Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/IDYNjm43EBoUZGSY4qYh0IgwPNc.roa
File:                     IDYNjm43EBoUZGSY4qYh0IgwPNc.roa (raw, json)
Hash identifier:          Q2RUL50TbJ90BBhd/yOswXEIdDp597cTf0AYcZgCS1I=
Subject key identifier:   20:36:0D:8E:6E:37:10:1A:14:64:64:98:E2:A6:21:D0:88:30:3C:D7
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       08
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/IDYNjm43EBoUZGSY4qYh0IgwPNc.roa
Signing time:             Thu 25 Aug 2022 08:28:34 +0000
ROA not before:           Thu 25 Aug 2022 08:28:34 +0000
ROA not after:            Fri 25 Aug 2023 07:39:18 +0000
asID:                     9615
IP address blocks:        202.53.112.0/20 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 25 08:28:34 2022 GMT
            Not After : Aug 25 07:39:18 2023 GMT
        Subject: CN=20360D8E6E37101A14646498E2A621D088303CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:9a:54:1f:c3:d7:b8:f9:54:db:5d:35:63:
                    85:f4:cb:5a:c0:85:eb:3c:c2:c6:0c:d2:26:8d:6e:
                    77:14:31:b7:88:b5:1d:74:da:91:56:63:33:2e:81:
                    b0:52:d1:d1:e4:56:0e:c7:79:b2:96:65:32:32:2b:
                    74:d1:b2:f1:3e:3f:5c:da:54:e8:4e:86:08:d5:7e:
                    0d:91:21:72:6f:cf:99:39:66:43:0c:0f:1a:0d:89:
                    40:5e:2b:64:a5:92:27:03:9f:d3:79:8e:16:13:c8:
                    cb:b1:03:b9:eb:82:d1:8a:d0:15:31:92:50:ca:cf:
                    95:6e:fd:a5:c8:3a:f8:07:14:a2:49:2b:2e:20:98:
                    9e:28:cf:8f:4a:6c:12:c8:c9:80:1d:1d:36:65:e8:
                    1e:0d:d8:aa:b9:4a:26:f8:f8:95:6d:f0:e8:b3:04:
                    ee:bf:b3:12:cc:1a:d0:2d:4c:2e:2f:bd:3c:99:8d:
                    d1:17:48:fe:fe:5e:48:c9:3d:df:40:d8:af:63:a9:
                    6f:a1:4b:06:73:f6:a0:fe:25:44:11:ee:8b:03:3a:
                    d8:f2:2e:86:bf:95:ed:8d:54:b5:54:8b:82:4b:70:
                    2f:c6:c0:d0:bc:6e:f4:9d:58:9e:8d:32:9a:2b:0f:
                    40:4d:33:4c:6f:18:08:6c:32:af:f2:6d:aa:bb:90:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:36:0D:8E:6E:37:10:1A:14:64:64:98:E2:A6:21:D0:88:30:3C:D7
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/IDYNjm43EBoUZGSY4qYh0IgwPNc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.53.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:5f:f0:43:5f:88:64:31:5e:41:96:fd:1e:1e:e8:ef:fb:05:
         3a:7b:97:5d:ef:9c:ad:e3:9b:ae:36:e4:6d:08:bd:2f:be:a9:
         79:e0:6d:af:2d:ef:b5:f7:40:d5:45:f3:70:f4:91:8a:6e:4b:
         09:22:b6:58:1f:4a:1b:15:c1:a3:7e:0f:de:06:fc:6f:8e:d9:
         22:57:eb:5d:ed:09:ed:02:59:f9:e6:6d:1a:f3:9e:9b:83:77:
         e6:f3:70:04:65:af:32:ad:d1:b3:23:3b:9e:ff:db:e5:64:9e:
         00:4f:31:a1:bb:db:1c:12:5b:6f:63:e7:ea:0c:08:8e:42:d2:
         00:f1:94:7d:9d:0d:30:ea:3f:e5:00:36:61:a2:b1:e6:e4:ad:
         83:9f:9c:49:ae:24:78:35:13:4c:20:5c:cc:99:25:49:a1:af:
         c0:01:d9:a5:e8:e0:b5:3e:38:c8:86:83:25:c4:ea:fc:f6:f1:
         17:2f:9b:a7:46:13:97:c6:43:84:09:3f:5e:88:74:1a:3a:f1:
         6e:c2:39:ce:ec:67:bc:da:6a:93:5e:a1:e4:01:2f:bb:73:f9:
         68:22:55:9b:1c:e3:13:91:48:1a:ad:85:8e:0b:85:f7:e8:4d:
         c7:56:35:48:66:74:8e:c9:94:9b:44:14:75:5b:e7:60:3f:d5:
         36:e4:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 08:01:56 2023 by rpki-client on console-fra.rpki-client.org