Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/sBWULi4bQZTaQkKpiQ0hjOUUTlo.roa
File:                     sBWULi4bQZTaQkKpiQ0hjOUUTlo.roa (raw, json)
Hash identifier:          R7cMJI/rEIfzpsItRNNwFw2zyfZ5/95m3/W9+A2aRI0=
Subject key identifier:   B0:15:94:2E:2E:1B:41:94:DA:42:42:A9:89:0D:21:8C:E5:14:4E:5A
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       A2
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/sBWULi4bQZTaQkKpiQ0hjOUUTlo.roa
Signing time:             Thu 01 Sep 2022 01:28:14 +0000
ROA not before:           Thu 01 Sep 2022 01:28:14 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.208.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:14 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=B015942E2E1B4194DA4242A9890D218CE5144E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:51:88:22:ca:6a:12:f9:5c:00:8a:ab:a2:
                    3c:0c:ed:8d:46:ab:2a:dd:16:1b:2c:00:fa:d4:c4:
                    b8:4b:60:ad:8c:88:86:64:55:0b:f3:d9:cf:97:4b:
                    a2:4a:30:36:9c:f5:49:9b:45:70:a8:35:1f:bb:30:
                    75:b6:95:44:d7:12:6b:04:6c:4a:cf:7c:4c:41:c6:
                    41:8a:77:4d:12:9b:16:67:e8:e8:7a:20:7e:cc:0b:
                    ba:2c:84:ff:63:f9:a7:bb:74:20:af:9b:64:e1:bf:
                    18:81:5c:87:cb:46:86:b7:96:60:08:e4:ac:ea:6b:
                    84:69:17:55:ef:cc:91:b4:5d:c2:79:0c:ec:30:90:
                    1f:69:1d:64:39:d3:32:40:cf:38:e6:6b:51:c0:33:
                    ca:dd:91:15:43:40:5c:c2:4d:8c:b0:fb:8d:78:c0:
                    59:4d:09:11:e2:d5:ee:c2:07:fe:11:62:b7:e8:ca:
                    1b:31:9e:36:8e:74:db:c4:1a:9f:7b:41:4e:b9:bd:
                    b6:9f:84:27:a0:e0:45:f9:41:85:3c:78:ff:6d:52:
                    bf:fb:0a:60:23:0a:52:32:7e:94:b7:4c:83:3e:dd:
                    82:c6:29:6f:44:8d:9a:6b:46:5d:33:d9:a1:4a:02:
                    68:91:7a:b5:8d:6d:92:48:1b:b1:e1:40:07:61:1f:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:15:94:2E:2E:1B:41:94:DA:42:42:A9:89:0D:21:8C:E5:14:4E:5A
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/sBWULi4bQZTaQkKpiQ0hjOUUTlo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:bf:3c:c4:ba:99:1c:a1:45:2a:8f:0a:6d:da:3f:b6:31:83:
         36:5d:7b:95:92:89:83:34:38:43:85:8c:09:ff:08:ec:4c:1e:
         ff:e3:57:75:6c:4c:16:f9:08:71:e5:2b:38:aa:81:e6:2e:ae:
         53:37:e4:44:ef:0c:22:56:4a:71:34:e3:44:53:f9:08:bf:37:
         c2:4a:69:03:0e:e2:08:09:9a:cd:8f:29:0c:bb:cb:3d:24:4d:
         55:31:21:6b:78:e9:68:c9:91:e6:8d:7c:00:07:bf:25:08:12:
         db:47:79:ad:e2:d3:8c:2f:14:5f:bc:4b:15:99:c1:86:8d:c7:
         d8:0f:26:32:a5:3c:69:a6:9e:cd:c7:20:ce:0b:ee:8d:69:bd:
         0e:40:dc:b2:36:35:39:ad:ba:5a:dc:ee:02:fa:e8:01:39:2a:
         1c:d5:98:f9:d4:01:f8:57:a1:9a:ac:97:4f:d2:f4:dc:6c:8a:
         da:bd:ee:38:63:24:ce:4c:58:38:62:de:41:81:d7:fb:80:06:
         1e:ba:10:56:c9:e2:26:20:5d:1c:4f:8f:ff:3b:81:00:74:32:
         ac:5d:44:c0:46:dc:0e:76:30:34:c9:a9:b3:f1:8c:09:03:ec:
         ff:45:c9:dc:49:3e:cd:d3:cf:ef:36:bd:d6:9b:85:aa:5f:1b:
         68:fc:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 02:05:00 2023 by rpki-client on console-fra.rpki-client.org