Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oNAHSJ5KCmHqvhimQF4xYNkGejY.roa
File:                     oNAHSJ5KCmHqvhimQF4xYNkGejY.roa (raw, json)
Hash identifier:          qQ/thplQ5FhzfF/qG/ReAaFWEPoiM6U6aU+OzNCp/V4=
Subject key identifier:   A0:D0:07:48:9E:4A:0A:61:EA:BE:18:A6:40:5E:31:60:D9:06:7A:36
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       19
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oNAHSJ5KCmHqvhimQF4xYNkGejY.roa
Signing time:             Tue 20 Dec 2022 23:41:59 +0000
ROA not before:           Tue 20 Dec 2022 23:41:59 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     0
IP address blocks:        103.180.130.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Dec 20 23:41:59 2022 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=A0D007489E4A0A61EABE18A6405E3160D9067A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:e2:56:39:80:a9:b2:bb:63:af:52:3e:a2:
                    fa:ad:5d:8b:1f:37:c8:2c:20:2a:48:82:ec:64:cd:
                    06:d9:68:ab:96:7a:cc:92:f6:76:8d:a3:31:d3:36:
                    c3:37:05:f5:66:ca:09:1e:52:8e:61:de:8d:4f:8e:
                    3d:aa:52:6a:3a:8e:ee:68:a2:72:47:6e:17:8c:06:
                    06:6e:e4:86:2d:a2:f2:d9:5c:7e:39:35:54:47:13:
                    8f:16:6e:d6:68:c2:db:00:7e:c4:80:30:52:1d:77:
                    70:7c:87:fe:fa:41:8a:e2:4e:97:82:01:fd:84:0c:
                    4e:51:25:d9:7d:cd:4a:a2:1f:59:e2:a3:c9:ea:c6:
                    8f:da:8f:b4:e1:f8:07:ae:97:a9:6e:a1:a0:23:56:
                    9a:58:7a:db:f7:39:62:c2:c6:ba:dc:81:25:c2:58:
                    fc:ad:b9:f9:6b:28:d4:76:d3:5c:3c:8b:52:19:9b:
                    8d:a9:5b:40:05:0c:ca:33:74:f5:bd:72:1b:53:a4:
                    63:4d:81:25:e9:db:b6:52:30:9a:55:70:a6:b0:11:
                    ca:25:1b:27:0b:40:f3:94:3f:d5:74:d5:cb:61:c7:
                    23:b1:25:f3:b2:cd:da:31:57:94:55:a9:f4:c1:78:
                    6a:87:6d:bb:fa:91:14:4e:4e:5d:49:26:d5:ad:67:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:07:48:9E:4A:0A:61:EA:BE:18:A6:40:5E:31:60:D9:06:7A:36
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oNAHSJ5KCmHqvhimQF4xYNkGejY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:8b:28:07:af:b0:91:bd:61:2d:a4:61:41:ce:64:6e:21:
         8c:e2:9c:37:02:9e:4e:da:89:99:83:82:b0:9b:e9:81:bd:14:
         df:48:84:35:73:5a:a7:7c:b8:04:e1:9b:82:da:f6:59:56:b0:
         11:de:bd:cf:e9:7f:c3:d8:6e:ee:93:b2:3f:89:af:ea:8a:ec:
         ef:27:5e:41:03:93:d0:bf:d5:e6:97:a6:a7:bb:75:1f:2c:89:
         5c:3e:e7:fc:2b:f0:f5:d1:50:f0:6b:d4:b9:04:78:8d:77:1a:
         18:ef:5a:a4:b5:17:3f:1b:f7:96:94:b1:39:9e:f8:79:82:52:
         8d:f4:f3:92:5d:20:73:e3:d0:a7:2b:8e:02:54:9d:4a:d4:a7:
         65:7e:c6:7f:d8:43:9d:9b:42:09:13:aa:23:38:99:08:ae:3e:
         5b:91:f0:e5:e4:72:52:10:65:29:30:45:94:22:6a:56:ee:ee:
         03:3d:ab:62:66:30:2b:35:ba:32:97:a1:e1:6a:ac:44:82:f8:
         f1:4e:3f:28:fc:44:4f:1b:ad:65:1a:97:63:8a:70:91:c1:15:
         7d:b1:3c:89:1a:ac:b5:a7:1e:5e:96:f2:fc:71:70:e2:64:8f:
         46:06:f1:f9:48:16:5c:45:4c:34:a5:d4:ba:33:4b:f3:67:df:
         99:46:d4:cb
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjA2
QkVCMTM3Qjg4REJCRUVCQTc4NTFBMEE4RjhEN0QxODI5NEFGMB4XDTIyMTIyMDIz
NDE1OVoXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQTBEMDA3NDg5RTRBMEE2
MUVBQkUxOEE2NDA1RTMxNjBEOTA2N0EzNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMqV4lY5gKmyu2OvUj6i+q1dix83yCwgKkiC7GTNBtloq5Z6zJL2
do2jMdM2wzcF9WbKCR5SjmHejU+OPapSajqO7miickduF4wGBm7khi2i8tlcfjk1
VEcTjxZu1mjC2wB+xIAwUh13cHyH/vpBiuJOl4IB/YQMTlEl2X3NSqIfWeKjyerG
j9qPtOH4B66XqW6hoCNWmlh62/c5YsLGutyBJcJY/K25+Wso1HbTXDyLUhmbjalb
QAUMyjN09b1yG1OkY02BJenbtlIwmlVwprARyiUbJwtA85Q/1XTVy2HHI7El87LN
2jFXlFWp9MF4aodtu/qRFE5OXUkm1a1nqf0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSg0AdInkoKYeq+GKZAXjFg2QZ6NjAfBgNVHSMEGDAWgBQWBr6xN7iNu+66eFGg
qPjX0YKUrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODMvRmdhLXNUZTRqYnZ1dW5oUm9LajQxOUdDbEs4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRmdhLXNUZTRqYnZ1dW5oUm9LajQx
OUdDbEs4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTgzL29OQUhTSjVLQ21IcXZoaW1RRjR4WU5rR2VqWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABntIIwDQYJKoZIhvcNAQELBQADggEBAHvyiygHr7CRvWEtpGFBzmRu
IYzinDcCnk7aiZmDgrCb6YG9FN9IhDVzWqd8uAThm4La9llWsBHevc/pf8PYbu6T
sj+Jr+qK7O8nXkEDk9C/1eaXpqe7dR8siVw+5/wr8PXRUPBr1LkEeI13GhjvWqS1
Fz8b95aUsTme+HmCUo3085JdIHPj0KcrjgJUnUrUp2V+xn/YQ52bQgkTqiM4mQiu
PluR8OXkclIQZSkwRZQialbu7gM9q2JmMCs1ujKXoeFqrESC+PFOPyj8RE8brWUa
l2OKcJHBFX2xPIkarLWnHl6W8vxxcOJkj0YG8flIFlxFTDSl1LozS/Nn35lG1Ms=
-----END CERTIFICATE-----
Generated at Fri Dec 1 02:02:47 2023 by rpki-client on console-fra.rpki-client.org