Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/otBq2UXJAZeXpD2EHEQH_gd4_ks.roa
File:                     otBq2UXJAZeXpD2EHEQH_gd4_ks.roa (raw, json)
Hash identifier:          HMIttyJHovlxm1452W7/ytDDQLFaE1f1xHupac+xRP8=
Subject key identifier:   A2:D0:6A:D9:45:C9:01:97:97:A4:3D:84:1C:44:07:FE:07:78:FE:4B
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       A7
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/otBq2UXJAZeXpD2EHEQH_gd4_ks.roa
Signing time:             Tue 01 Nov 2022 01:28:08 +0000
ROA not before:           Tue 01 Nov 2022 01:28:08 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.63.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:08 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=A2D06AD945C9019797A43D841C4407FE0778FE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:1e:2d:bd:0c:89:a0:b2:0e:77:89:d2:80:
                    27:19:6f:64:6e:e0:52:cf:fe:9e:ce:67:db:2d:bb:
                    c3:7e:52:81:17:66:d1:3e:83:f7:40:7f:6f:08:09:
                    5e:f9:6c:46:2f:d0:c4:2b:6b:14:69:84:92:a6:6e:
                    81:d3:d9:de:e2:f8:47:00:03:76:96:2e:80:65:76:
                    0c:14:41:9b:e4:64:d0:77:c5:b9:b3:d9:54:bc:06:
                    f4:a6:0a:cc:2f:e8:81:ed:87:03:46:b6:de:e3:25:
                    05:27:12:09:73:ee:84:79:5f:cf:45:d3:e3:a6:5b:
                    3e:78:cf:5a:1f:28:56:85:23:1a:f7:c6:96:57:d1:
                    4a:d1:96:42:13:1a:f9:61:14:8a:1b:6e:5f:49:1f:
                    52:f4:f5:1f:a9:47:61:50:d4:4c:95:45:e1:77:f3:
                    73:7b:ee:61:a9:a8:2d:67:b1:7d:39:1a:fb:a8:93:
                    4e:34:8e:a8:f8:5d:28:3b:b2:5d:34:4e:a0:36:07:
                    d7:97:a3:ec:f1:3b:b0:db:c3:c8:70:a7:99:01:27:
                    73:81:62:02:b0:9a:ef:db:9c:79:04:61:6e:4e:34:
                    83:53:b8:61:04:b1:fe:b9:4a:c2:d4:8c:2d:b4:98:
                    33:3e:2f:21:67:46:8c:b4:f0:c5:ee:89:06:5b:40:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D0:6A:D9:45:C9:01:97:97:A4:3D:84:1C:44:07:FE:07:78:FE:4B
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/otBq2UXJAZeXpD2EHEQH_gd4_ks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:09:a0:3e:c9:06:0f:2b:6a:1c:47:26:44:58:d4:5f:57:bf:
         24:d4:7f:71:7f:5f:66:d0:a4:e4:08:d3:36:67:43:e9:dd:6e:
         a1:a7:f5:56:0e:db:ac:92:ae:c9:63:86:9b:87:bb:aa:e0:2e:
         2b:98:a0:ef:82:64:6e:45:f8:41:ed:ee:5f:cb:15:4c:32:8c:
         e5:22:c1:c2:b8:59:75:8b:1d:4c:47:4f:48:02:78:d4:9b:35:
         78:92:47:f8:a0:b4:18:de:e0:99:f0:01:2b:b1:a8:20:f8:2f:
         0d:c5:89:90:46:3f:3e:9a:9f:88:fc:5c:fd:27:7a:92:0e:97:
         8b:3b:21:22:50:85:28:e6:9c:13:f0:8a:ad:43:dc:fb:3a:81:
         cd:27:37:d2:f8:2f:63:f7:c9:6e:7d:88:52:45:53:6e:88:b0:
         fa:ea:c8:f0:71:c4:c0:e0:a9:fa:b8:9a:40:02:7b:99:ea:de:
         65:85:6c:35:44:cd:af:b2:2e:f9:7b:08:08:a3:0f:66:6b:0c:
         68:5e:6b:70:b9:5e:f8:75:de:e1:fe:27:85:26:1b:17:ba:a9:
         92:c9:37:04:28:27:d7:26:7f:90:e3:1d:1c:90:31:da:fc:ca:
         af:76:29:8f:cf:54:c9:e7:89:fb:9f:9d:f5:97:98:14:7a:18:
         43:38:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org