Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_xhIGrGJRcSvH1vSZWX4gmV33Nk.roa
File:                     _xhIGrGJRcSvH1vSZWX4gmV33Nk.roa (raw, json)
Hash identifier:          hTe9PohZ8Y0jpkXVgAxMP3RmqPwwv22hh1tZpviDoP4=
Subject key identifier:   FF:18:48:1A:B1:89:45:C4:AF:1F:5B:D2:65:65:F8:82:65:77:DC:D9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       2E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_xhIGrGJRcSvH1vSZWX4gmV33Nk.roa
Signing time:             Tue 11 Oct 2022 01:50:08 +0000
ROA not before:           Tue 11 Oct 2022 01:50:08 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        219.100.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:50:08 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=FF18481AB18945C4AF1F5BD26565F8826577DCD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:04:c1:ae:33:28:74:35:d2:04:9f:a1:cd:
                    b8:33:ca:66:1b:28:92:83:f8:b3:3d:82:8a:7e:1a:
                    ef:69:53:95:47:b0:2c:1f:73:96:d5:6f:8c:b5:15:
                    98:e6:20:98:0e:b3:4a:43:61:26:2f:6c:e3:f0:2c:
                    9b:24:d4:54:bc:28:4e:5b:71:43:d7:76:9c:63:64:
                    6c:56:16:1d:8b:40:ab:29:5d:3b:0b:90:35:a1:7b:
                    9d:52:fe:f9:ec:ec:94:d9:eb:c1:9b:18:e0:08:ce:
                    88:3c:91:3d:85:4e:98:13:0d:84:3d:f8:c0:01:8e:
                    b2:98:7a:b4:09:ab:cc:07:3a:83:bc:09:2d:c9:d4:
                    25:fd:0d:4b:73:83:83:7c:9a:0a:b2:7b:50:54:1d:
                    a0:26:d9:68:ea:f5:56:dd:d0:0c:88:f6:df:36:9a:
                    b3:71:df:bb:de:a3:e1:b2:74:af:0c:86:29:54:58:
                    a1:5b:d2:bc:28:95:4d:2c:f3:36:ee:f1:44:af:64:
                    41:be:e1:2b:0d:d3:3f:01:26:03:f4:40:55:fd:9d:
                    fc:60:0b:66:99:96:e0:3b:8c:ad:08:76:65:4d:f2:
                    1d:a9:88:7c:f8:9d:4d:db:66:44:19:dd:22:c2:41:
                    99:77:d6:ff:2d:e5:79:1c:b4:86:4b:12:22:67:e2:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:48:1A:B1:89:45:C4:AF:1F:5B:D2:65:65:F8:82:65:77:DC:D9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_xhIGrGJRcSvH1vSZWX4gmV33Nk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:bb:c3:7e:50:76:5f:d3:60:c9:08:0d:e3:80:57:15:35:
         38:fe:60:18:43:9c:ad:27:ff:4c:3f:f5:c1:be:61:36:f3:15:
         db:2a:5b:57:7d:fa:94:63:f1:68:45:93:e1:5a:62:39:99:ac:
         50:a9:ce:8d:e4:82:40:7f:fe:5e:61:44:06:83:c4:75:92:d7:
         5b:ce:13:18:9b:16:7f:70:c8:e8:ff:a3:8b:a5:48:e6:ae:08:
         e7:99:6e:81:f9:12:d7:26:78:2b:89:80:a5:44:9d:51:62:8c:
         4e:db:bc:4a:60:36:3f:13:1f:94:21:60:0f:2d:b0:e9:13:1c:
         d1:3b:6d:10:07:3f:cf:65:b7:f7:d1:af:69:97:91:56:c8:d5:
         6d:28:2e:58:e3:92:ed:3a:9b:e2:28:d5:80:77:24:d9:01:50:
         e4:47:f4:de:54:49:7c:15:77:9a:24:18:21:da:64:d1:06:2d:
         06:b7:b9:da:ed:0b:1a:14:76:31:ff:e9:b2:8b:fd:e3:e5:6a:
         16:b3:b4:e5:13:40:62:8a:fc:c0:81:d4:d0:9a:c2:1f:26:af:
         db:b7:4b:f7:02:a4:19:a2:1f:19:b5:ef:0f:94:08:6c:5c:4c:
         bf:b4:71:f0:c8:49:9f:2c:4b:82:59:88:ac:30:3d:5f:2a:ae:
         24:a9:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org