Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30037/9GcE9-NRec9ghJwJR1bSKohdg0U.roa
File:                     9GcE9-NRec9ghJwJR1bSKohdg0U.roa (raw, json)
Hash identifier:          TjPBfiTF9lsN+x6YGN6l1VUOHJdWaBsIzRa9QvTKY9g=
Subject key identifier:   F4:67:04:F7:E3:51:79:CF:60:84:9C:09:47:56:D2:2A:88:5D:83:45
Certificate issuer:       /CN=1A6BE921E7DA1F51F38C299F792F5ECC0CB6AB9E
Certificate serial:       0E
Authority key identifier: 1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmvpIefaH1HzjCmfeS9ezAy2q54.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/9GcE9-NRec9ghJwJR1bSKohdg0U.roa
Signing time:             Fri 28 Oct 2022 09:04:52 +0000
ROA not before:           Fri 28 Oct 2022 09:04:52 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     0
IP address blocks:        2001:2c8::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A6BE921E7DA1F51F38C299F792F5ECC0CB6AB9E
        Validity
            Not Before: Oct 28 09:04:52 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F46704F7E35179CF60849C094756D22A885D8345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:2b:e6:77:f2:c1:55:03:fb:ef:3b:98:bc:
                    40:45:13:cc:85:4c:09:d4:fd:fb:32:df:5a:05:e0:
                    f3:ab:6e:53:e7:87:ec:c7:40:60:23:3c:c2:dd:ab:
                    22:e1:c6:ea:40:7d:1b:60:58:6c:7f:7b:f1:46:38:
                    e9:70:08:db:6e:5a:ab:a4:75:a3:91:f7:91:63:d4:
                    d8:fe:48:e4:b8:bb:99:1f:17:1e:2d:07:68:ea:5f:
                    fd:f5:7e:c2:59:cc:20:b1:08:8b:ba:0b:10:f1:40:
                    6f:3f:3a:c2:4a:b4:bb:f1:f4:5e:09:54:13:d3:dd:
                    5c:8f:36:05:d8:d0:fa:a1:9c:0b:28:75:15:7f:71:
                    c4:10:10:92:2e:23:50:dc:2d:55:f0:6c:b5:55:00:
                    9b:fe:9a:10:b8:64:9c:a5:2d:e6:f2:0b:27:3e:91:
                    6a:c3:be:0c:96:5a:0f:e7:1d:3f:3b:b2:94:17:a9:
                    8e:09:57:cc:eb:04:59:5c:6f:08:47:eb:5f:07:05:
                    ca:bc:57:d1:e6:dd:65:3c:15:77:75:6d:fa:78:33:
                    ca:55:17:5c:95:71:c0:63:8d:b2:ce:bb:76:bd:95:
                    5d:fa:5e:97:c8:45:20:26:2e:9c:72:31:16:db:d6:
                    4b:b4:d6:10:5a:28:28:84:0c:41:f1:70:1c:00:c0:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:04:F7:E3:51:79:CF:60:84:9C:09:47:56:D2:2A:88:5D:83:45
            X509v3 Authority Key Identifier:
                keyid:1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/GmvpIefaH1HzjCmfeS9ezAy2q54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmvpIefaH1HzjCmfeS9ezAy2q54.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/9GcE9-NRec9ghJwJR1bSKohdg0U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:38:9f:2f:ba:22:c5:7f:bd:68:0d:90:40:b1:6b:d6:a1:c7:
         4c:31:56:4d:a1:df:4c:36:7d:19:c3:22:50:bd:a3:23:e8:77:
         f9:1a:f8:88:12:ff:f2:4b:32:10:dc:af:dd:f6:60:6d:76:1e:
         5a:74:fb:81:d6:17:d1:e3:7f:db:1e:4c:45:4b:64:ee:85:5f:
         80:74:4f:2d:2a:1f:54:fc:09:74:c9:e9:c7:8c:ec:07:be:71:
         f8:cb:b0:3f:45:6d:63:32:a5:91:2f:44:64:43:f4:6c:4a:6d:
         c6:74:ac:63:46:c2:aa:52:39:13:ad:9c:01:dc:2a:b6:af:ba:
         39:c6:77:2b:7b:ab:d0:cc:0d:40:38:dc:1d:9f:e7:d0:c5:56:
         b9:00:42:12:92:e7:bf:37:31:80:c4:09:84:8d:2d:f5:78:e0:
         1d:b6:c3:af:fd:64:a5:ba:85:45:6e:1d:86:41:b2:1e:f9:70:
         c1:20:6c:f8:12:ce:7d:a6:c6:81:f6:2b:db:54:55:46:11:58:
         c5:96:09:92:8a:18:54:8f:7b:15:2d:d1:17:d9:04:10:a6:77:
         d7:2a:00:f7:8a:d0:c2:cb:d4:7a:69:9c:ae:d5:35:4b:10:69:
         e1:f7:75:2e:22:b6:08:16:c7:0c:ed:03:4a:bd:45:a3:28:af:
         82:b4:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org