Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/JMv36s1uca7_15h6hi1aHZCu6zg.roa
File:                     JMv36s1uca7_15h6hi1aHZCu6zg.roa (raw, json)
Hash identifier:          NnLplCPDv2OrvC3AU/avxeIm6ktzn4Bbq0uUyzCZSWs=
Subject key identifier:   24:CB:F7:EA:CD:6E:71:AE:FF:D7:98:7A:86:2D:5A:1D:90:AE:EB:38
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       83
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JMv36s1uca7_15h6hi1aHZCu6zg.roa
Signing time:             Mon 24 Oct 2022 02:32:25 +0000
ROA not before:           Mon 24 Oct 2022 02:32:25 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        110.173.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:32:25 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=24CBF7EACD6E71AEFFD7987A862D5A1D90AEEB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:6b:63:6d:32:d8:df:d7:22:e0:e8:2d:6f:
                    7c:e2:bf:ff:e1:9b:68:51:3f:20:f6:f7:82:b5:db:
                    e1:c4:93:26:1d:64:00:36:23:d3:a2:9f:d1:33:8c:
                    b2:62:ca:51:07:7b:4d:a2:63:46:f9:66:13:c2:d3:
                    2b:6e:e5:a0:fb:d3:d8:93:04:a6:20:96:c6:59:a0:
                    aa:a8:3c:0c:5d:21:eb:24:64:df:05:5d:6f:c2:93:
                    10:bb:cc:2c:f2:e4:26:00:b2:0d:cb:86:9b:cd:e5:
                    e8:58:76:7e:f1:05:11:0c:aa:4d:5b:ac:bb:7f:47:
                    78:9b:1a:5d:f1:fa:aa:60:e5:da:dd:b7:7f:d0:4c:
                    d1:8f:21:4f:b7:18:80:ce:eb:3d:d0:b1:23:39:f5:
                    50:99:ad:b1:6e:49:b2:e1:85:5a:55:d3:4c:6f:f0:
                    31:cf:04:54:6f:2c:87:46:2a:a2:1e:87:6f:c3:b4:
                    78:67:70:da:9b:76:31:e8:e6:7c:b0:e8:0a:0c:a1:
                    16:a0:ee:53:93:c1:df:11:ec:f9:88:55:41:3b:42:
                    01:36:d7:30:ba:79:31:29:f2:5e:d0:1f:49:44:33:
                    c4:51:26:6e:10:e4:d0:ce:41:35:1a:13:f4:41:e7:
                    3c:bd:5d:35:d9:9a:4e:a8:30:01:ca:1a:fa:4a:42:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CB:F7:EA:CD:6E:71:AE:FF:D7:98:7A:86:2D:5A:1D:90:AE:EB:38
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/JMv36s1uca7_15h6hi1aHZCu6zg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         de:bd:bd:77:7b:01:f9:8b:75:75:46:20:87:d5:91:67:b6:3a:
         30:d3:d0:c0:31:36:4b:e9:99:d9:bc:5f:b6:f4:37:f7:ff:aa:
         d7:64:64:40:d6:87:80:5a:31:a1:81:b6:bb:66:5d:f0:c5:0e:
         97:4c:1e:f3:d9:57:d5:47:76:a0:70:ab:3c:cd:bb:f0:3d:99:
         15:24:07:7d:03:ed:d4:39:0b:be:b2:47:20:de:61:84:fc:bb:
         f4:8d:c8:9c:fb:b7:92:99:3b:a8:5f:d9:37:d3:67:08:b7:29:
         c4:cc:b4:36:ff:2e:75:fe:3d:c9:c6:61:fa:c0:a6:f7:06:b2:
         3f:01:21:e0:ae:c4:89:fa:fa:7b:3e:da:7b:e7:cb:63:3f:34:
         cc:f0:42:19:51:a8:53:d0:c5:1f:ae:8b:83:86:b2:45:e8:96:
         de:91:ec:a4:4e:1a:4a:ea:8d:c6:3e:86:2a:9d:18:77:5a:1f:
         fe:42:4f:14:26:9c:01:cf:ce:28:95:4e:ed:71:47:14:3a:27:
         72:2b:de:05:4e:8d:dc:15:7e:f1:16:c1:59:aa:7e:20:20:ed:
         e4:fb:dc:62:c9:5a:48:e6:04:61:2b:98:ed:10:22:05:4d:b1:
         4c:03:b8:48:df:6e:1a:f6:b4:a8:d7:73:16:0a:95:03:79:be:
         93:1b:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org