Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/X9xf5uJLuWczEkZ4Sogz5GX9Pac.roa
File:                     X9xf5uJLuWczEkZ4Sogz5GX9Pac.roa (raw, json)
Hash identifier:          Ts83XDuxKo7XKP3GmeRFUWehxn7YgYlU271DSl9vxMs=
Subject key identifier:   5F:DC:5F:E6:E2:4B:B9:67:33:12:46:78:4A:88:33:E4:65:FD:3D:A7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       C3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/X9xf5uJLuWczEkZ4Sogz5GX9Pac.roa
Signing time:             Mon 24 Oct 2022 04:51:00 +0000
ROA not before:           Mon 24 Oct 2022 04:51:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        223.165.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:51:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5FDC5FE6E24BB967331246784A8833E465FD3DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:c4:16:1d:5e:f1:bd:c9:33:ce:cb:b6:a8:
                    f9:67:e5:22:95:19:c3:30:78:55:61:58:68:af:c1:
                    ba:b8:f4:46:61:d8:b4:7a:b0:19:d2:eb:1c:bf:aa:
                    ba:07:ea:74:5a:d3:b2:22:c7:cd:99:a1:80:35:27:
                    60:03:ef:e5:6e:7b:b1:c0:8e:7e:58:76:b7:21:2b:
                    71:cc:dd:85:80:1c:fe:c6:35:38:b9:35:02:db:79:
                    b9:44:df:e9:17:c3:63:2e:69:a6:4e:5e:b0:85:91:
                    88:fe:bf:a1:63:49:00:89:54:29:7b:48:ef:69:56:
                    dc:09:f3:bb:98:08:a5:8f:47:23:8b:8a:ba:f3:3c:
                    55:e2:31:e4:de:6d:a4:e8:15:26:c4:ad:97:0b:16:
                    b0:ed:82:09:4c:d7:b3:f3:d4:32:5d:1d:e4:c9:d7:
                    33:89:61:af:db:5d:c2:70:f8:32:b1:07:19:c6:48:
                    5d:1d:02:c6:59:42:50:7a:b7:f9:af:da:c6:e9:c0:
                    f4:1d:70:b5:66:21:0c:e4:a2:5d:45:c8:f6:74:20:
                    a9:72:12:e6:0b:6d:ee:50:b5:cb:99:81:8f:d6:ea:
                    ee:c2:08:be:6f:9c:5e:71:e3:b8:aa:01:08:c8:25:
                    4e:20:f5:70:da:e0:e0:05:81:e8:c6:9d:7b:cd:d4:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DC:5F:E6:E2:4B:B9:67:33:12:46:78:4A:88:33:E4:65:FD:3D:A7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/X9xf5uJLuWczEkZ4Sogz5GX9Pac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:bd:57:bf:d1:e4:1b:ca:c2:9e:c0:41:b7:ae:55:ce:68:
         cb:3c:5f:16:45:13:89:14:40:8a:cc:55:24:11:43:9a:8d:bb:
         7c:f4:23:f1:0a:44:fa:57:a3:a9:ea:5a:a2:1f:2d:91:77:21:
         53:1e:21:1a:26:10:77:37:c7:a2:57:36:bb:f1:a4:8d:d5:d3:
         92:e4:1b:18:68:5b:46:a6:99:95:87:b8:c0:9f:ab:9e:97:0d:
         96:04:48:55:ae:84:20:f6:26:f5:6f:a7:58:ad:4d:df:06:fe:
         0f:d3:e1:8a:21:38:07:58:c4:84:69:2b:9e:fb:fd:f2:29:59:
         81:8a:a8:03:d8:b9:d7:54:dc:8f:05:11:e3:e2:98:b1:20:66:
         6b:25:44:87:66:c3:21:9d:a2:71:f7:b2:fc:10:b8:0b:58:b7:
         aa:a0:14:16:00:af:14:c1:87:43:40:a1:4c:b3:d6:ab:79:34:
         11:dc:21:7c:4b:26:83:bf:df:e9:73:f6:f0:2a:26:93:02:0b:
         ee:ba:58:d6:4c:ad:da:72:db:ef:1f:f9:06:ec:a5:55:dd:f2:
         75:b9:76:53:b3:f1:1e:2e:b2:51:72:e8:15:7c:51:55:8a:56:
         90:d3:ac:c3:43:ad:b2:3d:07:ae:d0:d1:41:a3:5e:0e:36:95:
         ab:70:84:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org