Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/PPV0s7VFndfav9jHd2efkuD40lM.roa
File:                     PPV0s7VFndfav9jHd2efkuD40lM.roa (raw, json)
Hash identifier:          Mac/H4psz/03JOoHM/W1X/A5MGoubJ4DMlUWbR90Z/4=
Subject key identifier:   3C:F5:74:B3:B5:45:9D:D7:DA:BF:D8:C7:77:67:9F:92:E0:F8:D2:53
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       A3
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/PPV0s7VFndfav9jHd2efkuD40lM.roa
Signing time:             Thu 01 Sep 2022 01:28:14 +0000
ROA not before:           Thu 01 Sep 2022 01:28:14 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     55898
IP address blocks:        211.14.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:14 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=3CF574B3B5459DD7DABFD8C777679F92E0F8D253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:84:66:3f:71:37:14:a9:8a:b9:ba:07:18:
                    66:b4:69:27:11:db:eb:b2:3c:fa:7d:ad:3c:25:36:
                    df:6c:5b:93:cd:6a:a7:25:2c:70:4f:ec:d6:a5:57:
                    b6:ef:ca:ea:44:f6:e5:16:25:e6:50:d1:5f:5a:d5:
                    43:74:e8:4d:dd:74:46:e2:a2:12:81:5c:59:8c:e0:
                    e3:d9:a4:23:9f:06:91:3a:31:de:a9:94:dd:c3:61:
                    4a:67:5a:4e:04:0d:5f:9f:dd:d5:be:49:08:89:8b:
                    36:59:fe:b5:52:5f:84:d1:c5:90:bb:36:38:24:ef:
                    a5:dd:7f:50:8b:03:83:9d:96:7b:10:46:87:92:87:
                    e1:29:10:1b:b3:0f:d3:f6:93:e6:da:1a:4a:ca:6b:
                    38:50:c1:c7:59:0c:91:2a:5a:43:80:e3:90:f7:4d:
                    92:d6:57:25:db:80:b0:3e:88:d6:3b:09:f4:7b:8b:
                    c2:f5:a1:07:f7:83:05:7d:ab:61:8c:0e:c6:16:9b:
                    81:eb:74:2c:63:6c:6c:15:ed:16:55:2b:84:65:c8:
                    bc:6e:8b:78:f8:83:b2:03:1a:3b:ac:10:04:fa:23:
                    d7:4e:4b:17:8f:87:4e:76:00:ea:cc:d8:12:ff:14:
                    aa:95:2c:17:17:bc:57:c5:e7:19:ce:54:51:4b:98:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F5:74:B3:B5:45:9D:D7:DA:BF:D8:C7:77:67:9F:92:E0:F8:D2:53
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/PPV0s7VFndfav9jHd2efkuD40lM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:58:0f:65:6c:b6:ae:0b:a1:1f:27:b3:a3:0a:af:ec:9e:e1:
         7e:f8:a2:a3:87:98:d2:08:51:29:3a:06:0a:dd:3c:25:1a:16:
         eb:c7:0c:0d:79:63:5c:49:24:63:73:e7:8a:ab:e5:67:67:9b:
         00:9b:e0:6c:b2:6d:47:00:e5:c1:e9:7a:d4:c7:79:6c:04:21:
         30:84:bf:bf:36:ba:00:bf:4d:6a:f7:c4:98:2c:93:ea:a4:7a:
         03:21:c9:9c:be:06:da:cd:d0:41:1b:3f:6e:d2:c9:5c:56:ca:
         7b:7e:ab:1d:e2:ba:52:29:c4:c4:e7:38:dc:06:ce:52:8e:f1:
         83:39:29:a0:5e:70:4b:1a:da:9d:58:04:b1:63:08:1b:82:0b:
         45:76:35:39:b7:b6:8f:2f:7f:04:65:27:aa:5e:b7:90:e0:d6:
         6c:e2:7f:6d:92:3c:72:9f:f3:4b:10:e0:2b:96:5b:d4:1b:22:
         a0:1c:b7:56:14:ad:87:10:32:26:9c:5f:ae:0a:56:b6:2d:5e:
         ba:c0:bf:37:18:5a:3d:63:7b:70:14:c6:61:97:e2:61:bb:d9:
         b4:a3:b0:5e:e7:eb:21:85:b8:07:30:aa:76:cc:31:f4:66:5d:
         b7:de:66:60:38:f7:76:67:ca:bb:60:98:b8:8d:95:e9:84:db:
         89:38:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 01:51:07 2023 by rpki-client on console-ams.rpki-client.org