Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/LwHipT4GajRGsrUxJPM7cZ0G2H8.roa
File:                     LwHipT4GajRGsrUxJPM7cZ0G2H8.roa (raw, json)
Hash identifier:          W0FrtpNgGi+4dmrs1WnmU7U5smzMh8Yc9iupliE1Zbs=
Subject key identifier:   2F:01:E2:A5:3E:06:6A:34:46:B2:B5:31:24:F3:3B:71:9D:06:D8:7F
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       8C
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/LwHipT4GajRGsrUxJPM7cZ0G2H8.roa
Signing time:             Mon 01 Aug 2022 01:28:46 +0000
ROA not before:           Mon 01 Aug 2022 01:28:46 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        163.43.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:46 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=2F01E2A53E066A3446B2B53124F33B719D06D87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:46:09:83:7a:88:d0:ff:9c:c5:09:8e:d7:
                    05:be:63:81:0f:d2:4c:d8:5b:d5:c8:e9:7b:bd:6a:
                    2e:29:22:b1:b1:9c:d5:42:f7:84:e9:59:eb:eb:8a:
                    63:8e:12:8c:cc:9c:c9:5e:15:a6:a4:35:8b:6a:bb:
                    0c:b6:8b:0d:aa:26:69:af:3a:c1:d1:0f:78:83:58:
                    03:96:65:4c:1c:2d:3f:0c:d2:7a:c0:68:dd:6e:99:
                    ff:97:e8:fc:0c:ff:ec:da:ba:af:cc:fa:a5:5a:d8:
                    4f:4b:be:5c:7f:ed:7d:5a:90:35:64:ce:f0:70:94:
                    05:b0:01:f1:c8:cc:f5:ba:af:fe:c9:4c:38:38:0c:
                    c0:a6:b0:ca:81:e4:e2:59:1a:e5:55:e3:39:d7:b2:
                    6f:ad:5d:87:3f:cf:78:27:55:1f:fc:cd:45:f2:cc:
                    17:f8:f4:0c:ec:0a:0b:ac:44:55:04:1d:2d:c9:1d:
                    ab:50:c5:2d:63:9a:5e:8e:a4:0f:4f:fd:f6:18:9b:
                    7a:f5:c6:ae:c7:6a:0f:05:ce:40:75:d7:2c:a6:2b:
                    5e:6f:32:f1:cd:03:b2:35:4b:76:45:05:1d:07:a1:
                    fa:8d:75:aa:7a:58:4a:60:6f:76:b0:30:88:91:11:
                    70:9e:ae:3c:a8:fd:0e:fc:a7:6a:08:80:20:8d:8b:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:E2:A5:3E:06:6A:34:46:B2:B5:31:24:F3:3B:71:9D:06:D8:7F
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/LwHipT4GajRGsrUxJPM7cZ0G2H8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:73:46:d2:ba:ed:f6:dc:87:8f:94:38:4e:84:5c:8d:4c:1d:
         c8:ef:8b:d9:47:ec:00:2d:57:58:d0:b5:59:5f:74:14:76:40:
         40:1f:e4:8c:cc:23:0e:03:98:98:40:53:1f:02:e6:39:82:a8:
         bc:06:1a:28:24:3e:a4:cc:b8:25:db:7f:33:d1:42:49:ab:ce:
         15:ea:b8:34:d1:16:18:a9:e8:2c:62:f6:9b:4e:0d:00:95:b6:
         86:64:d6:b3:eb:45:1c:90:8f:90:6b:be:3b:1f:b2:31:a5:04:
         cf:92:e9:8a:f5:ed:68:a8:69:e9:22:90:a6:b3:8d:c0:a6:76:
         a6:9d:5a:ee:9c:e2:c2:f0:77:f4:92:56:aa:29:84:14:94:8e:
         b4:ac:12:92:30:97:4e:47:4b:8c:8c:89:1d:9c:ab:4f:83:00:
         ff:06:5d:d3:26:ea:9b:a2:34:5b:b7:ab:cb:e5:3c:57:8b:ff:
         c5:2f:bd:f2:7c:18:4e:eb:41:61:0f:78:d0:f9:99:d5:43:51:
         c5:d7:88:bc:02:0e:2e:e3:e7:4b:d5:6d:e6:f1:37:a2:38:b4:
         80:c3:9a:ec:24:ea:58:eb:e5:39:4e:19:da:89:72:c1:33:6f:
         ee:1f:de:b2:5f:ff:50:55:cb:a0:87:b3:f4:cb:5c:4b:c4:a2:
         60:33:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:06 2023 by rpki-client on console-fra.rpki-client.org