Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/FBbYNGlVm966C-Wt_3W6DYVlAnI.roa
File:                     FBbYNGlVm966C-Wt_3W6DYVlAnI.roa (raw, json)
Hash identifier:          KPVH2dLppKgPD0V+J+atxAsHoaC5t+czfD6nTOfE0o4=
Subject key identifier:   14:16:D8:34:69:55:9B:DE:BA:0B:E5:AD:FF:75:BA:0D:85:65:02:72
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       DA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FBbYNGlVm966C-Wt_3W6DYVlAnI.roa
Signing time:             Mon 31 Oct 2022 02:02:13 +0000
ROA not before:           Mon 31 Oct 2022 02:02:13 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        125.4.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:02:13 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=1416D83469559BDEBA0BE5ADFF75BA0D85650272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:77:4d:00:0b:11:c4:27:dc:51:f9:45:b3:
                    8c:ad:18:c2:3e:dd:b2:63:0f:ac:e6:34:9f:b6:1a:
                    a5:f3:ba:37:da:63:55:c3:a7:56:62:a4:3b:da:4e:
                    10:29:4e:70:3a:0e:5d:22:b1:3e:15:91:45:6f:30:
                    23:0f:e9:a9:ed:bc:2d:30:3b:12:df:2c:30:a1:04:
                    52:6a:17:9f:25:2d:80:1c:c1:17:0c:82:91:45:55:
                    92:6f:1a:72:07:45:38:12:e2:d7:06:4b:9a:59:91:
                    56:ec:d1:20:9b:fd:a9:a2:cf:b8:3a:ed:c3:55:7b:
                    6c:f0:51:09:98:45:91:fb:ee:26:5c:f5:6d:a5:af:
                    38:4e:d4:1e:43:e6:29:1f:6f:49:e9:53:32:50:e4:
                    1c:da:fb:c5:36:dd:23:2e:9b:46:36:82:19:89:7c:
                    f4:30:b3:b8:e5:74:25:2d:0d:a4:d1:0e:4b:71:f4:
                    df:85:3e:ab:fa:e9:11:8f:f2:93:a4:87:cb:1c:2b:
                    c9:b3:c8:04:a4:3e:fa:b5:ae:73:97:ea:a2:5e:c7:
                    e6:1f:ce:bb:fd:0f:cc:e5:d3:d5:1a:96:e1:74:5f:
                    c4:8a:02:e1:81:de:a0:c6:c6:c6:e8:d3:14:0c:4f:
                    03:1f:d2:81:17:e5:6c:cb:10:e6:32:3b:36:67:87:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:16:D8:34:69:55:9B:DE:BA:0B:E5:AD:FF:75:BA:0D:85:65:02:72
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FBbYNGlVm966C-Wt_3W6DYVlAnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:f5:6f:bd:2c:38:2f:85:66:03:d8:de:05:e2:6c:e3:db:81:
         4a:65:47:e9:1b:ed:0e:eb:8e:e6:ac:9f:8e:f1:9f:8c:26:5b:
         44:28:89:d1:79:7b:3c:83:6f:53:4a:a9:c7:b9:e1:48:ed:19:
         1b:e0:bb:63:ff:82:c6:44:11:ad:07:d8:89:66:93:85:63:7f:
         d6:0f:c1:9b:6e:ac:d4:26:15:6a:31:e5:cc:34:55:5e:fb:79:
         54:66:e1:c4:e3:8a:a7:3a:5e:98:db:74:9b:8f:17:fe:0f:44:
         4c:8c:c9:4e:96:f5:ea:e5:d2:a3:29:14:62:c0:af:ef:7b:6d:
         64:f0:46:17:a2:cd:98:82:3f:14:e4:1c:6b:0d:05:07:54:f1:
         d0:56:5f:57:12:1c:55:09:c6:e2:f5:27:86:8d:0a:44:c0:d3:
         3d:24:4a:f7:d6:b6:dd:f1:8b:75:1b:6e:fa:7d:b4:1f:3e:97:
         ab:61:91:3f:22:c9:e2:80:63:0b:eb:f1:f5:59:f4:ec:c1:53:
         86:50:a8:6d:df:f3:ae:4c:c4:d1:62:60:55:6f:5c:84:de:87:
         4c:d0:35:b3:bf:fd:04:9b:df:ff:5a:39:a9:66:55:00:3d:d1:
         4e:f9:6b:43:23:13:f7:97:57:e5:9c:57:3a:4f:72:cb:6d:23:
         2a:81:5f:a2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMzEw
MjAyMTNaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE0MTZEODM0Njk1NTlC
REVCQTBCRTVBREZGNzVCQTBEODU2NTAyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD83dNAAsRxCfcUflFs4ytGMI+3bJjD6zmNJ+2GqXzujfaY1XD
p1ZipDvaThApTnA6Dl0isT4VkUVvMCMP6antvC0wOxLfLDChBFJqF58lLYAcwRcM
gpFFVZJvGnIHRTgS4tcGS5pZkVbs0SCb/amiz7g67cNVe2zwUQmYRZH77iZc9W2l
rzhO1B5D5ikfb0npUzJQ5Bza+8U23SMum0Y2ghmJfPQws7jldCUtDaTRDktx9N+F
Pqv66RGP8pOkh8scK8mzyASkPvq1rnOX6qJex+Yfzrv9D8zl09UaluF0X8SKAuGB
3qDGxsbo0xQMTwMf0oEX5WzLEOYyOzZnh6gbAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUFBbYNGlVm966C+Wt/3W6DYVlAnIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0ZCYllOR2xWbTk2NkMtV3RfM1c2RFlWbEFuSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9BDANBgkqhkiG9w0BAQsFAAOCAQEArfVvvSw4L4VmA9jeBeJs49uBSmVH
6RvtDuuO5qyfjvGfjCZbRCiJ0Xl7PINvU0qpx7nhSO0ZG+C7Y/+CxkQRrQfYiWaT
hWN/1g/Bm26s1CYVajHlzDRVXvt5VGbhxOOKpzpemNt0m48X/g9ETIzJTpb16uXS
oykUYsCv73ttZPBGF6LNmII/FOQcaw0FB1Tx0FZfVxIcVQnG4vUnho0KRMDTPSRK
99a23fGLdRtu+n20Hz6Xq2GRPyLJ4oBjC+vx9Vn07MFThlCobd/zrkzE0WJgVW9c
hN6HTNA1s7/9BJvf/1o5qWZVAD3RTvlrQyMT95dX5ZxXOk9yy20jKoFfog==
-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org