb:00:75:ff:29:47:e3:da:1f:e5:
         f4:52:1a:d7:0a:fc:61:f3:ae:48:79:5c:81:17:cd:a2:65:78:
         bc:9c:13:9f:15:2e:81:59:cb:00:82:3a:06:33:5e:ae:92:f5:
         bb:4c:18:d6:2c:9b:bd:e8:a5:30:24:d0:c7:a9:b6:71:91:07:
         fd:fa:a4:76:70:73:9d:7e:83:26:9e:88:82:2d:71:74:8d:d1:
         5e:97:44:f6:ea:20:f1:50:a7:49:61:69:1a:f5:79:24:3e:ab:
         d6:79:92:c8:a2:ff:56:54:9a:9c:8f:cb:ac:82:4b:4c:60:16:
         f9:0e:d6:dd:4a:d7:ee:35:d4:64:ca:d1:ce:97:4c:29:6c:8f:
         f7:de:5b:a4:3d:42:f1:6b:90:02:58:d2:ce:e7:5e:ba:b3:b6:
         37:61:d1:9a:81:6a:be:97:e7:87:16:db:93:64:3c:27:ef:9c:
         33:79:dc:d5:e0:cb:c2:ef:e1:e3:b1:4f:34:6c:ee:9f:9a:df:
         10:35:31:bb:cb:10:b1:ac:d8:6f:71:ba:ec:c6:77:b0:46:01:
         bb:0e:af:14:05:13:cd:58:e4:1f:e5:50:66:b6:21:cf:ca:0e:
         4e:1d:95:7c:93:63:a4:39:c9:27:0a:a1:9e:c7:9c:ef:3b:c1:
         19:64:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-ams.rpki-client.org