Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/5APh0hzdAhFaOIhprV5tD2sipMg.roa
File:                     5APh0hzdAhFaOIhprV5tD2sipMg.roa (raw, json)
Hash identifier:          pN5+/HI5rxzcy/YgBLmOHf87TPS6DZKickWVJ69KAF4=
Subject key identifier:   E4:03:E1:D2:1C:DD:02:11:5A:38:88:69:AD:5E:6D:0F:6B:22:A4:C8
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       B1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5APh0hzdAhFaOIhprV5tD2sipMg.roa
Signing time:             Mon 24 Oct 2022 04:32:56 +0000
ROA not before:           Mon 24 Oct 2022 04:32:56 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        210.172.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:32:56 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=E403E1D21CDD02115A388869AD5E6D0F6B22A4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:c9:4a:f8:16:39:bf:44:18:a1:ec:94:9a:
                    18:73:80:6b:d0:72:ca:16:9b:19:25:d1:6c:4e:19:
                    a5:f6:08:2c:d7:85:af:78:c0:63:22:5d:d4:e1:ce:
                    39:2a:40:01:e4:fe:35:b8:f2:04:0c:b1:3a:51:fc:
                    97:72:55:10:90:e7:cc:14:90:d7:85:78:ef:d3:27:
                    15:9a:b4:85:ec:27:76:74:c1:9b:6b:3d:7b:99:9e:
                    0a:37:2a:96:34:bf:17:25:a8:a2:3a:94:ca:95:32:
                    bd:8a:cb:b7:15:2c:50:0d:c4:f5:26:13:72:e0:b2:
                    c0:00:c1:8c:c6:40:72:64:ad:48:05:1c:60:90:84:
                    48:a0:d6:c0:d4:4e:37:7e:67:27:30:ca:06:51:15:
                    aa:33:0a:c7:d4:7c:95:f5:9e:ed:98:a1:d8:4b:29:
                    e0:25:91:85:8d:26:9c:6c:ae:5b:9f:ef:5c:b4:12:
                    d0:39:36:77:ec:f9:02:25:21:5f:37:95:ea:a5:55:
                    dd:db:61:ae:ae:0f:7d:21:2e:f4:19:9a:71:57:f8:
                    62:80:36:d2:08:0e:a5:de:9e:f9:02:23:28:73:06:
                    65:ac:14:82:21:7b:d0:5b:c6:51:7a:92:b2:df:50:
                    d1:df:9a:6e:be:37:e8:f2:95:2a:ae:0f:80:6f:bc:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:03:E1:D2:1C:DD:02:11:5A:38:88:69:AD:5E:6D:0F:6B:22:A4:C8
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/5APh0hzdAhFaOIhprV5tD2sipMg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:db:69:24:b4:12:bd:d5:b9:6f:6d:2a:ce:9d:e3:fa:d4:
         49:e9:a5:27:27:57:52:16:48:a2:e9:aa:6b:be:69:36:d1:b5:
         47:69:18:86:69:6c:9e:29:1d:2f:55:ca:84:8f:a2:0e:c4:62:
         4f:65:c6:0d:52:68:be:e8:a7:df:79:b4:33:cd:d8:bd:19:fb:
         c0:0a:84:18:70:a8:30:c2:ef:98:d1:6d:b8:76:43:5e:97:0a:
         df:2c:b6:9d:4a:36:46:10:0e:2b:b0:68:b2:1e:18:d5:05:39:
         d9:e4:b0:70:a6:0c:de:26:4a:4f:1d:58:4a:ac:4b:1c:ed:7a:
         b8:2f:dd:33:de:5e:bb:d7:17:53:60:87:f0:99:dd:6f:6e:8a:
         e6:92:9e:dc:c4:47:02:60:84:58:eb:f1:e5:31:51:c0:ed:56:
         c0:66:2c:4d:2d:95:b5:04:ec:6c:14:f5:a7:d8:8b:6e:db:85:
         cb:23:b4:0b:df:9f:28:e5:55:aa:9e:ac:4e:ba:52:f0:61:e3:
         51:d6:82:79:29:b2:e8:b5:dc:b1:ad:ff:5e:a4:7b:d2:bf:e9:
         0a:f5:b9:30:d8:8a:82:73:bd:05:33:27:12:73:63:8b:a3:76:
         3e:16:42:6b:81:b2:fc:fe:e9:94:6d:c7:6d:c2:e6:20:96:0d:
         a2:a9:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org