Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/lZ5cuqVvKU0e2KgtzlQQnvXQUcA.roa
File:                     lZ5cuqVvKU0e2KgtzlQQnvXQUcA.roa (raw, json)
Hash identifier:          DhIPEdhAXQShe/9OFllviUaxRRpuzcv77RklJeZTgXY=
Subject key identifier:   95:9E:5C:BA:A5:6F:29:4D:1E:D8:A8:2D:CE:54:10:9E:F5:D0:51:C0
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       9C
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/lZ5cuqVvKU0e2KgtzlQQnvXQUcA.roa
Signing time:             Thu 01 Sep 2022 01:28:38 +0000
ROA not before:           Thu 01 Sep 2022 01:28:38 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     10021
IP address blocks:        202.7.96.0/21 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Sep  1 01:28:38 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=959E5CBAA56F294D1ED8A82DCE54109EF5D051C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:83:6a:d2:c0:d2:b4:3e:69:a4:a5:a9:c2:
                    95:6c:9a:ce:d8:1e:b2:c4:29:f6:0a:aa:e1:f0:6e:
                    df:10:95:e5:a0:99:e4:ad:da:a5:dc:d0:ee:5e:db:
                    2f:b8:71:8a:a5:a0:85:3f:a1:bd:d5:f7:6c:af:83:
                    df:1a:8d:41:0a:75:65:c7:36:81:dd:92:a2:cf:64:
                    29:d9:2c:7b:31:1a:70:e0:eb:3c:a6:a0:75:17:68:
                    c6:a6:df:9e:00:49:98:8d:14:d4:e0:5c:a7:70:24:
                    05:b3:50:3e:77:2b:b4:91:08:11:b5:be:cf:d6:31:
                    71:9c:5a:53:31:74:ae:68:3d:62:4f:a0:7e:dd:c1:
                    6e:32:df:c6:10:14:e5:08:e1:ca:4d:37:98:ef:d2:
                    02:45:6f:39:6f:d4:43:ba:43:a4:29:8f:e3:dc:2b:
                    18:9e:3c:45:fc:04:5f:1b:d5:5d:e9:5b:33:d4:84:
                    eb:5a:72:9c:e4:82:9f:73:af:08:be:9c:42:91:9d:
                    58:f2:54:b5:70:98:69:68:47:b5:97:1c:0d:1f:b6:
                    3d:39:dc:96:2f:e8:0d:a9:d0:40:f2:8f:2a:9c:d9:
                    58:a4:73:18:b7:99:b2:a3:d9:eb:fa:e4:80:4a:14:
                    94:ef:a7:87:ba:e1:ac:5d:73:3e:86:0c:cc:da:3c:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:5C:BA:A5:6F:29:4D:1E:D8:A8:2D:CE:54:10:9E:F5:D0:51:C0
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/lZ5cuqVvKU0e2KgtzlQQnvXQUcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:95:6f:22:ca:d8:93:84:1b:1e:37:87:c5:56:98:38:1e:
         63:45:13:77:a9:b7:cb:d0:57:27:73:ae:36:34:e7:f1:3c:79:
         7e:ce:3a:41:14:83:b2:8e:d5:ad:8c:d8:29:d2:60:4d:38:78:
         94:db:2b:3f:ff:ea:fc:b3:c3:c0:dd:34:7e:67:4e:d9:86:00:
         13:75:0c:40:60:80:79:f5:04:a4:8b:7a:b9:13:c7:5a:cc:a4:
         2f:d1:e6:f3:73:e1:74:85:ce:a2:bf:e1:f9:73:0d:7f:5d:88:
         47:4a:21:ff:6f:ce:4f:23:2e:d7:ca:5d:ed:3c:f8:42:fb:a4:
         a6:c5:f7:a1:69:05:aa:2d:5e:1f:65:40:60:f7:32:6f:e4:aa:
         6a:44:44:6f:91:dd:f7:4b:00:5d:e2:ee:a4:24:89:70:1d:99:
         82:55:ab:04:35:76:af:b2:79:18:f2:60:7a:c5:0f:ea:ca:cd:
         de:c0:42:d4:f0:3e:c0:23:64:bf:82:94:75:9b:e0:ed:54:c5:
         6a:c5:e0:82:9f:69:9d:1b:df:ac:f2:50:49:02:3e:dc:d1:aa:
         43:30:66:9f:75:08:48:88:9e:28:84:73:16:d9:5b:36:e1:61:
         d4:dd:4b:2c:1f:d9:2a:35:00:90:b4:35:2d:6b:4f:bf:8b:39:
         f7:dd:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 02:05:00 2023 by rpki-client on console-fra.rpki-client.org