Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/xN_eBeJzP3iuNDEEF8F-BxSfdUs.roa
File:                     xN_eBeJzP3iuNDEEF8F-BxSfdUs.roa (raw, json)
Hash identifier:          hIbQsVyoIBtuz0lkIRop7/GjgI5DLkYOfUCw1ueWwWE=
Subject key identifier:   C4:DF:DE:05:E2:73:3F:78:AE:34:31:04:17:C1:7E:07:14:9F:75:4B
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       0A
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/xN_eBeJzP3iuNDEEF8F-BxSfdUs.roa
Signing time:             Thu 25 Aug 2022 08:28:35 +0000
ROA not before:           Thu 25 Aug 2022 08:28:35 +0000
ROA not after:            Fri 25 Aug 2023 07:39:18 +0000
asID:                     9615
IP address blocks:        210.1.144.0/20 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 25 08:28:35 2022 GMT
            Not After : Aug 25 07:39:18 2023 GMT
        Subject: CN=C4DFDE05E2733F78AE34310417C17E07149F754B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:ec:68:ee:7f:7d:cf:a1:cd:78:12:75:28:
                    c6:62:61:d6:f0:95:fc:ec:11:9e:79:f8:e5:ff:ef:
                    94:8e:2b:c4:c9:cd:b7:15:1c:ca:98:35:87:2b:cf:
                    dd:1e:d7:44:63:6e:17:9e:80:b7:ba:c0:b7:1f:4b:
                    2f:23:b9:39:16:87:94:80:0b:23:4f:e7:cc:85:30:
                    10:d5:eb:08:36:91:2d:c4:a7:26:a7:99:77:4c:13:
                    c1:4f:da:43:42:0b:9a:5b:3e:96:08:58:8f:b2:ae:
                    08:fb:7f:ee:35:f5:3f:68:64:28:7b:89:3a:7f:de:
                    54:09:de:86:dd:d7:28:70:c1:86:b9:df:ab:40:1c:
                    22:a8:e9:99:f6:b4:ea:91:c5:f2:f8:28:60:b6:5b:
                    90:87:00:89:d5:60:ae:f9:86:3a:2e:d0:1d:0c:8c:
                    61:90:ad:53:6d:7f:df:c5:e8:23:b3:fb:43:77:02:
                    fe:09:b1:e0:47:1c:27:f7:00:d5:ea:d9:ec:cb:9d:
                    15:74:5b:9e:eb:7f:9e:81:ce:62:6f:a1:8a:03:3c:
                    bf:9b:99:d8:a6:3e:ff:db:d3:1e:53:e1:43:c2:51:
                    56:e8:86:cb:a8:4d:d7:29:ba:01:ad:d4:d7:cd:01:
                    90:f7:5d:45:8d:48:84:5b:40:17:9f:20:a5:a9:cd:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:DE:05:E2:73:3F:78:AE:34:31:04:17:C1:7E:07:14:9F:75:4B
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/xN_eBeJzP3iuNDEEF8F-BxSfdUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.1.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:38:02:a6:8e:cc:58:42:2a:5b:ba:40:cd:d1:bb:d2:16:cd:
         ec:8c:12:89:46:66:90:3c:9d:b9:db:19:e6:85:01:41:30:34:
         00:f6:9d:25:8f:82:55:53:15:95:36:d1:2a:3a:1f:31:23:fc:
         db:c1:cd:8e:9f:52:44:fc:cc:2f:91:db:16:d9:92:2a:ca:30:
         5c:c1:81:41:73:c4:1e:72:21:22:03:12:64:7b:e2:b6:c0:e4:
         4d:7d:c7:93:9d:f0:0f:b5:80:e7:77:0c:4f:6d:a9:80:44:20:
         9e:73:ce:76:6f:c3:d2:ed:bc:01:c0:7b:ef:9b:a1:c3:a9:86:
         44:47:f9:d0:3a:86:57:13:1f:d1:a5:c8:81:00:47:f0:80:7c:
         35:9f:e8:ba:56:b0:2a:54:c4:d1:8e:2d:04:eb:6a:9a:c8:bb:
         30:5e:2c:d7:b5:40:67:80:b8:35:eb:5e:47:7f:ae:99:04:07:
         8d:12:60:43:27:3e:b2:46:ca:77:4e:8a:b5:d2:83:65:2b:d7:
         f4:ea:94:c1:92:df:25:c6:4d:c5:8c:19:61:9d:26:73:7f:5e:
         18:a1:ce:47:c4:18:4a:eb:77:5f:5b:f8:d7:5c:db:d2:b2:cb:
         d3:68:ec:71:17:c8:a5:d6:3a:48:79:b5:6d:bb:b6:4d:32:20:
         24:56:0a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 08:01:56 2023 by rpki-client on console-fra.rpki-client.org