Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mZX-gASvYDiN78MaoR42Lb_lXnw.roa
File:                     mZX-gASvYDiN78MaoR42Lb_lXnw.roa (raw, json)
Hash identifier:          hTZFSl60LZWGXdHDnhvHEbxHeOo++VALcTpn80nOXTI=
Subject key identifier:   99:95:FE:80:04:AF:60:38:8D:EF:C3:1A:A1:1E:36:2D:BF:E5:5E:7C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       10
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mZX-gASvYDiN78MaoR42Lb_lXnw.roa
Signing time:             Mon 12 Dec 2022 09:37:02 +0000
ROA not before:           Mon 12 Dec 2022 09:37:02 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     0
IP address blocks:        202.236.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Dec 12 09:37:02 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=9995FE8004AF60388DEFC31AA11E362DBFE55E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:40:ad:ae:b2:a8:46:8f:3e:ee:7b:10:a1:
                    e3:37:c6:7e:ab:46:7b:dc:78:0e:13:fd:7f:78:92:
                    c3:c5:89:4c:32:73:62:13:64:e6:c5:b1:d5:74:3c:
                    96:4b:1d:2d:fe:5e:38:8f:d0:be:01:bb:63:94:53:
                    86:80:8c:99:7b:31:08:e2:c6:75:ad:63:c5:71:16:
                    98:44:20:a3:b0:84:0b:69:50:44:84:f2:9e:e2:ae:
                    55:9a:87:97:c6:e6:10:78:37:ef:36:30:06:5e:41:
                    ef:15:45:d9:f9:2c:da:51:7c:f3:d0:6d:59:a9:ee:
                    ad:7b:5a:c9:a0:54:53:51:81:cd:af:dc:6b:b6:89:
                    c8:a7:e0:0f:2c:1f:64:77:c8:93:2c:78:6f:c0:76:
                    24:13:11:08:45:96:ec:0e:b2:24:8c:3a:7c:11:3b:
                    35:02:b6:07:54:2d:70:8f:a7:0d:c1:e8:c9:2a:b9:
                    aa:85:33:e9:64:d5:62:de:2e:33:25:31:04:58:e9:
                    a3:9e:f7:ca:bb:bd:cf:1a:7f:41:4d:d7:8e:b8:d0:
                    b0:9f:75:7f:3b:5d:c2:78:0f:ed:19:cf:de:ef:81:
                    5c:d8:cf:97:f7:80:71:a6:84:90:1e:2d:57:d0:85:
                    93:15:9c:ef:fe:50:b4:b2:72:79:4f:b7:8d:83:fa:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:FE:80:04:AF:60:38:8D:EF:C3:1A:A1:1E:36:2D:BF:E5:5E:7C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mZX-gASvYDiN78MaoR42Lb_lXnw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3a:b8:e0:bc:74:3b:60:83:b3:57:34:fe:b6:bc:c4:ed:17:
         3e:31:ac:16:9a:9d:de:8b:c9:46:e4:93:25:7d:fc:8f:9e:9a:
         a4:cf:36:7d:1e:d8:46:a9:04:34:76:9b:52:5d:ef:f2:dd:d3:
         03:f1:96:8b:e1:c1:97:e0:01:74:8a:e9:dc:01:63:e7:85:54:
         45:c4:bd:c0:84:a7:39:3c:b0:2c:a2:e4:6d:fe:62:76:d7:de:
         61:cf:1e:e3:e7:3e:88:8e:32:e7:68:21:84:4a:80:c5:2e:a0:
         98:bb:58:2c:89:82:f6:f6:3b:12:54:03:aa:33:4c:17:79:75:
         07:94:c4:45:cf:e5:e2:67:14:b2:2c:fd:35:62:43:0c:5a:57:
         4a:1c:e4:97:5f:1a:19:13:90:3e:41:56:b5:e2:77:11:2c:de:
         ce:8d:6c:70:fe:85:ac:f4:44:53:66:a5:94:70:7f:97:9e:a5:
         7f:c1:20:1a:ba:56:e5:3f:de:72:82:7b:de:19:ba:0e:32:b7:
         6a:cf:fe:22:46:e1:fc:6a:65:eb:9f:05:9c:20:72:73:fc:a3:
         a9:e2:b4:93:1a:3d:1a:22:f8:ed:4e:8e:fa:ca:11:36:b4:fa:
         c0:bf:b2:9f:05:6f:c0:5d:d4:67:7c:46:41:40:e9:67:c9:c4:
         1e:cb:b5:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-ams.rpki-client.org