Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/d6C-1L4CUOzgXdo_HnwKZO3wFMc.roa
File:                     d6C-1L4CUOzgXdo_HnwKZO3wFMc.roa (raw, json)
Hash identifier:          Gf0DcvzbLl+m77o+2BdB2EcyDBRIKnEUb46fzhxUV5s=
Subject key identifier:   77:A0:BE:D4:BE:02:50:EC:E0:5D:DA:3F:1E:7C:0A:64:ED:F0:14:C7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       E5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/d6C-1L4CUOzgXdo_HnwKZO3wFMc.roa
Signing time:             Mon 31 Oct 2022 02:16:09 +0000
ROA not before:           Mon 31 Oct 2022 02:16:09 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        219.114.192.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:16:09 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=77A0BED4BE0250ECE05DDA3F1E7C0A64EDF014C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:81:f5:be:74:57:d2:a5:38:1c:bb:4e:ba:
                    9b:6f:3c:41:78:df:62:18:e4:f7:c1:9f:7a:09:4b:
                    3e:e7:8d:a4:bd:b6:0c:7c:a2:3f:c5:13:87:e4:96:
                    6d:38:1c:5a:72:d1:d8:db:62:5a:42:9a:a9:57:dc:
                    df:16:f5:6d:c9:46:c3:7e:86:7f:55:2d:19:5c:a3:
                    b4:e2:bf:43:8c:16:97:ce:01:9e:80:df:f6:f8:06:
                    6e:1b:e7:4f:48:0a:05:75:83:e3:9c:9a:b9:09:98:
                    d8:fb:af:fe:3a:9b:2d:f6:8b:d3:c2:44:6e:e0:31:
                    e9:f3:a6:2b:ed:1e:f7:84:45:b3:a8:1d:e5:4a:86:
                    d2:04:56:f2:83:39:e9:04:68:c4:48:61:8b:e5:ff:
                    1c:d0:49:77:89:69:78:da:d3:45:2e:3f:6c:84:14:
                    36:de:a2:9b:c9:b7:ab:49:35:0f:59:6c:a3:a5:9f:
                    61:0e:19:b6:45:8d:fc:02:06:21:13:54:e7:66:8a:
                    85:eb:48:9a:6d:df:86:6a:f0:39:d8:09:6c:5d:56:
                    ee:d6:45:19:ce:db:f9:05:96:30:80:99:8e:af:e2:
                    74:c1:8a:ac:aa:07:21:86:97:38:93:d6:45:e4:e7:
                    60:b3:9d:05:4f:fc:04:4a:d6:c0:f4:85:73:2d:71:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A0:BE:D4:BE:02:50:EC:E0:5D:DA:3F:1E:7C:0A:64:ED:F0:14:C7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/d6C-1L4CUOzgXdo_HnwKZO3wFMc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:81:fe:f0:e6:70:4c:25:18:1f:ff:32:10:12:2a:18:14:
         03:a2:60:22:29:1f:b7:06:02:bc:73:19:cb:d9:37:96:77:46:
         68:d7:6d:66:a3:18:f7:6d:59:3e:55:08:a0:42:e1:71:77:7e:
         77:e8:1f:08:cc:79:f1:de:bc:d3:77:99:ca:45:4c:01:61:54:
         d4:ab:b5:f2:f1:0c:d6:96:9a:96:30:c9:dd:3a:54:6a:c1:56:
         b1:a9:28:77:84:cd:b8:02:d1:3f:84:8c:36:6c:75:88:b9:65:
         92:6c:c8:fa:18:69:4d:3c:80:33:28:57:06:a2:ff:80:fc:fd:
         5b:6c:70:e3:ee:16:c5:41:54:08:46:52:7c:f0:ac:4a:f6:fb:
         51:9b:b2:e6:d3:73:7f:53:e0:b5:f7:b2:2f:3d:e3:b5:38:b7:
         be:b0:a2:0e:4c:36:68:b8:46:73:ef:86:ca:b6:c8:b2:4a:45:
         2a:d6:35:21:3d:18:c8:0a:f4:80:08:3f:76:6c:c8:f0:a0:af:
         83:ba:1f:92:ea:e9:d3:17:48:5e:ff:08:9c:40:05:31:c0:5a:
         bc:71:83:5e:9e:85:b4:a2:94:6a:6a:54:e8:ef:8f:6d:c3:a9:
         d2:e3:22:6b:95:9e:4b:1e:c3:8c:22:06:f8:b0:86:57:fe:64:
         3f:b3:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org