Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/Jk67pwdOm482F621hBv-mAZF9xA.roa
File:                     Jk67pwdOm482F621hBv-mAZF9xA.roa (raw, json)
Hash identifier:          qB+WItsVb5h2YKl+wSbO+gHkjXQKI/ltZu23L5ceBh0=
Subject key identifier:   26:4E:BB:A7:07:4E:9B:8F:36:17:AD:B5:84:1B:FE:98:06:45:F7:10
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       3B
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Jk67pwdOm482F621hBv-mAZF9xA.roa
Signing time:             Wed 01 Feb 2023 01:29:37 +0000
ROA not before:           Wed 01 Feb 2023 01:29:37 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     10011
IP address blocks:        103.13.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Feb  1 01:29:37 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=264EBBA7074E9B8F3617ADB5841BFE980645F710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:56:ed:b5:ca:e4:38:70:0f:77:39:1b:9c:75:
                    34:fe:66:9d:43:31:5a:29:8f:f0:e1:3d:6b:6f:a7:
                    ac:bf:2a:72:5a:74:13:dc:49:07:41:53:03:8b:dd:
                    dd:53:45:6d:2b:da:42:83:e8:16:19:3e:9c:1c:54:
                    5f:95:b1:06:06:f0:72:ec:2d:d7:7a:63:b9:d3:d6:
                    f6:79:51:a3:c6:ed:99:78:55:ba:26:1f:b5:b0:10:
                    33:e3:1e:cb:0a:be:f5:0e:20:85:69:c7:1e:ed:cb:
                    ec:e5:8f:97:2a:ab:88:02:86:ea:d1:16:ff:22:22:
                    74:75:71:f3:e1:7f:19:6b:0d:82:4b:6b:d9:38:d2:
                    4a:8e:5b:3f:b1:1a:26:4c:e2:f1:b6:1c:1c:1d:88:
                    1a:77:43:c0:aa:e6:0a:40:ae:98:d9:41:f8:2e:95:
                    4f:88:be:e1:bd:96:25:e4:d8:55:ae:bf:44:49:c7:
                    bb:d2:e7:ae:1c:66:8d:53:7e:41:84:da:68:3d:f3:
                    d3:56:d9:91:7b:f4:61:b0:5a:76:48:d2:ce:4c:74:
                    5d:a2:1c:a6:e5:b4:02:7a:80:15:17:d3:16:f1:af:
                    54:db:5f:32:8f:db:e8:d3:27:f6:cb:25:d8:8d:f4:
                    88:d1:10:8f:9b:98:d1:11:e7:4b:eb:6a:dc:06:86:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:BB:A7:07:4E:9B:8F:36:17:AD:B5:84:1B:FE:98:06:45:F7:10
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Jk67pwdOm482F621hBv-mAZF9xA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:ab:30:7f:ed:49:fb:7e:15:d9:3b:0d:43:65:aa:3d:61:
         aa:9f:b2:86:2a:71:a1:59:d3:32:ad:54:45:b8:94:cf:f4:dd:
         e9:0d:14:1d:f0:5f:63:83:a3:b8:fe:82:97:ec:38:64:1b:cb:
         d3:2d:83:2a:d7:f3:4b:18:43:63:57:01:b0:21:ee:f9:da:fa:
         c4:cf:af:54:be:81:6d:f5:0d:87:a9:ba:6a:74:c8:cb:92:32:
         36:57:c2:76:b7:92:16:fe:a0:b4:03:28:c3:3b:af:45:5a:40:
         b0:3e:d6:ce:56:e7:63:14:7c:53:09:fa:51:18:2c:f6:73:d7:
         ab:1d:7d:22:f8:43:7b:7b:30:5e:87:82:78:a7:a8:5b:70:17:
         ce:b9:33:b4:e9:4c:1c:50:7c:01:14:e1:bd:a8:77:5c:50:26:
         98:c8:dd:6f:96:34:78:e6:e2:30:11:6c:de:5c:34:f9:78:f5:
         53:a2:41:53:40:3c:b0:3d:e0:7c:14:72:15:d4:49:69:c3:7e:
         b9:89:f1:3b:2a:ca:f2:53:d2:58:46:e3:61:af:d7:7a:a9:1b:
         ab:7d:3b:2f:1d:cf:dc:5d:e8:a5:a5:af:10:59:a1:d5:57:4d:
         36:1d:87:07:d1:30:bf:ac:01:65:f6:3e:17:08:ac:76:cc:3b:
         1e:17:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:22:59 2024 by rpki-client on console-fra.rpki-client.org