Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/g45UCesxJEj9XW4kGUG5yyYSYpk.roa
File:                     g45UCesxJEj9XW4kGUG5yyYSYpk.roa (raw, json)
Hash identifier:          mrn29yClEyDkFoLdXUSor7LLZAwLDZqdlo+0wUCvUzc=
Subject key identifier:   83:8E:54:09:EB:31:24:48:FD:5D:6E:24:19:41:B9:CB:26:12:62:99
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       DD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/g45UCesxJEj9XW4kGUG5yyYSYpk.roa
Signing time:             Mon 31 Oct 2022 02:06:06 +0000
ROA not before:           Mon 31 Oct 2022 02:06:06 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        211.124.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:06:06 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=838E5409EB312448FD5D6E241941B9CB26126299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:e9:0e:b8:0f:18:97:24:c6:51:45:5e:96:
                    79:72:27:b4:b7:a9:d0:92:68:01:9c:a6:c0:01:06:
                    c8:18:dc:30:ca:16:d2:7b:1d:66:27:ba:7a:a8:b3:
                    06:c8:c0:e8:1d:1e:ba:6b:81:5e:7a:48:10:42:88:
                    6c:a0:95:19:07:bd:29:46:b5:50:60:9c:a6:41:58:
                    5e:da:0a:8d:86:0c:99:33:c6:5c:15:e4:b1:b8:5b:
                    50:52:81:d7:e4:c0:31:60:71:85:52:c6:57:87:6a:
                    47:1a:e8:aa:db:a5:81:d8:13:0d:05:31:80:0f:45:
                    6a:10:3c:36:79:3e:8f:2d:82:77:25:d4:bb:bc:a4:
                    93:a9:32:95:57:2f:cc:c1:28:37:e0:10:de:68:0d:
                    43:17:fb:f8:ae:bc:a2:55:78:f2:d4:66:8a:56:1c:
                    01:8f:a6:ba:86:3f:6b:2a:6f:79:d5:b3:0e:0f:0f:
                    8a:34:ed:74:ca:99:27:93:5e:d4:ba:a5:a4:0a:d8:
                    f8:92:8d:af:3c:90:9b:96:58:1c:8d:45:1e:78:84:
                    0a:7a:d0:5d:68:e2:fc:1d:af:17:f9:5d:f4:d3:ee:
                    0c:98:27:59:6c:95:cd:2f:d2:99:04:cb:ec:70:6f:
                    8f:1d:17:38:aa:a5:6f:09:c9:21:7a:07:1c:c9:78:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8E:54:09:EB:31:24:48:FD:5D:6E:24:19:41:B9:CB:26:12:62:99
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/g45UCesxJEj9XW4kGUG5yyYSYpk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:91:c3:a5:0c:57:79:d5:1e:c8:bc:73:19:56:b0:79:75:49:
         c7:b8:90:13:0e:b6:67:75:59:45:d3:f4:80:b0:a3:8b:0c:8a:
         ac:e1:fd:6f:c7:c2:0f:4e:bd:21:43:64:ba:cc:54:24:b7:f6:
         cd:c7:48:57:3c:d8:66:07:fe:ff:d9:12:57:55:50:e3:12:58:
         53:c9:5f:6e:d3:61:df:d9:50:ed:8a:ea:82:ae:80:38:4a:f1:
         2b:89:18:da:7b:8f:3d:42:f7:23:ff:68:a3:68:bd:fc:fa:af:
         2c:b8:5f:f7:89:91:c2:6e:b3:24:90:04:d0:db:65:6e:a7:c9:
         1b:d2:f6:68:d3:18:fb:0c:d0:37:57:45:c4:18:2a:91:aa:11:
         18:68:fc:63:71:84:a3:16:92:ce:e6:b2:14:84:50:57:52:52:
         26:59:f9:f3:2a:fb:df:36:0a:a3:05:58:23:90:60:91:5f:12:
         3c:11:43:f5:15:17:92:a1:1c:85:83:3c:c7:b7:64:17:fa:36:
         88:53:03:15:88:97:bf:fa:30:88:7f:1f:2d:97:b6:f3:33:fe:
         76:a2:e4:1c:70:8d:df:9b:b1:d3:3d:b7:a2:3a:90:45:cf:81:
         63:b7:ac:e3:02:e9:2c:2e:b9:b8:d4:cd:43:83:31:ee:3a:6e:
         88:9b:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org