Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tATX0x6GZgRkO3nPdG8oleI3TO0.roa
File:                     tATX0x6GZgRkO3nPdG8oleI3TO0.roa (raw, json)
Hash identifier:          HHQ6eHvuqhLT8+NzcTbWDFpHjc7l1S+mZnz5A+DdpP4=
Subject key identifier:   B4:04:D7:D3:1E:86:66:04:64:3B:79:CF:74:6F:28:95:E2:37:4C:ED
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       67
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tATX0x6GZgRkO3nPdG8oleI3TO0.roa
Signing time:             Fri 10 Feb 2023 07:43:35 +0000
ROA not before:           Fri 10 Feb 2023 07:43:35 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.57/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:35 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=B404D7D31E866604643B79CF746F2895E2374CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:e2:b5:c3:fd:d7:da:f7:87:8e:32:ba:ba:
                    71:2a:3f:eb:af:f7:03:e8:52:8b:ea:cc:1e:e6:bf:
                    32:3b:57:51:1e:41:90:12:0d:1b:04:8b:16:61:27:
                    94:cb:b6:76:e9:29:9f:df:10:59:7f:80:c8:6c:91:
                    b8:28:5d:3d:41:76:52:39:e1:d4:51:17:ef:3b:66:
                    f1:f7:a4:37:e6:8b:0e:78:b0:69:f0:ea:00:60:ec:
                    de:9d:8e:69:9c:4d:41:bd:53:49:d2:a4:50:25:bb:
                    68:04:61:84:87:09:5d:c1:5c:5a:9d:a5:fc:0c:58:
                    d9:21:f7:0c:65:d2:32:5d:b5:76:50:db:58:f6:e1:
                    91:e5:92:1e:e2:83:c1:d6:72:d0:8c:11:ee:20:ca:
                    fe:24:cb:46:ca:1a:68:e8:1a:3d:1d:56:19:ff:1b:
                    51:45:b9:84:a8:b7:0e:bd:5d:0b:af:27:f4:3c:f6:
                    e3:08:97:59:eb:af:aa:d6:02:16:87:76:1e:dd:d3:
                    37:9a:95:7d:8c:30:13:a9:28:5e:7d:3f:d6:47:43:
                    8f:ca:75:5e:23:67:0f:8d:a1:25:e5:03:85:50:25:
                    d2:f0:d0:f3:54:aa:8c:f8:59:48:09:67:22:6e:1e:
                    47:58:f8:98:a6:36:49:55:7a:2c:d7:68:0c:47:08:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:04:D7:D3:1E:86:66:04:64:3B:79:CF:74:6F:28:95:E2:37:4C:ED
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tATX0x6GZgRkO3nPdG8oleI3TO0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.57/32

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:b0:89:1f:ad:f5:de:d3:2d:17:c3:f5:21:a2:e2:f1:21:
         ae:ff:3a:78:72:ef:a0:7b:12:76:94:fb:63:1d:4b:f9:d1:3d:
         9c:1c:e5:6c:55:00:e3:27:8b:52:a9:95:c1:bd:81:3c:82:97:
         5b:dc:99:b4:bf:41:52:91:70:8a:29:e7:39:4b:8b:8b:a2:60:
         63:2c:6d:7d:39:ff:9e:f7:d4:f7:52:c4:b5:93:98:8c:a1:27:
         df:d6:4a:83:05:87:00:01:a1:cf:21:12:55:0d:7c:da:17:98:
         3c:11:cd:ba:89:b5:d2:98:2b:6c:07:8a:ee:37:6b:9c:ef:1e:
         bb:29:db:9e:55:62:32:61:a7:1d:1e:2d:fd:29:27:77:83:1c:
         77:75:b7:e4:96:95:7d:2f:21:50:52:96:3c:96:f2:a6:0f:f4:
         e8:5d:83:4e:87:a6:59:aa:e4:5c:1e:5b:e4:28:33:8d:6a:b7:
         fe:f3:e3:42:df:32:82:49:8e:9d:48:9b:71:9b:ad:bc:2a:ab:
         1e:9c:f9:62:aa:3c:8a:24:37:2e:9b:6d:47:52:ac:92:61:0a:
         27:36:e6:06:a9:7e:ca:6f:4c:7e:47:69:28:ab:72:52:fb:0e:
         c6:a4:e6:2c:1d:c1:12:40:99:cb:70:39:eb:02:fb:69:96:ad:
         8b:77:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:06 2023 by rpki-client on console-fra.rpki-client.org