Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/aHHRwpv7QXnSmRi7gXX6SOZG6ws.roa
File:                     aHHRwpv7QXnSmRi7gXX6SOZG6ws.roa (raw, json)
Hash identifier:          52xXY9bEegQH50VNu/JHzYhSwLuskZSyzfXMiydG1Eg=
Subject key identifier:   68:71:D1:C2:9B:FB:41:79:D2:99:18:BB:81:75:FA:48:E6:46:EB:0B
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       43
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/aHHRwpv7QXnSmRi7gXX6SOZG6ws.roa
Signing time:             Sat 01 Oct 2022 01:29:28 +0000
ROA not before:           Sat 01 Oct 2022 01:29:28 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     55900
IP address blocks:        202.12.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Oct  1 01:29:28 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=6871D1C29BFB4179D29918BB8175FA48E646EB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:40:3e:e3:2c:3b:0f:1e:f6:7a:13:f8:7a:
                    52:b4:53:70:17:75:d3:84:0b:30:47:a9:82:bd:82:
                    b5:8c:4e:f7:8a:85:c2:d6:f4:c4:47:33:92:5d:f8:
                    e5:c3:c4:1f:38:cf:a2:7f:20:ed:31:ea:3f:a7:cb:
                    50:59:07:c4:42:84:23:76:a5:f0:35:64:f5:4d:5a:
                    45:54:2e:af:bd:c0:f1:48:74:ec:97:cb:18:89:34:
                    0d:58:45:6a:25:29:61:14:f0:2b:62:b5:c7:7d:72:
                    b1:fa:d4:84:ec:64:5a:9e:00:c2:b7:c2:2e:32:94:
                    3c:88:3b:cc:ba:13:16:e1:5c:55:7d:d1:45:d3:bb:
                    4f:d7:e1:a4:88:b4:b6:10:fa:82:d5:ac:be:39:50:
                    1e:6c:60:f9:19:f0:7a:e2:77:0c:fa:76:44:c1:ae:
                    2d:40:0f:fe:bf:da:4a:02:36:d1:61:d7:6b:52:df:
                    8b:da:49:2b:e4:39:44:3e:e3:39:f7:1a:96:13:cd:
                    c7:51:15:5a:6d:11:52:8e:b8:6c:e5:f2:05:6b:40:
                    92:cc:09:c9:20:d2:db:ff:b1:3f:16:6e:01:40:18:
                    80:66:88:2b:85:4c:dc:a8:b1:83:e4:8b:2b:d2:3c:
                    88:e3:89:c8:4f:ac:91:50:8e:e5:36:c4:74:73:7e:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:D1:C2:9B:FB:41:79:D2:99:18:BB:81:75:FA:48:E6:46:EB:0B
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/aHHRwpv7QXnSmRi7gXX6SOZG6ws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:ec:11:6f:90:1b:99:96:c9:e4:eb:97:a9:b4:b8:28:11:
         df:50:b4:59:40:ab:ac:c6:98:e2:06:9c:09:d2:55:74:27:76:
         be:29:fc:42:70:d1:52:33:a4:6a:c0:80:be:e7:4d:5c:43:33:
         61:fa:e9:c9:88:1c:1e:f5:1c:18:02:4f:49:e5:66:55:7e:a7:
         93:9a:e3:88:c7:5a:34:4f:2b:fd:7e:e6:8b:4f:65:13:af:29:
         1c:77:da:f1:4c:fd:ee:62:80:6c:54:bf:11:96:d8:a9:7a:69:
         41:84:a1:bc:d7:c5:55:d4:9c:d2:30:bf:70:2a:44:23:de:6d:
         4f:36:97:c0:8e:2e:6b:cc:c2:a1:e2:be:c4:92:0a:46:f6:5d:
         b8:b2:cb:42:9e:71:0c:07:03:1a:c8:86:6f:de:81:1b:71:e4:
         eb:b7:60:7d:e4:0c:d7:e4:18:a7:c8:02:a1:3e:db:4d:71:8e:
         11:dc:9c:3f:52:e7:88:3f:3a:51:6d:c3:b2:1d:72:cc:d5:60:
         17:44:30:44:66:24:18:6d:ad:e1:d1:2d:06:92:de:a6:84:4a:
         11:3b:66:ba:58:2e:c3:73:d1:68:b5:8e:17:5b:9b:1e:f7:aa:
         4f:81:e5:90:3e:ba:29:73:d3:24:c8:3e:f1:ea:ec:31:2a:2b:
         84:c6:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 01:50:12 2023 by rpki-client on console-ams.rpki-client.org