Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ILov6-kz3IzQRWZyGsR3IAjTskk.roa
File:                     ILov6-kz3IzQRWZyGsR3IAjTskk.roa (raw, json)
Hash identifier:          QYRvmStR23JEy5mjBvjiCXF8iyu7KskefHe5BjjTAdw=
Subject key identifier:   20:BA:2F:EB:E9:33:DC:8C:D0:45:66:72:1A:C4:77:20:08:D3:B2:49
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       9F
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ILov6-kz3IzQRWZyGsR3IAjTskk.roa
Signing time:             Thu 01 Sep 2022 01:28:13 +0000
ROA not before:           Thu 01 Sep 2022 01:28:13 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:13 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=20BA2FEBE933DC8CD04566721AC4772008D3B249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:01:78:c3:61:b1:82:31:69:8e:c9:0e:c8:
                    b2:e2:fd:af:a0:92:21:f1:b9:f1:de:63:04:4b:b9:
                    2b:8d:25:92:6c:6a:ee:b0:5d:c9:74:8f:93:3a:a6:
                    d5:49:bd:28:f8:12:99:41:05:ee:6c:78:01:55:23:
                    45:81:56:88:68:dc:57:65:31:dd:8b:b4:52:82:84:
                    46:c5:90:66:36:8d:79:f2:51:f6:1b:29:12:e5:b0:
                    ff:2b:31:a7:a2:cf:5b:39:ac:d8:aa:7d:1a:fe:54:
                    34:74:48:34:86:bc:e3:2e:b9:27:4f:6a:d1:d1:fb:
                    17:38:00:c6:b7:73:9b:60:3e:8e:da:06:ad:83:bd:
                    42:54:0c:cc:30:f1:d3:53:1d:9e:c6:a9:3e:b4:4d:
                    4e:de:01:48:a2:4c:ef:ed:12:69:4d:33:75:86:a8:
                    ce:3b:43:f8:09:43:29:c7:8c:2c:0f:7a:35:31:3b:
                    c7:7b:67:de:90:f8:91:d1:9e:7d:05:13:0b:2f:e0:
                    ab:87:39:c7:50:57:ca:9d:e4:c4:ff:20:6c:10:62:
                    c1:6a:26:de:e9:ff:a7:28:19:ad:e7:2f:53:ac:43:
                    ba:a0:dd:0e:fe:21:2c:df:f3:26:a9:3b:f8:82:91:
                    40:ef:34:12:b3:96:18:c6:dd:12:9a:fd:ba:b9:78:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BA:2F:EB:E9:33:DC:8C:D0:45:66:72:1A:C4:77:20:08:D3:B2:49
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ILov6-kz3IzQRWZyGsR3IAjTskk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:94:53:69:1e:86:b9:00:a5:62:63:8b:d3:f7:8d:91:c0:e3:
         ec:de:b7:18:92:cd:65:86:6f:50:62:98:d7:ca:3a:16:bd:2f:
         04:a5:30:6c:b4:0f:24:dd:c7:c3:c6:e8:f2:29:b1:91:bc:92:
         44:36:c9:98:b6:fa:0e:60:d8:13:c0:e1:fb:f4:a3:69:ca:ff:
         e6:e6:82:8e:92:c5:2e:9c:6a:4d:59:d0:6c:64:84:c9:a1:a1:
         99:3b:7a:80:3c:0a:29:9e:d5:c6:53:24:31:99:a4:49:97:13:
         71:1d:88:78:00:52:09:1a:99:cc:a2:35:2b:ce:7d:cc:1f:59:
         e7:33:5c:68:30:8f:39:6c:72:02:59:e1:4e:8c:f6:0c:b7:b5:
         2d:a2:fc:90:2c:fd:38:1a:3d:d2:25:94:b6:c3:23:db:a1:f0:
         1a:f4:9b:5e:51:ce:48:85:5a:86:94:2c:4b:41:51:d4:79:f7:
         4b:11:1e:c3:5b:0a:48:d8:cc:64:3d:ff:82:df:b3:b7:a5:b3:
         d9:a5:7c:ee:31:38:a3:3c:18:92:ac:28:30:12:8a:4b:55:ad:
         89:90:d1:7a:a4:13:d9:3a:d1:3c:59:ab:f7:55:7c:b4:5c:28:
         65:8b:5e:e3:9d:19:e2:16:45:1f:c6:bb:64:12:92:6e:93:44:
         9b:b3:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 02:05:00 2023 by rpki-client on console-fra.rpki-client.org