Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/v-ejPNQs7fbwnfflx9s6GDZ-jcQ.roa
File:                     v-ejPNQs7fbwnfflx9s6GDZ-jcQ.roa (raw, json)
Hash identifier:          WoiY1Ntk/1n5SjbGIqB2DpelOczwpH0vk/jyQ+QXXnU=
Subject key identifier:   BF:E7:A3:3C:D4:2C:ED:F6:F0:9D:F7:E5:C7:DB:3A:18:36:7E:8D:C4
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       5D
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/v-ejPNQs7fbwnfflx9s6GDZ-jcQ.roa
Signing time:             Sat 01 Oct 2022 01:28:57 +0000
ROA not before:           Sat 01 Oct 2022 01:28:57 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     38644
IP address blocks:        210.173.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct  1 01:28:57 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=BFE7A33CD42CEDF6F09DF7E5C7DB3A18367E8DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:89:86:ae:a8:e0:b0:86:cf:31:48:ea:c0:
                    e5:20:65:03:fc:f1:45:ed:45:0c:f1:57:d8:e1:7a:
                    4a:8b:9d:67:df:87:df:de:d1:99:99:59:6e:9f:71:
                    2c:68:88:17:e9:bc:5d:cb:63:c1:6f:23:0f:16:09:
                    5a:5e:82:9f:1f:ca:d3:b5:69:51:73:79:f3:2d:85:
                    62:f0:fa:c6:9a:54:76:f6:91:29:4b:77:2f:4f:16:
                    7a:da:ff:64:f6:54:35:40:27:b8:84:47:78:81:5f:
                    1b:f8:80:f6:11:ad:ce:a3:9c:fe:ad:59:93:00:72:
                    0f:82:31:d7:bb:38:ca:b5:3a:dd:b4:38:b2:fe:cb:
                    22:58:23:95:f3:99:13:b6:18:f0:81:09:29:62:20:
                    4f:82:d6:5d:40:22:7c:e2:45:76:6b:a2:b9:8a:f7:
                    e6:97:00:10:60:1c:0e:fc:b0:05:97:ee:13:ed:31:
                    9b:71:55:e7:ac:33:0b:75:80:a5:95:de:ce:4e:34:
                    9f:7b:e5:93:33:0e:17:f8:47:39:ff:f1:8e:a2:dc:
                    6a:5d:cd:58:22:89:e1:52:7f:a4:bf:0a:52:61:6e:
                    5e:52:97:66:73:8f:a2:cf:0e:1e:3b:8b:18:ef:f0:
                    17:66:7d:c0:f8:a1:8e:13:9c:0f:06:25:94:ae:40:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E7:A3:3C:D4:2C:ED:F6:F0:9D:F7:E5:C7:DB:3A:18:36:7E:8D:C4
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/v-ejPNQs7fbwnfflx9s6GDZ-jcQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:33:fd:72:64:00:c9:9d:c9:19:10:ea:25:9c:3c:bf:f9:
         21:03:4c:a2:6b:41:df:5c:cc:a6:1f:56:40:c5:d5:59:27:5e:
         b7:7b:cd:01:35:c8:1d:35:5f:68:e7:b5:a2:a5:6a:37:b3:02:
         26:a9:bf:2b:b8:3e:93:6f:91:c8:92:7e:77:9f:61:d6:25:66:
         5a:65:dd:16:d2:89:e8:69:d5:63:93:e3:ec:ec:a6:c3:56:ff:
         48:f0:67:04:c5:78:87:29:33:11:36:20:af:8b:a1:3e:72:ff:
         0e:ff:cc:21:bd:63:62:82:36:aa:17:2a:2c:e3:fa:50:f7:af:
         0d:d2:95:8a:3e:3c:68:4d:43:4a:4e:e0:c4:34:59:fa:25:47:
         16:5a:e1:04:d4:84:e2:be:3b:f0:42:43:6d:ab:99:b7:87:3c:
         82:63:dd:5e:2f:3c:8d:72:61:10:ca:c7:0a:3a:da:67:1c:c7:
         23:00:5f:eb:48:5c:0d:86:1f:a9:e1:79:50:df:4c:18:63:14:
         11:f4:e3:24:77:e6:19:a3:64:06:27:1a:92:11:16:07:e1:52:
         aa:bd:52:b8:6b:03:96:ea:46:8c:c8:f3:9b:91:62:fb:8c:ed:
         8b:e3:fc:b5:53:15:b8:38:52:36:d5:6a:7b:03:b8:4c:ea:50:
         83:0b:e0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 01:50:12 2023 by rpki-client on console-ams.rpki-client.org