Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/ZLEkOVD1T-1On37eYm4SDuY3CWM.roa
File:                     ZLEkOVD1T-1On37eYm4SDuY3CWM.roa (raw, json)
Hash identifier:          t+gQGDmeXHi78hHza6dle4ntzO+QebqATnsLlzJi5tg=
Subject key identifier:   64:B1:24:39:50:F5:4F:ED:4E:9F:7E:DE:62:6E:12:0E:E6:37:09:63
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       1D
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ZLEkOVD1T-1On37eYm4SDuY3CWM.roa
Signing time:             Tue 05 Dec 2023 08:04:20 +0000
ROA not before:           Tue 05 Dec 2023 08:04:20 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37904
IP address blocks:        218.231.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Dec  5 08:04:20 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=64B1243950F54FED4E9F7EDE626E120EE6370963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:09:87:35:cc:37:b8:75:51:44:17:22:60:
                    c4:96:08:16:94:6b:0f:98:75:83:8e:3e:67:b8:02:
                    af:7d:6c:8a:dd:d1:57:15:6f:23:e5:74:af:6e:6b:
                    2a:0a:2a:b6:b6:08:fa:39:b5:d0:d7:e1:07:9e:30:
                    65:e9:6f:30:39:f4:4f:22:5a:3a:b6:ce:ed:78:e9:
                    1d:7c:88:3e:5a:9a:40:81:b2:94:39:22:db:44:1f:
                    19:fb:2a:26:ea:3a:7c:78:18:0c:59:51:2a:b2:8a:
                    fb:ba:27:fe:5d:a0:e3:b0:44:ae:92:28:0b:e0:96:
                    a7:80:34:d4:86:e3:b8:88:4f:83:9e:60:7b:fe:92:
                    6b:70:56:0f:b5:9b:43:b2:f5:d8:ec:15:83:53:e7:
                    cc:3e:96:f2:54:6e:80:5c:fe:f3:2a:72:93:e6:f5:
                    fa:e2:21:7e:43:66:35:be:fb:92:dd:3c:ef:e8:45:
                    84:68:0f:d5:91:43:3e:f3:b4:f3:60:ba:dd:48:e6:
                    3a:78:dd:96:d7:8f:26:e3:b7:6a:b6:e5:a0:7c:65:
                    f8:ae:13:dd:ee:56:89:bc:64:fd:d5:2f:93:14:77:
                    c1:b1:e5:6c:ab:67:08:fc:bf:4c:8d:22:81:19:50:
                    0c:be:b4:73:e2:9f:a4:c3:5f:ce:36:ff:40:29:85:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B1:24:39:50:F5:4F:ED:4E:9F:7E:DE:62:6E:12:0E:E6:37:09:63
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ZLEkOVD1T-1On37eYm4SDuY3CWM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:80:c6:15:4a:8d:39:a5:ae:e4:4c:86:d9:c2:1e:5c:d4:33:
         53:29:06:91:34:95:89:a0:14:d2:7c:9f:d1:1b:6e:68:80:df:
         46:ba:94:7a:11:bc:14:77:13:84:cf:04:60:d4:b6:4c:44:a7:
         5e:7c:52:9a:0b:64:ef:6a:8a:6c:a8:55:0c:1b:7b:5c:36:23:
         3f:99:f5:4e:6e:ae:20:c0:06:76:fa:53:d8:1e:e4:81:0c:6b:
         01:e0:85:db:2b:9c:87:3b:e6:6a:20:0d:7f:ce:0d:6b:7e:75:
         42:57:54:ac:81:83:be:84:0d:c3:48:76:52:1f:23:b7:8c:b7:
         43:19:c1:62:d4:cc:ee:e4:46:26:9a:90:b9:92:21:dd:ff:dc:
         29:ba:a4:bb:54:23:79:9c:84:52:fd:15:23:f2:6e:d2:54:08:
         f0:3e:f0:a7:26:87:15:82:08:a3:25:4d:67:e8:be:b8:9b:30:
         0b:e9:97:ba:43:3d:ab:fd:8a:8a:b0:66:38:09:98:10:2f:ac:
         63:e2:7f:c9:35:5d:e4:f0:6f:06:35:53:c7:19:fe:ea:f2:15:
         e0:cd:25:dd:ad:32:e1:03:81:63:55:67:1e:75:a8:bd:97:57:
         51:b8:a8:90:af:8b:1a:45:8c:f0:60:d8:e4:ba:d9:44:35:fe:
         af:49:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 09:04:20 2023 by rpki-client on console-ams.rpki-client.org