Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/9egvgduWfJC4KXAmFHpGlUZ0JfM.roa
File:                     9egvgduWfJC4KXAmFHpGlUZ0JfM.roa (raw, json)
Hash identifier:          Ni7rapw8TEk2m+Bbbu17hcxGL5M4aAUhjTp3v9e/0vU=
Subject key identifier:   F5:E8:2F:81:DB:96:7C:90:B8:29:70:26:14:7A:46:95:46:74:25:F3
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       59
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/9egvgduWfJC4KXAmFHpGlUZ0JfM.roa
Signing time:             Thu 01 Sep 2022 01:28:06 +0000
ROA not before:           Thu 01 Sep 2022 01:28:06 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7521
IP address blocks:        210.173.160.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Sep  1 01:28:06 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=F5E82F81DB967C90B8297026147A4695467425F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ec:fd:a5:5e:70:f3:94:5d:e8:a6:b7:39:f7:
                    83:86:aa:1d:72:96:7f:09:08:62:dc:2a:bb:1a:1b:
                    8a:6d:6c:3c:00:c7:a8:22:6d:8f:fb:71:53:eb:9f:
                    38:3a:1f:15:45:0f:ab:ac:53:4d:b0:fc:6b:da:98:
                    b9:5e:2f:4e:bf:58:6c:1e:59:7c:fa:af:e6:33:1f:
                    09:0a:71:17:95:02:0d:08:fa:bb:7b:6a:ed:32:a6:
                    b8:66:8b:ec:fe:9b:bf:f7:3b:25:ab:f2:b8:06:fd:
                    88:15:67:03:69:7b:da:70:56:c7:56:96:20:50:8c:
                    06:68:d6:b6:ae:45:11:96:c8:5e:c1:05:69:17:27:
                    fc:cd:fc:76:0a:82:39:2f:ff:0f:a0:27:dd:70:87:
                    9c:1c:d8:02:d1:2c:bd:1b:8a:4a:b1:af:bd:01:06:
                    36:01:60:29:c1:0e:00:9a:66:eb:4f:22:49:12:17:
                    eb:e8:3e:65:d8:75:4f:aa:a5:dd:0f:d5:5f:90:04:
                    ec:79:c2:c3:79:cb:18:e0:6e:09:dd:30:8b:15:9a:
                    08:b7:c2:f3:c1:21:44:57:d8:4d:19:b0:cb:e9:4e:
                    2f:ba:83:e2:e9:03:95:5f:95:d9:a4:00:76:62:17:
                    dd:f6:86:6f:6c:09:43:22:ee:24:46:01:ca:3e:18:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:2F:81:DB:96:7C:90:B8:29:70:26:14:7A:46:95:46:74:25:F3
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/9egvgduWfJC4KXAmFHpGlUZ0JfM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:10:5c:47:29:2e:17:4f:f0:9d:4c:d1:32:0d:ed:7a:a7:d3:
         19:cc:35:38:7c:27:50:a6:2f:3d:d9:05:77:8c:ce:b7:22:e4:
         97:a8:6d:da:e4:7f:a1:cf:e4:b5:78:1b:2d:9d:99:bc:4d:e0:
         b6:6b:af:73:6f:94:47:de:61:fa:33:4d:be:42:9b:04:c1:0b:
         a3:04:3c:a8:bd:e0:2a:ca:c9:92:5a:fd:3c:9b:00:37:91:34:
         b5:06:8a:4b:44:95:9d:d1:dd:ec:ed:53:4e:3f:c7:e0:30:27:
         d2:b1:95:cb:bd:1d:ec:7f:d1:b6:ec:77:16:18:bc:b7:3c:28:
         3a:be:d3:8d:90:84:94:f0:d4:0a:2e:93:62:a2:91:76:ef:bf:
         55:8e:0e:b8:c7:7f:a7:c2:87:eb:8e:fe:30:7a:ae:53:0a:94:
         df:c8:4e:3c:8c:dc:c2:20:64:7d:86:c6:56:e4:77:1f:4e:a7:
         38:4e:53:ae:9d:76:e1:86:93:27:ae:e5:fd:6f:2a:03:bd:cc:
         0d:f0:0e:91:37:8b:a1:4e:4c:28:c9:21:44:55:79:3b:99:a1:
         66:5e:30:da:e5:99:64:bc:76:03:b8:1f:01:f8:f1:65:ce:61:
         e0:e5:a9:c8:b0:a4:3d:86:f5:89:1f:0d:27:1c:8c:c3:78:89:
         a6:85:6d:58
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzAx
OEI0REZFNTRCRDY0NEUwMDA2NDFBMjM0QjQ3MURCMjBCODkyMB4XDTIyMDkwMTAx
MjgwNloXDTIzMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoRjVFODJGODFEQjk2N0M5
MEI4Mjk3MDI2MTQ3QTQ2OTU0Njc0MjVGMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN/s/aVecPOUXeimtzn3g4aqHXKWfwkIYtwquxobim1sPADHqCJt
j/txU+ufODofFUUPq6xTTbD8a9qYuV4vTr9YbB5ZfPqv5jMfCQpxF5UCDQj6u3tq
7TKmuGaL7P6bv/c7JavyuAb9iBVnA2l72nBWx1aWIFCMBmjWtq5FEZbIXsEFaRcn
/M38dgqCOS//D6An3XCHnBzYAtEsvRuKSrGvvQEGNgFgKcEOAJpm608iSRIX6+g+
Zdh1T6ql3Q/VX5AE7HnCw3nLGOBuCd0wixWaCLfC88EhRFfYTRmwy+lOL7qD4ukD
lV+V2aQAdmIX3faGb2wJQyLuJEYByj4YYfUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT16C+B25Z8kLgpcCYUekaVRnQl8zAfBgNVHSMEGDAWgBRnAYtN/lS9ZE4ABkGi
NLRx2yC4kjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjA3L1p3R0xUZjVVdldST0FBWkJvalMwY2RzZ3VKSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1p3R0xUZjVVdldST0FBWkJvalMwY2Rz
Z3VKSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDcvOWVndmdkdVdmSkM0S1hBbUZIcEdsVVowSmZNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9KtoDANBgkqhkiG9w0BAQsFAAOCAQEAWBBcRykuF0/wnUzRMg3teqfTGcw1
OHwnUKYvPdkFd4zOtyLkl6ht2uR/oc/ktXgbLZ2ZvE3gtmuvc2+UR95h+jNNvkKb
BMELowQ8qL3gKsrJklr9PJsAN5E0tQaKS0SVndHd7O1TTj/H4DAn0rGVy70d7H/R
tux3Fhi8tzwoOr7TjZCElPDUCi6TYqKRdu+/VY4OuMd/p8KH647+MHquUwqU38hO
PIzcwiBkfYbGVuR3H06nOE5Trp124YaTJ67l/W8qA73MDfAOkTeLoU5MKMkhRFV5
O5mhZl4w2uWZZLx2A7gfAfjxZc5h4OWpyLCkPYb1iR8NJxyMw3iJpoVtWA==
-----END CERTIFICATE-----
Generated at Tue Aug 1 02:04:59 2023 by rpki-client on console-fra.rpki-client.org