Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/9zG6ppBJ6NG6JYaRGLljqGv3gw4.roa
File:                     9zG6ppBJ6NG6JYaRGLljqGv3gw4.roa (raw, json)
Hash identifier:          LKZ8XyVa5bJ5lceDTRKnXruF3w5H9KzzcBNNxGnnyGE=
Subject key identifier:   F7:31:BA:A6:90:49:E8:D1:BA:25:86:91:18:B9:63:A8:6B:F7:83:0E
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       AB
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/9zG6ppBJ6NG6JYaRGLljqGv3gw4.roa
Signing time:             Tue 01 Nov 2022 01:28:09 +0000
ROA not before:           Tue 01 Nov 2022 01:28:09 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        202.7.106.0/23 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:09 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F731BAA69049E8D1BA25869118B963A86BF7830E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:3f:29:0a:79:65:79:5c:44:d2:b5:91:ba:
                    2b:41:90:ff:5a:1f:07:bb:4b:7d:d9:33:7a:bb:26:
                    ca:2f:87:3a:8d:6e:d1:9e:cb:ed:8c:50:01:bb:0e:
                    55:88:3b:ba:5e:eb:44:9b:82:0a:e8:9a:5f:00:96:
                    e1:da:ba:76:a4:a5:e2:76:ac:ac:96:4d:25:73:31:
                    91:5d:28:3d:ef:79:c3:7d:db:f7:3e:6d:4c:17:0f:
                    97:a1:07:19:89:01:0d:27:04:bb:65:56:07:1d:f7:
                    4e:2e:75:99:a4:2a:82:fc:2b:a5:e9:54:14:41:cc:
                    8f:06:31:65:e0:71:05:fe:83:22:89:0c:fb:57:8c:
                    6c:47:10:d3:67:f2:f4:05:9e:d9:68:d9:8d:bc:48:
                    dd:c5:1f:33:6e:d5:1b:e2:14:69:2c:4d:b9:7a:0e:
                    f0:46:15:b2:f2:20:af:10:fa:50:d7:49:20:66:95:
                    4b:ec:f8:6f:94:93:5d:b9:1b:4b:87:f3:4d:ca:2e:
                    b0:3f:09:ac:c6:15:cf:4c:d0:ff:96:49:20:bc:e7:
                    4a:70:35:47:ce:7a:c1:8f:f1:5d:bb:c5:8f:6a:74:
                    bf:a9:cf:7a:c9:3f:82:92:bd:c7:11:42:65:09:1d:
                    7f:e3:11:93:a3:83:ca:21:d1:a6:b4:fc:a5:98:d8:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:31:BA:A6:90:49:E8:D1:BA:25:86:91:18:B9:63:A8:6B:F7:83:0E
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/9zG6ppBJ6NG6JYaRGLljqGv3gw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:d3:b5:1d:97:b0:58:ce:ef:a0:f8:65:72:4b:75:59:5c:e9:
         fc:2e:61:b1:03:01:72:76:f6:fa:cc:f7:30:e9:09:b9:05:f8:
         64:4c:8a:81:c7:55:96:46:00:9d:9b:ed:c1:92:54:a7:22:af:
         c0:54:86:b4:a3:c5:ac:28:79:cc:0a:8d:a5:3f:98:3b:0b:01:
         0f:b9:56:fa:05:5b:e4:26:5b:dc:9d:1f:80:02:83:42:64:95:
         11:ae:1e:5d:b8:52:54:a9:db:f8:a1:73:4c:9e:e8:a1:94:98:
         17:e2:fb:18:d5:f9:c4:fc:26:f5:20:ff:12:28:56:37:b8:54:
         01:dd:f8:0a:54:c7:bd:58:25:d3:8d:d1:20:1e:b0:c0:45:b7:
         09:fc:81:0f:92:b9:ae:fe:78:df:d8:c1:dd:95:ee:7a:20:9d:
         d2:95:41:29:a0:23:00:96:df:14:e0:1a:e5:41:ad:0b:6c:bf:
         0e:c4:1f:fb:ee:f1:b3:f2:b2:9f:33:0c:83:18:b7:c2:65:fc:
         cf:cd:f6:7f:7a:07:65:e5:2a:fd:08:a3:f3:a7:85:1f:49:12:
         03:59:1b:8b:6f:c8:27:a5:b2:9f:88:b2:3d:c2:ee:81:1b:c4:
         51:37:bd:8b:22:f0:8f:ca:1c:c3:85:b6:4f:f1:8b:74:a7:48:
         74:34:4f:cd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMjExMDEw
MTI4MDlaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY3MzFCQUE2OTA0OUU4
RDFCQTI1ODY5MTE4Qjk2M0E4NkJGNzgzMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz4D8pCnlleVxE0rWRuitBkP9aHwe7S33ZM3q7JsovhzqNbtGe
y+2MUAG7DlWIO7pe60Sbggroml8AluHaunakpeJ2rKyWTSVzMZFdKD3vecN92/c+
bUwXD5ehBxmJAQ0nBLtlVgcd904udZmkKoL8K6XpVBRBzI8GMWXgcQX+gyKJDPtX
jGxHENNn8vQFntlo2Y28SN3FHzNu1RviFGksTbl6DvBGFbLyIK8Q+lDXSSBmlUvs
+G+Uk125G0uH803KLrA/CazGFc9M0P+WSSC850pwNUfOesGP8V27xY9qdL+pz3rJ
P4KSvccRQmUJHX/jEZOjg8oh0aa0/KWY2K6HAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9zG6ppBJ6NG6JYaRGLljqGv3gw4wHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5Lzl6RzZwcEJKNk5HNkpZYVJHTGxqcUd2M2d3NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHKB2owDQYJKoZIhvcNAQELBQADggEBAMLTtR2XsFjO76D4ZXJLdVlc6fwu
YbEDAXJ29vrM9zDpCbkF+GRMioHHVZZGAJ2b7cGSVKcir8BUhrSjxawoecwKjaU/
mDsLAQ+5VvoFW+QmW9ydH4ACg0JklRGuHl24UlSp2/ihc0ye6KGUmBfi+xjV+cT8
JvUg/xIoVje4VAHd+ApUx71YJdON0SAesMBFtwn8gQ+Sua7+eN/Ywd2V7nogndKV
QSmgIwCW3xTgGuVBrQtsvw7EH/vu8bPysp8zDIMYt8Jl/M/N9n96B2XlKv0Io/On
hR9JEgNZG4tvyCelsp+Isj3C7oEbxFE3vYsi8I/KHMOFtk/xi3SnSHQ0T80=
-----END CERTIFICATE-----
Generated at Sun Oct 1 01:52:18 2023 by rpki-client on console-ams.rpki-client.org