Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZaTjl8wo-3rBq1U0b4VAczuufjU.roa
File:                     ZaTjl8wo-3rBq1U0b4VAczuufjU.roa (raw, json)
Hash identifier:          J1UF7zkqwc45sl6f8IgTCRwuQFydjNvLba//Elo6zWU=
Subject key identifier:   65:A4:E3:97:CC:28:FB:7A:C1:AB:55:34:6F:85:40:73:3B:AE:7E:35
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       16
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZaTjl8wo-3rBq1U0b4VAczuufjU.roa
Signing time:             Mon 03 Oct 2022 01:12:00 +0000
ROA not before:           Mon 03 Oct 2022 01:12:00 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        202.43.68.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  3 01:12:00 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=65A4E397CC28FB7AC1AB55346F8540733BAE7E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:19:35:18:19:28:24:29:80:57:e2:95:58:
                    e0:09:83:51:07:88:38:5a:63:ce:b0:94:3f:5b:9b:
                    df:bd:ae:85:4b:d3:69:f7:9d:47:ad:45:55:4d:8b:
                    14:85:62:34:96:fc:63:3e:51:bb:20:33:92:7c:2c:
                    15:6a:4d:3d:37:17:7b:1f:04:13:0a:cd:0d:cf:2d:
                    5c:06:eb:6b:a7:d7:a4:49:ac:24:5c:a2:ac:7c:ae:
                    40:62:2a:79:a3:2d:ea:4f:6a:77:1f:8c:56:0c:e6:
                    9d:ae:ec:b9:52:25:82:83:00:2a:80:3b:30:1c:c4:
                    48:7d:24:22:7a:47:95:f3:04:b1:5e:df:6c:a5:38:
                    ea:90:e0:16:8d:56:63:e3:53:eb:c0:89:24:66:36:
                    95:17:23:3e:f9:4c:be:08:8f:e3:05:af:24:05:3b:
                    80:64:bd:2a:1a:c0:f0:e8:a7:fc:5b:7c:39:9f:d6:
                    87:88:8f:d7:ad:43:98:bd:97:29:a0:ce:33:06:ff:
                    74:02:12:75:70:4a:b8:53:31:ab:82:d9:43:7f:83:
                    09:ec:3e:82:35:7e:72:23:ca:b7:74:a9:0c:89:b0:
                    99:b2:be:90:6e:80:97:86:5f:99:28:a5:70:c3:cb:
                    08:62:b5:a9:eb:9f:1c:cb:bd:b1:af:60:64:6f:a8:
                    0b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:E3:97:CC:28:FB:7A:C1:AB:55:34:6F:85:40:73:3B:AE:7E:35
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZaTjl8wo-3rBq1U0b4VAczuufjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:01:16:10:00:f0:6c:fb:04:e0:9e:af:75:42:99:58:1c:40:
         8c:93:9b:db:f1:aa:ab:78:22:9f:20:de:f6:e9:50:b8:cc:4c:
         0a:92:22:d3:2d:05:4f:b5:88:6c:f8:f0:ab:88:68:f8:bb:fb:
         95:ab:ee:ae:a7:94:40:4a:fe:49:9d:25:bc:0c:5c:72:7a:2d:
         a1:24:1b:17:d8:79:9d:93:cc:5a:c1:b8:15:84:14:5f:db:b7:
         34:ec:b0:91:cd:c8:a0:f6:39:4f:99:6b:78:de:d2:28:42:8c:
         2c:25:bb:39:77:76:64:40:2f:e5:54:fa:67:3f:5a:40:fe:88:
         21:aa:9e:80:7f:07:34:2d:26:a9:5e:da:e9:62:71:25:67:6a:
         2e:b6:51:f8:f7:50:78:93:6b:99:6f:1c:33:18:d3:94:75:c9:
         a0:70:a8:c1:5f:49:21:b6:34:cb:47:ca:5a:af:08:d9:bb:55:
         d6:9a:38:68:5a:33:2a:d4:23:b8:13:eb:5d:2e:81:70:96:14:
         7f:a6:91:ea:44:2b:b6:25:5a:2c:8c:e9:17:50:4f:37:87:85:
         40:bd:39:94:84:8e:85:4c:8e:5a:95:11:06:97:8f:ae:a4:3f:
         17:0a:86:09:98:e8:80:ce:47:42:fe:25:e3:3e:ac:bf:ee:86:
         df:cc:20:67
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAwMzAx
MTIwMFoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNjVBNEUzOTdDQzI4RkI3
QUMxQUI1NTM0NkY4NTQwNzMzQkFFN0UzNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKFsGTUYGSgkKYBX4pVY4AmDUQeIOFpjzrCUP1ub372uhUvTafed
R61FVU2LFIViNJb8Yz5RuyAzknwsFWpNPTcXex8EEwrNDc8tXAbra6fXpEmsJFyi
rHyuQGIqeaMt6k9qdx+MVgzmna7suVIlgoMAKoA7MBzESH0kInpHlfMEsV7fbKU4
6pDgFo1WY+NT68CJJGY2lRcjPvlMvgiP4wWvJAU7gGS9KhrA8Oin/Ft8OZ/Wh4iP
161DmL2XKaDOMwb/dAISdXBKuFMxq4LZQ3+DCew+gjV+ciPKt3SpDImwmbK+kG6A
l4ZfmSilcMPLCGK1qeufHMu9sa9gZG+oC5ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRlpOOXzCj7esGrVTRvhUBzO65+NTAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvWmFUamw4d28tM3JCcTFVMGI0VkFjenV1ZmpVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsorRDANBgkqhkiG9w0BAQsFAAOCAQEARgEWEADwbPsE4J6vdUKZWBxAjJOb
2/Gqq3ginyDe9ulQuMxMCpIi0y0FT7WIbPjwq4ho+Lv7lavurqeUQEr+SZ0lvAxc
cnotoSQbF9h5nZPMWsG4FYQUX9u3NOywkc3IoPY5T5lreN7SKEKMLCW7OXd2ZEAv
5VT6Zz9aQP6IIaqegH8HNC0mqV7a6WJxJWdqLrZR+PdQeJNrmW8cMxjTlHXJoHCo
wV9JIbY0y0fKWq8I2btV1po4aFozKtQjuBPrXS6BcJYUf6aR6kQrtiVaLIzpF1BP
N4eFQL05lISOhUyOWpURBpePrqQ/FwqGCZjogM5HQv4l4z6sv+6G38wgZw==
-----END CERTIFICATE-----
Generated at Fri Sep 1 01:50:12 2023 by rpki-client on console-ams.rpki-client.org