Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/g2f9JaUvGH58ouCWb7X5x7ATVw4.roa
File:                     g2f9JaUvGH58ouCWb7X5x7ATVw4.roa (raw, json)
Hash identifier:          lQHnAi4vcN3DarHNvtAC3rc+BTOxDbsXLl85VYZDtiE=
Subject key identifier:   83:67:FD:25:A5:2F:18:7E:7C:A2:E0:96:6F:B5:F9:C7:B0:13:57:0E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01FD
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/g2f9JaUvGH58ouCWb7X5x7ATVw4.roa
Signing time:             Mon 20 Feb 2023 07:57:32 +0000
ROA not before:           Mon 20 Feb 2023 07:57:32 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.68/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:32 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=8367FD25A52F187E7CA2E0966FB5F9C7B013570E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:dc:33:c5:1a:35:f6:09:44:ee:07:d9:5e:
                    7a:3b:4f:cc:18:18:aa:97:fa:fe:78:1e:e8:ce:d5:
                    44:68:54:cf:9c:6c:91:f7:ed:9e:3f:05:3d:3d:98:
                    d1:e3:4d:97:7a:de:0f:1f:0d:6a:ef:92:e5:11:45:
                    d0:51:17:fa:5f:c1:f9:81:b4:fe:0d:88:8d:60:35:
                    1e:eb:e4:42:19:fa:d8:2a:4c:1c:67:a0:a8:74:ef:
                    c1:84:12:4f:4e:48:89:2f:2f:55:60:2e:34:9c:f8:
                    4f:d5:f9:2a:58:b6:58:29:d9:a2:85:b7:c5:44:82:
                    1f:13:16:a1:42:29:2f:7b:a0:7b:7c:df:47:ce:b3:
                    3f:fe:fb:4d:31:d7:44:d6:58:9a:67:dc:69:f2:15:
                    54:39:5c:ca:21:f1:a7:fe:6b:4d:98:05:da:73:ba:
                    97:70:cc:1a:23:98:9f:21:77:0f:18:00:24:e3:6b:
                    d8:87:06:ea:47:61:ec:38:9e:39:8f:d4:ad:c5:95:
                    39:21:8b:23:81:34:6c:1e:9e:83:84:b7:bc:e4:02:
                    11:0f:31:f5:69:c1:a4:3e:a3:bc:07:d7:b7:36:1c:
                    8a:49:eb:d6:ee:d0:6c:b2:54:c8:02:fd:85:57:63:
                    48:48:b5:b1:ab:4e:6b:1c:5d:cf:4e:2e:b9:73:16:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:FD:25:A5:2F:18:7E:7C:A2:E0:96:6F:B5:F9:C7:B0:13:57:0E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/g2f9JaUvGH58ouCWb7X5x7ATVw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.68/32

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:9e:87:43:67:70:a9:54:a4:2d:ae:ac:6b:d7:df:05:30:
         f9:42:09:65:f2:5b:fb:60:85:d3:23:4d:50:39:49:7a:1c:78:
         49:d6:e9:8d:0d:90:3c:51:05:57:5d:0b:10:73:71:48:f3:63:
         60:de:98:cc:ed:0e:fe:67:34:8b:55:1c:55:05:d4:12:9f:06:
         f5:ce:ce:16:df:59:15:67:49:ca:97:41:9c:c1:4b:66:bb:b0:
         02:0d:45:00:82:20:e3:75:bd:f2:4b:04:1a:d8:69:7c:ea:1e:
         15:21:bc:90:32:51:db:ec:3c:e7:e6:25:3a:bb:f4:63:d6:55:
         ad:c4:66:a9:8e:77:f6:90:83:9e:a6:0f:a0:2d:3f:95:08:44:
         f7:41:ff:63:53:a4:74:31:6b:c8:7e:32:9e:85:85:7a:42:60:
         a1:62:74:75:92:48:ba:3a:70:43:08:bd:cf:5b:8b:2b:d3:f0:
         a8:52:8e:9e:a4:95:9e:62:8b:d7:37:02:bc:6d:c7:d7:12:59:
         85:c2:00:f7:3e:14:81:ad:bb:6c:02:0d:74:3c:e2:08:46:98:
         66:44:18:5a:57:2f:fe:bf:38:dd:fa:bb:3f:f2:8d:4f:5c:e5:
         af:0a:d3:02:1b:54:ef:ef:9e:87:df:9d:56:91:86:9d:02:01:
         ed:17:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-ams.rpki-client.org