Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30376/9uWfe4yJZt0XVpCHZqH0rHnhcb4.roa
File:                     9uWfe4yJZt0XVpCHZqH0rHnhcb4.roa (raw, json)
Hash identifier:          x+ET/8wDZ5Vxyspw+4vcKDq9g02uaImfA/CEHTi0dtc=
Subject key identifier:   F6:E5:9F:7B:8C:89:66:DD:17:56:90:87:66:A1:F4:AC:79:E1:71:BE
Certificate issuer:       /CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
Certificate serial:       13
Authority key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/9uWfe4yJZt0XVpCHZqH0rHnhcb4.roa
Signing time:             Tue 01 Nov 2022 01:28:35 +0000
ROA not before:           Tue 01 Nov 2022 01:28:35 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     24277
IP address blocks:        2407:58c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Validity
            Not Before: Nov  1 01:28:35 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F6E59F7B8C8966DD1756908766A1F4AC79E171BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:1a:92:99:d0:9e:b3:68:78:bd:1a:4d:c3:
                    9c:43:37:6b:72:74:de:a5:9e:a4:93:1a:66:81:7b:
                    b4:2f:c9:49:62:98:ac:8b:39:24:a9:b6:8c:42:2f:
                    bd:be:55:f3:e3:61:48:3b:13:8e:a8:89:f4:ac:07:
                    95:0c:98:f8:39:d0:90:20:18:8b:d1:08:c9:80:5b:
                    37:4f:a1:3a:5c:0f:58:ca:04:61:2f:5f:9f:be:04:
                    26:7c:07:ea:fe:70:9e:aa:84:94:f7:13:68:eb:20:
                    3e:87:4a:1b:dd:b3:84:7c:d7:06:f7:8f:36:c6:fb:
                    74:eb:af:5b:0a:85:c7:47:cf:12:d4:0c:ee:37:cb:
                    2b:2a:b9:9a:5d:41:c7:46:4d:ea:d1:bb:3f:e8:8e:
                    f8:2d:58:a1:70:02:ef:2d:bd:07:89:cc:36:1b:da:
                    06:41:88:8e:67:9a:8f:20:1b:4b:48:2f:fe:0e:87:
                    78:9c:5d:14:b5:b8:9c:8d:64:a9:6d:d9:23:35:d1:
                    f7:20:fa:36:aa:37:b6:0b:6d:b6:75:6c:b2:a5:51:
                    b0:ef:15:b4:7d:71:2c:25:a6:f4:e7:24:7c:50:78:
                    2c:b8:af:34:97:cf:79:73:74:a3:6e:b7:9e:3e:88:
                    90:ba:cd:03:4e:66:38:5d:7b:9a:1d:6b:fa:88:b3:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E5:9F:7B:8C:89:66:DD:17:56:90:87:66:A1:F4:AC:79:E1:71:BE
            X509v3 Authority Key Identifier:
                keyid:E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/9uWfe4yJZt0XVpCHZqH0rHnhcb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:47:a4:22:9c:f5:1d:46:8e:dd:ff:e4:64:f8:ac:a5:58:
         08:41:a7:bd:c6:00:63:07:82:dd:43:52:6f:2c:3d:90:dc:20:
         10:10:4a:e4:7f:ee:7d:02:bd:68:03:f2:c8:55:62:54:48:5b:
         b4:dd:80:2b:2f:c5:85:e2:66:c6:f4:3f:38:b1:ba:1e:41:99:
         c9:b4:9f:01:d1:2c:d3:1c:e1:39:d6:92:4d:04:aa:6b:96:47:
         d7:a3:f4:f3:8a:3c:f3:39:39:45:d3:4a:8a:91:f9:e8:04:f0:
         ff:9b:6d:d6:dc:8b:6c:03:c9:a3:af:07:86:a8:d4:41:cf:66:
         2c:54:de:54:8b:4a:32:9e:8a:86:4f:ce:df:0f:84:2e:4b:f2:
         f8:62:4b:16:5a:62:0d:32:67:13:6e:1d:f2:cc:f4:4f:f0:06:
         f0:65:6b:e1:83:84:04:42:f9:eb:35:de:f0:cf:c7:b7:ec:bb:
         52:c2:0a:0c:35:a9:d4:79:46:32:e5:a7:88:c2:9e:59:9b:56:
         7d:fe:11:ee:d4:be:88:18:ad:58:6c:68:5d:16:19:01:e1:a3:
         7a:76:c2:ac:e8:60:c5:c5:c0:16:1e:46:57:d4:d1:c0:f4:6f:
         b8:42:b1:1a:08:9c:de:8b:cc:39:7b:37:d2:06:bb:a2:2e:68:
         b6:94:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org