Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cVSfkXBx8ak6bJvV96V96Jh7QCo.roa
File:                     cVSfkXBx8ak6bJvV96V96Jh7QCo.roa (raw, json)
Hash identifier:          6pklE+2GqU9kWNNuGpZ0PD08Oi00Vs/0bl58aSabF9Y=
Subject key identifier:   71:54:9F:91:70:71:F1:A9:3A:6C:9B:D5:F7:A5:7D:E8:98:7B:40:2A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       5B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cVSfkXBx8ak6bJvV96V96Jh7QCo.roa
Signing time:             Mon 17 Oct 2022 02:13:39 +0000
ROA not before:           Mon 17 Oct 2022 02:13:39 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        27.126.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:13:39 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=71549F917071F1A93A6C9BD5F7A57DE8987B402A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:9f:f8:3b:fb:7c:b0:3c:7d:06:c3:46:d4:
                    6d:7e:a0:a0:94:16:48:0f:da:c0:03:ae:0a:33:2c:
                    34:9d:fa:c0:14:f4:0b:5b:93:cf:fa:97:bc:df:b8:
                    48:48:66:21:fc:a7:e7:8d:b4:b9:a7:f8:47:32:b1:
                    0c:4c:e7:12:62:4b:a9:a7:93:c7:48:07:11:96:42:
                    9d:46:47:4c:ca:6d:82:64:9b:db:96:dc:55:11:b2:
                    c5:49:14:11:2f:7c:ef:01:fd:8b:a5:a0:3c:21:3e:
                    37:d1:30:c5:7c:54:33:06:68:ee:1f:87:48:22:1d:
                    fd:ca:14:d3:58:b2:52:8d:7a:a9:f5:72:56:8c:2a:
                    83:53:ca:b6:28:fc:90:d2:96:f3:f0:c0:0e:ea:51:
                    58:de:db:cf:13:1c:3b:87:92:83:44:be:83:aa:95:
                    57:37:06:db:12:2e:66:6e:7c:ba:61:73:9d:fa:95:
                    7d:15:a9:f2:39:db:6d:21:70:f2:2a:5e:a6:ee:bc:
                    8c:c7:40:e4:e0:11:7c:a0:36:2b:de:f0:94:06:44:
                    85:4d:43:8e:97:6b:5d:fd:bb:9c:70:b8:d4:ea:29:
                    12:7b:9f:11:2e:dc:6d:74:40:83:e4:76:11:ff:b1:
                    67:1e:53:f4:6a:35:98:dd:94:c0:77:77:5f:04:ca:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:9F:91:70:71:F1:A9:3A:6C:9B:D5:F7:A5:7D:E8:98:7B:40:2A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cVSfkXBx8ak6bJvV96V96Jh7QCo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:5f:18:b3:68:68:c6:d8:70:55:65:60:8a:16:62:ef:dd:8c:
         2f:52:ab:7b:b4:0e:31:3e:4b:6d:2b:3b:cc:c8:3c:79:9a:a5:
         52:be:c9:14:ae:bd:50:88:83:77:28:f3:a0:0b:af:a6:37:51:
         00:ac:ea:4f:97:69:cf:59:26:d3:79:96:d4:c4:09:8b:c6:91:
         f1:fb:f2:3d:21:b5:1a:e8:35:f1:8a:08:70:63:24:cc:cd:2f:
         77:4c:7f:44:0b:3b:eb:f7:13:cf:26:2c:85:fa:52:9a:46:98:
         95:86:cb:2a:05:19:62:6e:ce:fb:9a:68:d0:51:7f:bf:94:e3:
         4a:94:cd:37:ef:4d:a9:38:74:65:6f:5a:af:62:9e:ff:c0:e4:
         65:06:bc:5e:50:cb:d3:c4:84:5a:e9:61:91:c4:fd:bc:95:f8:
         a7:07:37:7f:eb:46:82:6f:5f:9e:41:97:2a:83:42:44:19:44:
         da:04:1f:c2:d8:31:5a:3a:e0:16:08:01:e4:fe:6a:8a:dd:27:
         17:76:da:e1:c6:db:40:bd:1e:40:ee:f5:c0:b9:7a:1b:77:b7:
         14:f5:f2:f4:f9:dd:ca:a3:dd:ad:d2:39:46:b5:a4:79:ae:5d:
         5f:9b:d9:32:0d:28:a8:fa:99:ae:db:8c:bd:67:b4:84:54:17:
         22:7b:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org