Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qj2zYuRawd6v3mr-__Ju8njIDAs.roa
File:                     qj2zYuRawd6v3mr-__Ju8njIDAs.roa (raw, json)
Hash identifier:          tzcG/ykbCiFun0EnQNj7tgHjnkWY2YUY4IAM7eNAoJ4=
Subject key identifier:   AA:3D:B3:62:E4:5A:C1:DE:AF:DE:6A:FE:FF:F2:6E:F2:78:C8:0C:0B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01EF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qj2zYuRawd6v3mr-__Ju8njIDAs.roa
Signing time:             Mon 20 Feb 2023 07:57:26 +0000
ROA not before:           Mon 20 Feb 2023 07:57:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.61/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=AA3DB362E45AC1DEAFDE6AFEFFF26EF278C80C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:b5:cf:e0:02:be:04:f4:68:bb:49:7c:dc:
                    a9:fc:c5:1f:e5:7d:e8:9f:de:d8:cc:3e:e8:40:c4:
                    5f:21:63:59:d9:94:2c:0a:78:10:c6:2f:ab:70:a3:
                    b2:ee:27:bf:7a:8f:7f:91:b4:94:56:6e:e2:ac:b7:
                    0a:80:7f:39:4a:42:dd:c3:c9:10:c2:f9:d3:2b:00:
                    99:f2:e5:0c:a3:e5:cc:fd:3f:e0:a2:ed:04:16:82:
                    91:7d:51:a6:7d:06:22:78:1e:dd:f4:f6:b7:cb:2e:
                    97:50:24:e3:8a:1f:44:d3:ad:1e:c0:f0:14:12:4b:
                    a4:24:ae:6c:cc:20:3e:bd:3a:13:be:84:95:77:91:
                    6f:59:b1:8f:30:aa:c2:59:f7:18:63:70:b6:a2:bf:
                    7c:d2:a9:aa:97:d0:bd:94:ad:92:0b:ff:1a:ea:cd:
                    3e:68:5b:ea:a3:44:0a:94:e0:2a:c1:c4:14:fb:ad:
                    cc:87:31:1c:44:4f:b1:c2:04:ba:ef:b4:c2:5f:0d:
                    c2:48:1d:2a:87:28:5e:cf:d2:4c:36:56:d7:70:d5:
                    a6:a9:70:7f:dd:3e:5b:d6:98:8c:f2:ca:8c:69:1f:
                    2f:3a:12:69:0e:8c:6c:a8:49:b5:4f:a7:d7:97:ec:
                    49:18:91:82:31:17:58:50:3a:0b:d8:22:3f:e9:58:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3D:B3:62:E4:5A:C1:DE:AF:DE:6A:FE:FF:F2:6E:F2:78:C8:0C:0B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/qj2zYuRawd6v3mr-__Ju8njIDAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.61/32

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:78:ef:2f:9c:02:a1:b4:18:29:97:77:74:b4:9d:61:5b:
         41:57:95:bd:3c:47:54:74:37:be:90:25:b1:93:1d:9a:1b:74:
         f8:83:b8:c0:e4:bf:b8:ed:d9:c4:7c:07:dc:96:fc:d2:f1:34:
         fa:8d:a7:16:c5:59:c8:81:10:56:94:e0:d4:c7:52:d4:72:71:
         b5:be:20:83:22:1f:72:7a:2e:d3:03:e7:82:49:ce:4d:15:47:
         ed:2e:8e:37:56:ff:66:a2:03:d2:d4:29:82:98:31:f5:d4:26:
         69:79:49:bc:a3:61:f1:7a:e4:bc:a6:55:aa:8c:d7:b0:06:27:
         2f:3a:cf:b1:89:75:7a:d2:51:17:18:3a:f0:da:56:66:db:22:
         bc:c3:d9:2a:db:e7:3c:63:3d:17:1b:87:89:bf:64:05:3b:b0:
         5f:d5:9e:32:2b:48:55:0c:5d:52:91:0f:15:d8:d6:eb:22:c3:
         37:94:4f:ff:70:e7:d4:48:89:b3:b5:3e:ff:94:ef:b1:82:13:
         3c:26:a4:3c:7a:82:d4:14:79:c6:67:05:f1:a6:85:c6:66:4a:
         c6:84:4d:a9:08:3d:cd:04:6d:c9:0b:75:a7:bf:1c:16:96:1d:
         de:31:7e:a8:9a:e5:a4:f2:54:14:20:58:38:08:ba:36:89:06:
         1e:d4:99:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:05 2023 by rpki-client on console-fra.rpki-client.org