Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QKWdKQv-X1AKP98cO1BFNHySxqY.roa
File:                     QKWdKQv-X1AKP98cO1BFNHySxqY.roa (raw, json)
Hash identifier:          9/XIGH7QHTesMLyDeH/88ZHwmV1IrZcS7JQ8DpeC43o=
Subject key identifier:   40:A5:9D:29:0B:FE:5F:50:0A:3F:DF:1C:3B:50:45:34:7C:92:C6:A6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       B2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QKWdKQv-X1AKP98cO1BFNHySxqY.roa
Signing time:             Mon 24 Oct 2022 04:32:57 +0000
ROA not before:           Mon 24 Oct 2022 04:32:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        210.172.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:32:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=40A59D290BFE5F500A3FDF1C3B5045347C92C6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:c3:7e:f1:35:f2:4e:30:fe:3d:f6:e2:62:
                    f2:03:53:a9:05:0e:e2:17:fe:4f:a1:6f:0a:68:4b:
                    71:db:ad:5f:04:e2:cd:fd:c7:71:2f:64:37:a6:cb:
                    bb:e9:ee:e2:4b:cf:1e:8e:6b:a2:df:71:f4:1f:14:
                    c3:5b:57:93:07:cc:34:d6:0f:f3:d2:02:cc:a6:d5:
                    37:19:30:27:77:32:01:80:09:11:95:37:36:9b:7b:
                    00:db:b5:6b:ad:93:75:db:aa:01:f3:0c:a6:e0:05:
                    95:03:b3:b1:90:34:14:bd:ce:f4:63:0e:cf:72:08:
                    3d:ad:64:46:d3:af:c9:67:e7:9e:ab:d0:40:b1:57:
                    12:4f:28:20:23:8f:4c:4e:a9:68:7e:d8:d1:55:16:
                    2b:1c:fb:07:49:96:2d:55:b8:ef:b9:ae:44:00:71:
                    07:de:6f:56:cc:07:f4:76:b7:2b:06:ab:4a:4f:46:
                    1b:fa:56:20:89:d3:6d:15:10:2d:d9:6e:bd:ac:e8:
                    6c:bf:75:e8:4d:26:5c:ed:a5:a2:67:a3:58:67:4a:
                    fe:73:63:35:be:b6:68:59:a8:bf:e2:c8:b2:b9:cc:
                    33:7f:dc:74:39:06:e2:9d:3f:33:5a:04:7c:82:94:
                    40:53:a9:57:47:07:03:4b:ca:e7:4a:e6:76:44:ba:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A5:9D:29:0B:FE:5F:50:0A:3F:DF:1C:3B:50:45:34:7C:92:C6:A6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QKWdKQv-X1AKP98cO1BFNHySxqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:4c:d3:86:18:b4:53:8a:9d:af:27:67:0b:8d:8b:54:26:
         a2:76:69:02:79:45:f6:e3:dd:c0:e2:57:fc:59:9f:13:74:a3:
         ab:9b:1f:d0:d2:80:3b:18:87:10:17:44:eb:84:67:ed:7d:be:
         e1:a3:8b:57:a6:05:68:c5:be:12:25:fa:55:4c:f1:af:3d:06:
         bc:1c:b4:b0:63:dd:16:22:08:a6:b1:7b:75:0a:39:11:bd:c8:
         98:37:20:bb:95:85:d3:4a:80:16:10:b1:a7:ed:5a:1a:46:a5:
         73:f6:79:ac:37:35:54:1a:1e:0e:f3:53:6e:de:b3:73:5e:69:
         2d:dd:f8:94:f1:dc:cb:d5:08:de:a4:eb:d6:cd:31:ed:a0:7e:
         7e:92:19:01:c6:a4:28:8f:5d:c8:ee:26:d1:4c:96:c5:41:f7:
         16:99:bf:b7:8e:ac:b1:e8:6a:38:47:b7:9f:4b:72:32:7a:d8:
         1b:d5:fb:63:b1:84:10:f2:1c:de:28:65:2a:a9:0d:c2:dc:cc:
         dd:7e:65:96:02:b2:1d:70:de:f7:7d:55:ed:52:53:5c:12:7d:
         a5:31:65:19:b1:08:6b:56:05:b8:6c:19:0a:c4:73:8b:57:b1:
         ae:f2:af:c2:af:85:9e:99:63:c2:6e:e2:d4:6c:d0:b0:c4:ff:
         23:06:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org