Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/vB46WjDg5DH8v3zZQqe4W_NQb-g.roa
File:                     vB46WjDg5DH8v3zZQqe4W_NQb-g.roa (raw, json)
Hash identifier:          dYjwfN719IvYQOmr7UHAAtOQr8FmXkb5X/ync5osWQ0=
Subject key identifier:   BC:1E:3A:5A:30:E0:E4:31:FC:BF:7C:D9:42:A7:B8:5B:F3:50:6F:E8
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       9D
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/vB46WjDg5DH8v3zZQqe4W_NQb-g.roa
Signing time:             Thu 01 Sep 2022 01:28:13 +0000
ROA not before:           Thu 01 Sep 2022 01:28:13 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     23816
IP address blocks:        202.93.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:13 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=BC1E3A5A30E0E431FCBF7CD942A7B85BF3506FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:ac:f5:ed:24:2a:c9:81:1f:a3:55:a3:73:
                    1d:01:39:6b:f6:84:e1:10:06:19:54:85:f0:ef:cf:
                    cb:2c:7f:31:b9:ee:ea:a3:03:36:d5:d0:6e:85:b7:
                    2c:b6:05:93:f5:a4:b9:60:35:e9:b5:57:4d:60:e7:
                    31:2f:40:49:46:c9:b6:b7:65:95:9d:85:e7:5c:98:
                    0d:6a:2d:99:1a:32:db:38:6f:3c:d7:af:ff:2b:70:
                    b0:28:35:68:ea:40:ac:fc:e7:43:d3:71:26:72:ba:
                    54:40:fb:9f:f0:bb:b6:2e:d9:e3:e6:ba:0e:8e:55:
                    c8:e7:9b:ff:15:db:b4:78:24:25:f2:f1:2e:e4:e8:
                    4c:97:01:ea:6b:92:e2:88:c5:16:8b:b5:50:0c:0e:
                    3f:58:bc:bb:01:a0:8c:ad:0e:c5:62:4f:32:b2:e3:
                    74:15:87:c1:0e:7f:09:7d:5d:97:c6:9d:d3:3d:f2:
                    5e:df:9a:66:a7:75:f5:1b:9e:9a:c2:4b:f4:92:9a:
                    7b:c4:b8:f0:9e:40:e4:2b:a9:74:fc:98:1a:b4:49:
                    5a:3f:4a:85:c0:a5:0e:81:5a:2c:d1:72:e6:d3:8e:
                    4a:a8:33:7b:fa:79:a4:8c:56:5c:e0:4c:cc:f9:9d:
                    f2:ef:e7:cb:61:d1:6f:1c:7b:d4:01:5e:62:15:fd:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:3A:5A:30:E0:E4:31:FC:BF:7C:D9:42:A7:B8:5B:F3:50:6F:E8
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/vB46WjDg5DH8v3zZQqe4W_NQb-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:92:db:cb:9a:42:b0:fb:63:68:e9:1a:f2:4f:12:11:86:40:
         dc:80:3a:5a:f3:9b:a2:a3:5d:09:fe:2f:0d:a9:b5:1c:8c:f5:
         97:36:16:a9:79:c1:6a:b6:37:15:63:fa:58:b6:75:98:97:2e:
         e5:9d:7d:40:3c:6f:dd:fc:e5:9b:c7:22:c7:f0:e6:2d:20:71:
         18:d7:e9:ef:ed:04:a6:e4:73:85:46:c3:d2:55:f3:cd:fd:61:
         6c:06:11:2a:0a:f6:b7:aa:ac:bf:eb:45:67:24:da:59:7a:77:
         d5:3e:2b:ca:8d:b9:e2:94:df:66:b2:85:d5:4b:2b:00:71:3f:
         8a:c5:26:79:fb:50:d5:2a:e2:f6:e4:79:50:da:4b:2b:b6:72:
         be:bd:c3:37:3f:09:70:8e:cc:a1:eb:3d:19:6a:46:36:2f:2f:
         eb:39:ce:49:d7:bf:3a:93:77:98:c4:85:bf:d3:7c:5a:6d:af:
         d1:01:c6:1c:c1:2b:30:cf:21:18:00:61:11:f1:51:b5:5c:90:
         fe:38:16:c1:c5:1c:fd:58:00:07:ab:73:d0:cd:4a:e3:bd:92:
         ec:b7:c6:67:87:3e:c9:4a:53:7e:65:74:e5:26:17:b4:ad:27:
         56:65:91:0b:7e:aa:dc:fa:57:99:b2:47:7d:97:d5:e0:a0:ef:
         1e:12:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 02:05:00 2023 by rpki-client on console-fra.rpki-client.org