Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qLpzr8R3qDVx7YebLC9JHAnO9mQ.roa
File:                     qLpzr8R3qDVx7YebLC9JHAnO9mQ.roa (raw, json)
Hash identifier:          7+s/R1gss4h2bFPpsiI6NtAsNAKvFZ7o7u6kZbNxPVM=
Subject key identifier:   A8:BA:73:AF:C4:77:A8:35:71:ED:87:9B:2C:2F:49:1C:09:CE:F6:64
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       1F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qLpzr8R3qDVx7YebLC9JHAnO9mQ.roa
Signing time:             Mon 26 Dec 2022 08:44:51 +0000
ROA not before:           Mon 26 Dec 2022 08:44:51 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Dec 26 08:44:51 2022 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=A8BA73AFC477A83571ED879B2C2F491C09CEF664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:b2:30:3a:91:c6:32:96:22:f0:3e:6f:6f:
                    fd:55:76:01:2d:87:93:82:99:53:79:65:cf:29:7f:
                    4f:70:62:c4:6a:95:42:0f:e0:15:8a:2f:f2:cb:c0:
                    3f:6d:66:78:5a:3d:7f:ee:6c:60:67:1a:0b:60:59:
                    31:8e:45:e1:fd:b3:d0:76:db:c0:13:0c:b8:6d:d5:
                    20:71:21:6a:66:ba:30:a6:64:02:79:ae:56:19:6a:
                    5a:20:6f:34:7e:f5:b3:0e:d1:1c:52:45:76:a1:d5:
                    8c:68:93:c6:8a:65:8d:64:f2:80:3a:02:6b:be:84:
                    67:dc:10:60:86:70:9e:74:09:9e:a0:1b:7f:cf:d7:
                    98:d8:52:06:0f:e6:7b:f3:18:47:ce:27:88:89:0d:
                    57:c9:f0:c8:78:58:71:14:2d:91:84:c1:3d:f4:d8:
                    91:19:3f:b4:a8:18:f4:e6:2c:14:aa:48:92:eb:f2:
                    1e:f5:f7:00:f0:c5:a3:c0:ba:da:04:63:bf:4e:25:
                    6d:b2:d1:36:8f:86:31:ce:29:c6:44:17:60:85:e7:
                    0f:a5:9e:4d:38:8d:0e:4f:39:9a:05:92:31:ef:be:
                    f2:ad:20:7d:72:70:5f:df:07:58:86:2a:a5:59:b7:
                    77:86:3a:1c:59:92:03:3b:4d:e4:06:59:34:85:25:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BA:73:AF:C4:77:A8:35:71:ED:87:9B:2C:2F:49:1C:09:CE:F6:64
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qLpzr8R3qDVx7YebLC9JHAnO9mQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:45:41:ba:ba:21:18:3a:57:6a:7c:4e:3a:41:05:46:5a:
         6c:6b:3d:6d:ad:1f:9d:32:5e:df:b2:bc:51:83:04:9a:38:60:
         e6:b0:b2:d1:04:78:8d:be:9b:61:b7:d1:80:10:7b:a9:83:81:
         b2:e5:66:40:0c:e8:e7:38:10:54:1a:80:8c:5b:c8:97:d5:bd:
         5c:05:bb:dd:e5:a2:84:e2:b8:4f:72:73:91:53:d5:70:19:9c:
         2f:3d:76:37:b1:8c:04:94:c8:71:8d:c1:c9:50:d3:80:21:5f:
         35:e7:d6:4e:10:87:fc:59:d1:70:1d:db:e2:2d:85:96:c7:59:
         db:52:ca:14:f8:6e:b4:45:1c:f6:a2:4f:16:0b:07:05:71:96:
         36:b6:de:37:32:6b:cb:0b:79:c4:7b:94:99:c5:50:d4:35:d7:
         25:02:5c:78:aa:3a:f2:98:6f:88:54:25:58:ad:85:b8:7e:23:
         b0:22:1f:a3:ea:c0:e0:36:04:29:dd:0d:e7:3e:7e:36:d5:a5:
         2c:aa:c7:f0:60:c1:57:af:e6:a1:26:b0:2d:52:f7:48:2a:13:
         62:60:36:e2:83:7f:75:8a:cc:54:98:3f:f9:13:92:96:88:0a:
         97:5c:4e:6e:f6:c4:dc:ed:81:fb:a5:ed:a2:ac:34:ef:e9:77:
         81:f2:8f:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:05 2023 by rpki-client on console-fra.rpki-client.org