Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/sbrUqxXtv3a28uNLu2jl1ykch7M.roa
File:                     sbrUqxXtv3a28uNLu2jl1ykch7M.roa (raw, json)
Hash identifier:          UJT3jKJbjUlYPXJrAttVMMaEZMIspedsODEX1lW1Acg=
Subject key identifier:   B1:BA:D4:AB:15:ED:BF:76:B6:F2:E3:4B:BB:68:E5:D7:29:1C:87:B3
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       A4
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/sbrUqxXtv3a28uNLu2jl1ykch7M.roa
Signing time:             Thu 01 Sep 2022 01:28:14 +0000
ROA not before:           Thu 01 Sep 2022 01:28:14 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:14 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=B1BAD4AB15EDBF76B6F2E34BBB68E5D7291C87B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:98:cf:4b:b8:88:a0:45:67:9a:9c:53:eb:
                    03:81:04:fe:d4:ec:ec:23:e5:d3:72:da:6d:25:d1:
                    7a:2b:10:12:2b:b6:6a:22:dc:40:18:a7:9c:9c:56:
                    d8:1e:bc:64:ba:20:f3:18:e3:1e:7c:c3:88:af:47:
                    cc:2e:ac:9e:ed:f5:43:2e:dd:6b:74:37:00:f5:de:
                    d6:e2:a8:22:33:72:0a:a7:d3:b7:bc:fe:50:60:a8:
                    69:6c:7f:44:0f:70:1a:71:34:41:10:08:0d:ff:dd:
                    09:4b:e0:30:bd:d5:af:45:5a:03:6f:ba:cb:79:e0:
                    00:68:32:f9:e4:5e:69:78:61:c2:36:8c:c8:85:a1:
                    58:9c:04:b0:e6:16:17:49:85:f5:c1:5e:72:3f:50:
                    ba:2c:ec:21:af:f6:2a:d2:c9:56:af:6f:52:e4:59:
                    65:47:67:97:3f:11:45:63:89:8f:71:dc:69:69:00:
                    ac:e1:4d:17:f1:8d:d1:a0:c8:0b:05:ca:43:d5:ee:
                    6f:a9:95:96:aa:03:85:be:15:58:c6:41:ca:23:b4:
                    b7:29:a1:29:ed:e0:5e:a6:86:a6:a0:a0:61:4a:97:
                    02:ba:81:40:6a:90:b1:23:35:22:eb:8e:5b:47:ba:
                    08:2c:8f:05:29:19:7f:2d:45:aa:f6:ea:ce:05:b9:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:D4:AB:15:ED:BF:76:B6:F2:E3:4B:BB:68:E5:D7:29:1C:87:B3
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/sbrUqxXtv3a28uNLu2jl1ykch7M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:64:2b:13:bb:e4:06:19:c9:10:25:58:80:5d:ac:7d:b4:
         d9:f3:86:0c:e3:ea:7e:96:29:ad:48:0a:f9:7e:22:04:e3:9f:
         ec:e8:fa:46:24:aa:74:79:ab:5b:d0:56:46:74:6e:9b:c2:fc:
         95:9f:5b:91:ec:11:63:ca:7d:42:a3:58:dd:10:93:ab:b5:67:
         63:52:7a:f7:55:cd:a2:3b:54:e3:32:ee:7d:7d:de:80:19:1b:
         47:60:ee:c3:22:25:c6:11:92:8e:dc:b6:7f:61:26:ce:cf:fb:
         b0:f5:32:41:38:85:fb:48:47:f3:bd:f4:f0:3d:fc:3a:88:db:
         86:33:f7:19:b8:32:5d:9a:55:3f:c5:23:c0:47:fe:11:f9:b0:
         b8:03:49:93:54:4a:00:0e:c8:00:63:90:27:fe:07:bd:98:36:
         b1:e5:8e:f7:4f:79:aa:fe:ef:71:09:79:76:d1:77:8e:32:39:
         64:88:15:a4:fc:9f:4f:23:9a:5f:e2:15:c7:4d:c8:66:4e:64:
         16:00:39:a8:c5:34:22:21:90:e4:03:df:28:f8:d5:40:48:8d:
         5b:90:d7:81:a7:5c:71:75:94:85:37:4f:19:98:96:b2:b4:1e:
         67:52:cf:5b:be:b5:8d:34:21:ac:b7:9a:30:a4:09:66:94:cd:
         4b:f3:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 01:51:07 2023 by rpki-client on console-ams.rpki-client.org