Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Oitdl2BMgZR9Q-Lxll-Zywy_yJk.roa
File:                     Oitdl2BMgZR9Q-Lxll-Zywy_yJk.roa (raw, json)
Hash identifier:          W+Tdac+MNSD+4ZflUOH8Pvu4jwQjbOM1n+DAA4jnE4o=
Subject key identifier:   3A:2B:5D:97:60:4C:81:94:7D:43:E2:F1:96:5F:99:CB:0C:BF:C8:99
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       6F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Oitdl2BMgZR9Q-Lxll-Zywy_yJk.roa
Signing time:             Mon 17 Oct 2022 02:42:08 +0000
ROA not before:           Mon 17 Oct 2022 02:42:08 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        119.161.112.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:42:08 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=3A2B5D97604C81947D43E2F1965F99CB0CBFC899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:d9:63:89:2f:1a:ac:e7:4f:f6:b4:1d:25:
                    82:fd:13:4f:f5:bb:14:85:44:87:0a:9f:e2:fa:2b:
                    2f:2f:27:d7:c9:11:d9:79:f3:53:b7:06:a2:cc:63:
                    30:b6:13:c6:79:61:91:e1:09:0e:38:b7:0f:68:12:
                    6c:f5:b5:1a:5c:9f:6f:79:fc:47:b6:d2:bc:08:0f:
                    d6:27:80:f9:08:ab:26:be:c5:ec:56:51:0c:f3:a6:
                    79:1a:d9:85:a5:08:f7:41:c0:5d:d1:6c:a3:24:84:
                    4f:8e:71:db:5c:93:60:b3:01:f7:7c:a5:83:38:db:
                    47:df:dc:fb:ef:9b:73:37:ba:d5:87:91:85:a4:b0:
                    3b:8c:ec:c8:d8:41:f2:ad:b7:df:d4:ec:80:1b:eb:
                    dd:c1:53:94:27:d8:f0:b4:22:a9:9f:67:cb:19:7f:
                    8d:eb:c1:6c:85:3a:13:63:a1:e9:0f:bf:b8:06:cb:
                    cc:ff:ae:b9:23:ff:4f:26:36:a7:67:00:90:6f:00:
                    9d:f1:51:21:78:53:38:6f:6c:5e:e6:8c:0f:ba:ac:
                    bf:f7:27:7f:2e:25:de:55:1c:8c:ac:fd:9b:de:b6:
                    46:35:23:7b:00:e5:f5:4a:fb:aa:07:02:56:42:96:
                    f9:54:a9:d3:f6:3e:4f:0e:dc:a3:f1:fe:f9:7f:bb:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2B:5D:97:60:4C:81:94:7D:43:E2:F1:96:5F:99:CB:0C:BF:C8:99
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Oitdl2BMgZR9Q-Lxll-Zywy_yJk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:bb:ca:76:ef:31:12:36:e5:10:9a:6c:61:4c:7c:19:18:
         0e:15:5a:70:df:b8:48:9e:6d:63:a5:b9:c3:a7:ca:d6:09:51:
         fa:20:6e:77:d2:45:a8:7c:54:6c:60:31:3f:fa:88:93:21:02:
         bf:9c:a7:7a:0e:bd:92:ad:0f:61:72:40:bd:c2:cd:b7:72:54:
         13:d6:1c:1a:2c:f2:43:ec:7b:31:30:88:59:6f:ff:d2:4a:e2:
         10:02:24:c4:49:79:62:a3:5a:1b:e8:fe:e1:a4:4b:7c:da:b7:
         7a:87:47:20:5b:23:06:7a:ce:72:76:96:a1:97:5b:6d:c3:63:
         e4:6d:57:99:b1:f7:0e:67:12:e6:55:cc:9a:0e:63:a2:2e:62:
         12:a8:cd:8e:e2:5d:3b:2a:12:a0:a9:86:16:9a:a9:b3:cd:28:
         2d:0c:87:9a:92:12:b2:ec:de:f0:94:c2:3d:aa:e6:94:0c:63:
         88:6c:a1:d2:44:4f:f4:b3:5f:04:98:17:5d:3b:1e:87:93:fe:
         e7:9d:90:c6:1f:08:a6:70:c3:96:2f:61:a4:ca:d1:90:1c:31:
         54:31:63:bf:68:23:39:4b:7b:15:93:d6:54:4f:66:84:fd:da:
         09:ca:40:b9:2d:45:4d:51:af:74:c1:65:8b:6e:cb:9e:e9:03:
         bc:09:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org