Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/NZUZSMJ7OvKDkcBDdbFfnTEi0ro.roa
File:                     NZUZSMJ7OvKDkcBDdbFfnTEi0ro.roa (raw, json)
Hash identifier:          NuUnt33t9cJBheeTwU6hR3wCv9yzZLRJ6rxfXLXqsws=
Subject key identifier:   35:95:19:48:C2:7B:3A:F2:83:91:C0:43:75:B1:5F:9D:31:22:D2:BA
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       13
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/NZUZSMJ7OvKDkcBDdbFfnTEi0ro.roa
Signing time:             Fri 19 Aug 2022 01:06:14 +0000
ROA not before:           Fri 19 Aug 2022 01:06:14 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     24121
IP address blocks:        112.140.128.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 19 01:06:14 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=35951948C27B3AF28391C04375B15F9D3122D2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b0:cb:1e:63:cf:af:8b:26:48:92:39:50:e5:
                    30:36:76:e4:e4:cb:27:6e:92:84:9b:44:87:f3:e3:
                    bf:ed:1d:3f:a6:2c:bf:21:a3:17:88:de:ef:78:8d:
                    f0:8b:e0:b5:78:8a:03:24:5b:77:58:82:a8:df:eb:
                    5f:99:ee:80:33:0b:45:09:4f:98:a2:72:6c:97:f8:
                    c1:8e:4c:88:1d:4f:b9:0b:f6:2f:57:eb:64:91:c0:
                    79:43:99:ca:53:22:f3:00:6e:e6:d4:cf:5c:fb:d6:
                    51:85:7f:46:1d:01:c1:6d:e6:39:29:49:cb:fd:d9:
                    83:13:0f:49:90:25:9c:1b:2e:ec:f5:5f:33:30:6c:
                    d7:57:ed:53:78:d6:8e:d5:3f:ff:6e:a5:be:de:5c:
                    da:c7:47:a0:24:4b:34:9a:89:c0:c3:f1:e9:05:45:
                    e7:15:7c:b2:40:3a:4e:39:78:1a:09:5e:22:20:c1:
                    d3:32:a7:4a:6c:bd:94:ed:b2:dd:f5:1a:d0:bd:17:
                    ff:25:8b:1e:fa:e2:d3:ac:4c:9e:a0:bc:73:9b:ca:
                    1c:f7:43:91:ce:12:5a:44:7b:3e:ba:01:98:69:25:
                    ba:37:ac:b1:c2:78:ba:93:76:da:38:4b:35:ed:5c:
                    6d:f9:26:c7:79:31:62:5d:58:d4:a2:d1:de:d5:30:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:95:19:48:C2:7B:3A:F2:83:91:C0:43:75:B1:5F:9D:31:22:D2:BA
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/NZUZSMJ7OvKDkcBDdbFfnTEi0ro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:17:dd:dc:dc:b8:38:c1:b5:e3:27:dc:2d:83:41:f2:a4:
         cb:3f:49:ca:6e:dc:8b:c1:63:17:3e:f0:60:e9:4f:99:ad:4c:
         6b:34:4e:d7:8d:b0:96:a5:17:3f:b4:c5:00:87:58:99:d5:90:
         e6:7b:af:4c:90:5a:0f:d3:51:5a:10:63:02:3f:b3:2d:06:44:
         57:33:05:1f:0f:5c:b4:08:5f:f1:af:99:a6:a0:21:fd:0f:1d:
         d2:e5:0b:e4:62:c7:09:e3:7c:b5:01:35:0f:5a:48:cd:3c:05:
         07:bf:3b:a9:dc:bd:25:e0:c1:f9:88:59:43:1a:6c:c9:66:a2:
         8d:56:51:2e:8e:32:7b:40:7b:12:01:40:3d:52:29:aa:f2:b4:
         02:71:3b:2e:0e:f6:b5:ea:55:6c:37:99:af:f6:b5:b0:f6:ce:
         3b:a2:84:ed:a1:8d:6c:d7:b1:1c:74:cc:d3:2b:ae:79:d8:53:
         c4:5c:6b:86:0e:7e:a9:b4:86:91:15:32:fd:43:42:59:7a:67:
         b5:71:f0:4c:f0:3d:6c:77:17:01:c6:e0:49:cb:8e:59:4e:e8:
         2e:23:45:c1:d2:aa:32:05:ee:c9:bd:15:c9:28:10:ca:97:88:
         f1:02:73:45:4b:92:c2:d5:0d:d0:ce:db:59:b2:14:51:92:bb:
         32:ea:af:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 1 02:04:59 2023 by rpki-client on console-fra.rpki-client.org