Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/bhwqyxM-gf6xs6JjfNOEj3A8L1A.roa
File:                     bhwqyxM-gf6xs6JjfNOEj3A8L1A.roa (raw, json)
Hash identifier:          NmyKs5zF3NsqnCyZpdL1tb16rTxHTTU3haN7h2TJGSc=
Subject key identifier:   6E:1C:2A:CB:13:3E:81:FE:B1:B3:A2:63:7C:D3:84:8F:70:3C:2F:50
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01C5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/bhwqyxM-gf6xs6JjfNOEj3A8L1A.roa
Signing time:             Mon 20 Feb 2023 07:55:19 +0000
ROA not before:           Mon 20 Feb 2023 07:55:19 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.240/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:19 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=6E1C2ACB133E81FEB1B3A2637CD3848F703C2F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:06:21:ee:6c:f8:69:d7:44:e7:ae:d2:b5:
                    5e:b2:b5:0e:88:71:9b:27:f7:48:8a:6a:c2:af:15:
                    af:02:5d:83:3e:69:2c:77:a7:4f:90:a4:13:bf:63:
                    a8:65:cc:cb:f2:33:81:2f:d8:f2:2f:79:cf:2c:90:
                    4d:fd:04:d2:9a:b6:75:51:7e:dd:b8:20:95:40:da:
                    59:29:d6:b3:10:91:02:69:58:2b:36:43:f6:11:44:
                    0f:0a:b7:b6:43:37:06:cc:de:88:87:87:0b:08:8c:
                    45:59:68:1a:0f:b0:57:a2:b6:c7:9f:8c:11:b6:d4:
                    dc:0f:a9:db:0a:51:2d:39:1a:79:6a:4c:3e:7e:1e:
                    a2:95:42:7d:d9:38:be:a9:b2:64:4c:38:88:43:f5:
                    c1:40:7a:28:eb:c1:be:2d:1f:3a:79:3d:28:84:1e:
                    d5:7e:a3:b8:ca:cf:d1:85:b6:17:e5:67:48:80:2e:
                    66:dd:99:38:c9:bb:31:62:c9:28:db:e0:e6:6c:6a:
                    8c:00:c9:ff:4a:95:aa:99:1e:d3:5c:f4:69:36:49:
                    e4:a4:67:5c:9b:f5:16:52:0a:fa:b7:b6:f5:28:16:
                    0b:e5:f3:93:4d:2d:6c:8b:7c:0f:03:17:f7:5b:e8:
                    21:b5:a4:84:36:32:e9:2b:3b:43:28:4e:f0:cb:b1:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1C:2A:CB:13:3E:81:FE:B1:B3:A2:63:7C:D3:84:8F:70:3C:2F:50
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/bhwqyxM-gf6xs6JjfNOEj3A8L1A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.240/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a0:a1:e9:4b:0f:87:fd:77:06:76:15:58:8b:03:e6:b0:e2:
         0b:4a:b3:9e:ef:b1:63:50:68:4d:da:ff:66:64:19:66:d8:b7:
         d1:81:4b:30:a9:d1:f7:e1:07:30:2d:f5:45:4d:20:47:63:f3:
         03:7c:8b:8c:b5:04:70:26:3f:bc:e3:b5:2a:b9:38:65:f8:3d:
         d3:f2:81:43:3c:bc:c2:c5:92:84:fa:18:e0:ab:0d:86:63:0e:
         81:e2:bf:d0:e6:b0:88:55:ab:19:6d:43:3d:9e:e5:6b:bb:a7:
         49:7c:8d:e8:49:01:0a:6e:71:c7:2a:57:bf:a6:8c:0e:d1:cd:
         22:d1:c4:8e:71:24:6e:a9:c7:eb:9d:2a:40:24:11:44:ba:7f:
         7c:b3:af:99:3e:85:c4:0b:de:9f:a4:84:ad:e9:c9:50:6c:ac:
         42:b6:06:1a:58:cd:c6:bf:18:3b:d3:01:13:0b:65:54:b3:0e:
         75:cc:5c:fd:52:c0:4d:d6:16:27:02:80:20:f1:27:1d:90:0e:
         d5:01:4b:5f:ab:43:70:11:0a:44:5f:0c:60:b7:49:22:9d:e8:
         f4:1b:e3:c2:c0:62:6e:46:59:58:c2:01:be:35:c3:56:57:c7:
         d4:98:7e:6a:4b:a5:e7:39:5b:8c:60:fe:97:01:10:d5:ab:62:
         ed:a8:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:05 2023 by rpki-client on console-fra.rpki-client.org