Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/G0lJDzCWJtX0SUp4BgNe6HU__oM.roa
File:                     G0lJDzCWJtX0SUp4BgNe6HU__oM.roa (raw, json)
Hash identifier:          VFtr5ZjNJyu+mejVlIPYFdMh99/NjQoM1XxrjLPyfT4=
Subject key identifier:   1B:49:49:0F:30:96:26:D5:F4:49:4A:78:06:03:5E:E8:75:3F:FE:83
Certificate issuer:       /CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Certificate serial:       2E
Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/G0lJDzCWJtX0SUp4BgNe6HU__oM.roa
Signing time:             Tue 01 Nov 2022 04:36:01 +0000
ROA not before:           Tue 01 Nov 2022 04:36:01 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2907
IP address blocks:        133.37.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D
        Validity
            Not Before: Nov  1 04:36:01 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=1B49490F309626D5F4494A7806035EE8753FFE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:e2:d5:63:1e:fe:4c:25:35:1f:32:df:54:
                    da:f3:f0:28:6b:27:07:de:f0:18:39:36:55:86:59:
                    f8:f0:53:cb:64:9a:a4:76:1a:2c:4c:85:23:9c:98:
                    5c:2d:e1:85:f1:63:fc:0e:18:06:3d:38:eb:9c:b7:
                    07:92:bd:2b:e2:8b:56:a7:1c:42:11:49:77:bc:5d:
                    b0:2d:05:09:30:47:8e:00:4e:a3:9e:e7:0f:a8:33:
                    9f:08:04:b0:69:00:7c:ed:86:d2:f5:dc:82:be:14:
                    bc:77:0f:89:08:b7:fd:8c:11:07:19:f6:8f:a7:5f:
                    32:65:01:b5:9a:1f:3e:86:66:bc:04:12:31:6b:51:
                    1e:0d:17:c4:07:1b:b8:0a:14:c9:e9:22:13:d4:ec:
                    5b:f1:c9:88:19:86:2e:24:c7:0d:63:5b:4d:df:f1:
                    8a:47:37:b1:9c:c5:6f:5e:f3:3c:3f:a9:8a:27:49:
                    ff:84:77:e8:41:53:e4:1a:4d:1e:63:f6:94:73:f2:
                    5e:4f:59:ad:4c:e1:f9:14:f3:b5:c1:eb:e6:a4:f1:
                    9f:89:a7:7c:bb:9e:0d:8b:53:34:b1:df:ed:96:35:
                    1f:7a:97:67:01:eb:8e:74:27:b9:86:22:82:ce:14:
                    d5:39:a1:e1:17:17:3b:5c:ee:2c:95:58:78:63:c7:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:49:49:0F:30:96:26:D5:F4:49:4A:78:06:03:5E:E8:75:3F:FE:83
            X509v3 Authority Key Identifier:
                keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/G0lJDzCWJtX0SUp4BgNe6HU__oM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:18:ff:a5:83:12:f2:06:27:9e:ae:1f:a9:23:00:87:57:e4:
         3a:c7:01:f0:58:7b:72:1f:48:ff:fb:b3:41:d2:38:b2:11:e4:
         53:f7:d4:2c:71:4f:77:87:66:57:55:c5:0c:66:85:c3:35:75:
         e0:b6:ba:14:83:57:01:bc:85:fe:f4:ec:f3:37:ee:69:78:26:
         92:9b:03:6e:c6:3e:04:92:a9:64:a8:23:fa:8e:59:73:29:a8:
         67:67:76:2a:ef:c2:e5:a0:d6:38:45:c7:5b:16:6b:4c:01:47:
         bb:e4:35:29:b1:19:1f:55:1c:fb:1b:8b:7b:8c:f1:7c:76:18:
         0d:5c:51:e0:97:fd:25:6f:26:94:d6:29:19:12:f7:5e:5d:7a:
         c2:2f:f9:51:01:ae:b5:d3:9a:49:dc:e9:63:69:f6:bf:80:91:
         c1:30:fd:51:59:a2:2d:32:27:04:42:99:9d:4c:9d:cb:54:99:
         ad:5e:d7:08:6f:d8:3b:8c:69:3a:f7:34:47:e1:e9:b7:0d:73:
         d8:ba:e6:6b:fb:df:98:60:eb:7f:dc:18:36:44:de:a2:4d:8b:
         0a:23:b8:66:f2:d6:2b:3b:1c:4c:b7:5f:d1:c7:ed:8c:55:57:
         12:9e:db:cc:d3:02:52:a3:92:a9:be:ea:f0:c4:10:74:76:1b:
         6f:3d:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org