Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/f9vcmgfPL4m4JI3gtMEAGjJ7VCs.roa
File:                     f9vcmgfPL4m4JI3gtMEAGjJ7VCs.roa (raw, json)
Hash identifier:          VuyGErkVeByxGdxvL6WfUZgQnIZ2UDDvsN3stLh3KXU=
Subject key identifier:   7F:DB:DC:9A:07:CF:2F:89:B8:24:8D:E0:B4:C1:00:1A:32:7B:54:2B
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       36
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/f9vcmgfPL4m4JI3gtMEAGjJ7VCs.roa
Signing time:             Wed 01 Feb 2023 01:29:34 +0000
ROA not before:           Wed 01 Feb 2023 01:29:34 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     10011
IP address blocks:        124.108.56.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Feb  1 01:29:34 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=7FDBDC9A07CF2F89B8248DE0B4C1001A327B542B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:a5:95:5b:6f:68:82:32:60:bd:a7:07:6b:
                    7e:8b:d6:38:ab:fa:49:df:6d:37:d7:2d:bc:6d:da:
                    ca:b3:c1:5a:d6:db:5d:a4:5b:3f:2b:83:57:96:9a:
                    83:73:a2:4e:bb:7d:94:12:14:ce:d0:9e:af:4c:e1:
                    46:31:e9:a4:15:77:8d:1b:31:5a:c5:ef:3e:91:70:
                    56:34:91:39:e0:ad:08:de:6f:8b:92:d8:eb:5a:b4:
                    c7:5d:09:7f:b6:27:5a:2f:b9:26:1d:17:8d:b0:b4:
                    95:40:5c:3d:4a:5d:19:11:67:77:86:88:cc:31:0c:
                    cf:d2:28:55:00:a5:bf:5b:fa:13:1d:80:06:cc:3a:
                    a3:cd:79:bb:0c:5c:70:33:18:a9:f8:ea:69:f8:e8:
                    f7:49:c8:a7:c0:74:4a:8e:3f:10:b0:c0:8f:9a:77:
                    df:de:70:6a:19:0a:22:98:24:2a:5a:c7:30:a5:49:
                    86:04:3d:31:bb:d5:9d:7c:11:29:27:47:37:d3:3a:
                    4b:d9:90:3a:3b:13:35:c3:56:65:4c:64:59:69:ed:
                    76:01:84:f1:e7:32:b2:aa:ed:a0:80:c0:27:b1:a6:
                    68:5a:4b:b7:7f:0a:3b:f6:d3:91:29:94:4d:7f:21:
                    06:5d:b6:3a:88:38:5f:1a:c5:55:c0:50:36:fb:9d:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:DC:9A:07:CF:2F:89:B8:24:8D:E0:B4:C1:00:1A:32:7B:54:2B
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/f9vcmgfPL4m4JI3gtMEAGjJ7VCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:ef:ac:26:18:43:79:89:8c:03:00:65:46:77:ff:06:84:7e:
         fd:aa:d1:75:3c:cd:f0:4b:c5:fe:4d:94:78:7c:d9:4f:86:93:
         6f:3d:e1:c3:ac:7c:af:09:45:64:fb:07:99:ef:7f:8a:4e:77:
         0f:4d:5d:c2:de:39:29:f1:81:dd:cc:2a:10:73:eb:56:dc:b7:
         10:b8:0c:86:88:0b:ce:6a:6a:16:3c:59:00:74:73:e4:f2:76:
         3d:b8:26:3b:49:c8:d6:6f:27:19:ee:c7:8a:73:a5:5c:da:24:
         8a:5b:42:90:f0:80:b8:87:e9:c2:d2:87:74:bf:77:e4:2b:23:
         b2:a6:82:3d:1f:35:5b:e0:ed:24:5e:c5:f1:a0:dc:ea:07:3e:
         31:9f:21:b7:ec:76:da:0f:89:90:f2:ee:51:b7:71:7d:70:54:
         01:28:d9:bf:c8:77:30:e3:17:0d:ae:6c:31:b7:d1:32:52:aa:
         fe:43:27:3f:00:66:17:68:c0:41:8a:ce:96:e9:9e:57:ea:d7:
         1f:f5:ff:4e:a5:a5:82:ac:bb:03:8a:95:04:d6:db:2b:e0:9f:
         28:0f:75:d8:e2:60:2c:33:08:0e:f6:20:49:9c:b1:7e:e7:24:
         40:cc:e2:02:5e:0b:6a:66:45:88:c2:68:8f:6a:44:67:c9:d7:
         1d:3b:69:3f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0N0Ey
NzE4OEUyMTRDMzk2MzA0NDk3REI1NzFCMjNGOTNFQkZCREM2MB4XDTIzMDIwMTAx
MjkzNFoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoN0ZEQkRDOUEwN0NGMkY4
OUI4MjQ4REUwQjRDMTAwMUEzMjdCNTQyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANZfpZVbb2iCMmC9pwdrfovWOKv6Sd9tN9ctvG3ayrPBWtbbXaRb
PyuDV5aag3OiTrt9lBIUztCer0zhRjHppBV3jRsxWsXvPpFwVjSROeCtCN5vi5LY
61q0x10Jf7YnWi+5Jh0XjbC0lUBcPUpdGRFnd4aIzDEMz9IoVQClv1v6Ex2ABsw6
o815uwxccDMYqfjqafjo90nIp8B0So4/ELDAj5p3395wahkKIpgkKlrHMKVJhgQ9
MbvVnXwRKSdHN9M6S9mQOjsTNcNWZUxkWWntdgGE8ecysqrtoIDAJ7GmaFpLt38K
O/bTkSmUTX8hBl22Oog4XxrFVcBQNvud8CUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR/29yaB88vibgkjeC0wQAaMntUKzAfBgNVHSMEGDAWgBRHonGI4hTDljBEl9tX
GyP5Pr+9xjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY1L1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2X3ZjWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2
X3ZjWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NjUvZjl2Y21nZlBMNG00SkkzZ3RNRUFHako3VkNzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3xsODANBgkqhkiG9w0BAQsFAAOCAQEAf++sJhhDeYmMAwBlRnf/BoR+/arR
dTzN8EvF/k2UeHzZT4aTbz3hw6x8rwlFZPsHme9/ik53D01dwt45KfGB3cwqEHPr
Vty3ELgMhogLzmpqFjxZAHRz5PJ2PbgmO0nI1m8nGe7HinOlXNokiltCkPCAuIfp
wtKHdL935CsjsqaCPR81W+DtJF7F8aDc6gc+MZ8ht+x22g+JkPLuUbdxfXBUASjZ
v8h3MOMXDa5sMbfRMlKq/kMnPwBmF2jAQYrOlumeV+rXH/X/TqWlgqy7A4qVBNbb
K+CfKA912OJgLDMIDvYgSZyxfuckQMziAl4LamZFiMJoj2pEZ8nXHTtpPw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:38 2024 by rpki-client on console-ams.rpki-client.org