Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0vlW2pBXSwvDMgGH22W2JS_Toss.roa
File:                     0vlW2pBXSwvDMgGH22W2JS_Toss.roa (raw, json)
Hash identifier:          s1chbk2bXI2OuH7hyTAnNfynZ0Ih/i6KtMhU8Y7qNZ0=
Subject key identifier:   D2:F9:56:DA:90:57:4B:0B:C3:32:01:87:DB:65:B6:25:2F:D3:A2:CB
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       D4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0vlW2pBXSwvDMgGH22W2JS_Toss.roa
Signing time:             Mon 31 Oct 2022 01:53:59 +0000
ROA not before:           Mon 31 Oct 2022 01:53:59 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        119.26.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:53:59 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=D2F956DA90574B0BC3320187DB65B6252FD3A2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:e9:6e:34:5e:5b:f3:18:07:87:55:e7:16:
                    43:10:ce:1e:4e:c0:22:ff:c3:9a:41:f2:70:9c:aa:
                    f6:24:d3:a5:40:44:43:e0:02:af:b9:19:2e:74:02:
                    98:c5:85:d9:89:5b:c3:4e:1a:16:0c:aa:6d:0d:b9:
                    54:5e:38:2b:4d:b6:2c:2c:c5:b8:7b:0f:7f:da:1c:
                    5f:4a:62:d2:98:57:25:70:2b:f0:79:cd:32:da:14:
                    56:4d:97:07:4e:63:36:f4:30:36:b7:04:da:01:f7:
                    ca:8e:b2:8d:50:e1:a4:81:08:02:12:52:71:10:48:
                    48:3f:57:05:30:79:a8:31:db:d5:c8:82:24:21:35:
                    39:d4:38:37:93:e2:83:98:c9:b6:90:22:5c:b6:6a:
                    50:1d:77:7c:23:be:ea:f9:45:4b:2a:1c:bc:9e:07:
                    68:94:5b:09:c4:1c:65:a3:ed:24:46:87:0d:a9:a1:
                    0b:dc:cb:f3:3d:4d:6b:15:76:27:2b:7d:2e:9c:14:
                    ca:d6:f6:0e:7f:e9:23:fa:e1:b3:e0:51:e1:c1:9c:
                    5f:97:dd:1f:56:12:ff:2d:80:cf:9a:c0:c3:a6:8c:
                    a0:9b:ce:b0:67:a1:3f:c5:1f:2b:da:e6:bc:65:a3:
                    19:67:6c:77:ce:c8:12:b6:71:bb:8d:b6:38:f8:6b:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F9:56:DA:90:57:4B:0B:C3:32:01:87:DB:65:B6:25:2F:D3:A2:CB
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0vlW2pBXSwvDMgGH22W2JS_Toss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:73:58:ce:9e:9c:b4:55:13:fa:fb:1d:e0:b4:ed:cd:2b:20:
         87:a7:c1:16:00:08:be:9e:d9:f7:f6:fd:67:0e:cf:cc:b8:21:
         9b:67:d4:60:98:4a:0e:f9:ce:c1:e4:2b:81:0d:7e:b5:cd:ed:
         b6:c4:3a:db:e1:8b:ee:78:f0:4b:92:ae:ea:02:30:af:6e:27:
         62:2c:c5:f2:a1:af:ea:5c:c2:90:a3:e4:9c:4a:14:f0:68:fb:
         48:a5:5a:a0:99:0b:3e:0d:44:ea:9a:b0:7e:de:32:be:56:f3:
         ea:c3:15:7f:48:f0:61:a3:e3:a1:cd:5f:64:2e:57:bb:85:14:
         85:38:0a:2a:69:c2:2e:ff:22:83:d2:4a:8b:23:d5:1f:cf:ff:
         3f:8c:da:c4:ce:36:84:46:4d:d8:c4:08:03:3f:35:32:22:f1:
         ca:de:a0:d0:cc:f6:23:e0:4e:28:29:f0:80:70:3c:c0:0f:b6:
         6e:23:fe:bc:d0:17:a0:93:47:ea:af:7f:d1:2d:a5:ed:26:b5:
         a9:eb:05:d2:bb:35:12:90:2b:7b:a0:43:9a:97:af:6d:93:78:
         5f:aa:09:03:f2:e9:b7:04:0f:e3:aa:03:50:c2:a9:8d:ae:f0:
         d7:ab:47:29:b9:70:a7:8b:62:e7:38:35:08:92:75:d4:bd:54:
         7d:7a:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org