Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Sn2jtWNRFiUdJvDSdVrW5GHNoGA.roa
File:                     Sn2jtWNRFiUdJvDSdVrW5GHNoGA.roa (raw, json)
Hash identifier:          Ge8kexw9R32N3EQlWSrBE7yLBXzjuk1c6FLDTIdUyNk=
Subject key identifier:   4A:7D:A3:B5:63:51:16:25:1D:26:F0:D2:75:5A:D6:E4:61:CD:A0:60
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       6E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Sn2jtWNRFiUdJvDSdVrW5GHNoGA.roa
Signing time:             Mon 17 Oct 2022 02:40:02 +0000
ROA not before:           Mon 17 Oct 2022 02:40:02 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23790
IP address blocks:        119.161.112.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:40:02 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=4A7DA3B5635116251D26F0D2755AD6E461CDA060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:c1:f4:a7:3e:00:86:cc:4a:ea:e5:db:89:
                    2c:6e:df:43:cf:92:f2:f7:b3:12:27:a0:69:52:94:
                    21:44:c8:40:c1:33:45:01:b5:87:03:ce:db:29:02:
                    6a:9a:42:fe:e6:17:cc:f1:82:8b:57:00:eb:e4:74:
                    aa:fa:9f:49:e1:30:16:4b:c2:58:1c:86:78:93:1f:
                    a6:ee:d1:2e:fc:9c:be:2a:a7:48:1c:7f:cd:2f:20:
                    11:2c:7c:f1:fb:c2:b2:ff:25:74:78:3e:bd:06:d1:
                    26:a5:f6:26:d4:70:97:5f:46:3d:79:b8:10:4d:22:
                    62:70:ff:72:05:cf:e7:3e:36:d7:0d:d5:02:1e:e7:
                    3f:2f:f5:0d:71:6a:d8:b3:1c:49:84:57:b9:73:a1:
                    96:1a:41:89:4a:3d:45:94:e7:0b:80:a9:73:c1:c8:
                    0f:ad:98:f7:64:f4:74:dd:6f:c4:21:4b:81:2d:5c:
                    bc:e7:2a:a7:3b:ed:ae:a5:4b:56:60:2a:81:37:1d:
                    1e:ee:53:37:9b:76:89:b2:38:06:e0:b4:1a:d5:bb:
                    a4:2d:67:71:15:b8:72:19:25:a7:46:4a:85:d6:f9:
                    14:18:cd:76:73:41:3e:fd:9e:d8:8b:0e:d0:df:bf:
                    0b:e8:4d:9b:43:96:34:64:0e:88:66:c8:dc:a3:39:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:A3:B5:63:51:16:25:1D:26:F0:D2:75:5A:D6:E4:61:CD:A0:60
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Sn2jtWNRFiUdJvDSdVrW5GHNoGA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:25:3e:b9:33:ea:7a:c5:28:d9:01:72:a3:d8:fb:65:6a:ce:
         e7:4f:3c:26:a5:66:eb:8c:6b:36:8b:9a:4a:ba:15:36:e7:e9:
         a2:f1:ee:f8:09:ae:0d:86:bb:fb:72:81:d7:f1:92:80:4b:16:
         fe:bb:a3:57:fd:df:ea:4f:aa:57:73:27:c7:c5:69:65:4b:20:
         69:f7:01:b5:c0:f5:62:16:cc:ff:62:0f:56:db:9a:eb:f7:f4:
         02:ec:38:c6:4d:1a:25:fc:b9:75:63:e5:27:35:32:a7:0f:fd:
         84:96:29:5f:96:3c:17:3a:9c:c1:27:29:a7:2a:60:44:cb:3d:
         4a:81:9f:e6:09:1e:e4:8d:ff:c0:71:77:9c:5c:f8:74:1d:c2:
         c9:55:08:d3:e1:bf:b4:de:35:7c:b7:18:0f:c1:a5:7a:d5:bd:
         ea:76:1e:1a:6c:a1:3d:c6:0e:62:27:72:fd:b9:18:1a:97:b2:
         76:7c:ae:2c:62:49:a7:c3:13:82:26:96:4d:2e:f4:b3:04:8c:
         1c:dd:f9:7c:24:b4:c5:57:28:c4:ea:2a:24:ae:9b:1e:94:21:
         d0:20:0b:bf:3c:01:58:3f:90:a1:5d:14:ae:f0:68:2c:95:e1:
         e0:78:c2:3e:00:f2:43:16:5d:0c:60:5f:34:ed:c7:79:12:d2:
         3c:cf:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org