Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/5pBWwA1XvLz-4u2A__FCY6XOCgk.roa
File:                     5pBWwA1XvLz-4u2A__FCY6XOCgk.roa (raw, json)
Hash identifier:          1YZQqcy/kLt62q3iTtKQVBfF6X6aCCqBfQaOJLPCZfk=
Subject key identifier:   E6:90:56:C0:0D:57:BC:BC:FE:E2:ED:80:FF:F1:42:63:A5:CE:0A:09
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       08
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5pBWwA1XvLz-4u2A__FCY6XOCgk.roa
Signing time:             Wed 14 Dec 2022 05:20:38 +0000
ROA not before:           Wed 14 Dec 2022 05:20:38 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     2514
IP address blocks:        210.231.136.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec 14 05:20:38 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=E69056C00D57BCBCFEE2ED80FFF14263A5CE0A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:63:c3:72:eb:12:e7:a4:a4:4c:01:af:96:
                    bc:c9:d5:8b:21:62:bd:37:49:5f:a7:84:12:dd:63:
                    48:1c:75:52:0b:72:68:ac:4a:7d:ed:1d:d3:f7:07:
                    75:6a:3d:89:77:60:bb:d8:b0:2a:0b:40:1b:bc:3e:
                    fb:bd:d0:f6:b5:d1:2b:dd:1e:60:66:01:ea:04:0c:
                    84:9e:2d:cb:83:c5:67:c6:74:67:36:37:09:68:54:
                    66:2b:31:00:e2:ec:1a:9d:8a:6b:00:df:60:6c:ea:
                    23:99:4f:fa:54:bb:a2:b8:68:48:8a:d4:7e:42:d3:
                    8f:8c:25:17:18:09:32:d7:7e:07:9f:08:c5:4e:28:
                    a9:10:f7:69:81:6c:b1:65:08:d7:88:d2:29:5f:26:
                    a1:1e:ca:d9:4d:43:0f:c0:d1:3d:dc:d2:14:ca:4a:
                    fd:90:a2:95:8d:77:b0:18:ba:2c:95:03:10:d8:7a:
                    10:97:47:f8:6f:a5:ae:dd:18:7b:d5:44:46:b4:34:
                    d9:a0:22:d8:2b:19:33:39:29:ac:04:14:3e:89:1b:
                    54:40:4a:31:e0:98:37:ab:d5:11:d4:cb:d0:d8:9e:
                    32:b8:ca:9c:2f:47:24:ba:07:dd:76:bf:4b:56:27:
                    ad:b7:1c:7c:c2:aa:6f:91:3b:62:da:e8:15:0f:85:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:56:C0:0D:57:BC:BC:FE:E2:ED:80:FF:F1:42:63:A5:CE:0A:09
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5pBWwA1XvLz-4u2A__FCY6XOCgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:95:64:5a:1b:86:c5:94:ad:72:b1:9e:95:06:96:d8:d7:
         06:73:11:ad:09:e1:ce:e4:59:bb:4c:cd:af:ef:e6:9a:13:9f:
         12:34:92:e6:8b:e1:c7:99:8e:e6:2f:6e:74:4a:22:8a:65:61:
         d5:04:cb:6e:d4:93:5f:13:3d:3e:82:86:ae:e8:fe:c1:3f:aa:
         d4:bf:af:1a:82:48:c3:70:e3:c4:bc:59:28:2b:0a:37:0b:2b:
         7c:af:df:2b:a2:81:dd:7a:f2:4b:b7:5e:ed:00:81:38:f3:22:
         f0:57:ce:c0:df:e7:f0:13:11:06:d6:33:01:47:ac:1c:9e:9b:
         01:8b:4e:e3:c3:e7:af:0e:f9:2e:3b:10:72:9f:de:eb:33:6f:
         89:be:de:0f:1b:52:ca:02:2a:44:78:b2:de:4a:92:ea:8c:9a:
         60:00:8d:f9:89:75:56:12:de:05:d2:7e:7d:63:3a:25:21:68:
         39:9a:27:dc:63:4f:80:53:94:12:c2:40:c2:8f:de:d3:72:06:
         6a:19:43:32:9e:6e:0e:f8:28:f2:8d:fa:55:5e:3c:73:bf:76:
         56:b2:0c:da:a2:b2:d2:0e:11:ad:f9:e0:3e:a6:5b:68:b9:82:
         8c:f0:c0:40:d6:94:3a:5b:af:5f:12:67:b9:09:6d:44:f3:eb:
         63:36:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org