Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/k6cyth7gjZXDqY4e0GmE9xV6vHw.roa
File:                     k6cyth7gjZXDqY4e0GmE9xV6vHw.roa (raw, json)
Hash identifier:          n0Lg7cdnDc/FBB6u12IiSKBXSig9TDSd/2v737n5C7I=
Subject key identifier:   93:A7:32:B6:1E:E0:8D:95:C3:A9:8E:1E:D0:69:84:F7:15:7A:BC:7C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       6B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/k6cyth7gjZXDqY4e0GmE9xV6vHw.roa
Signing time:             Mon 17 Oct 2022 02:35:53 +0000
ROA not before:           Mon 17 Oct 2022 02:35:53 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        202.148.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:35:53 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=93A732B61EE08D95C3A98E1ED06984F7157ABC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:dd:97:c5:75:13:15:87:9a:95:02:0d:e6:
                    ee:6c:27:b7:98:0d:a5:93:c8:ba:bb:85:62:30:e0:
                    48:ec:6c:2d:c1:50:97:bd:52:56:e9:50:f7:e0:6e:
                    e2:97:7b:85:aa:5c:d0:9e:ae:9a:10:79:0f:8d:db:
                    55:1b:60:57:2c:5d:72:1e:74:3a:4f:7b:bc:9d:c9:
                    0f:04:3e:85:38:44:83:16:b8:20:48:c8:84:12:91:
                    14:24:4d:74:80:65:61:1f:fa:2d:e8:3b:24:5e:8e:
                    08:25:c9:4a:6f:c1:bc:b5:07:38:66:70:b2:88:1c:
                    0c:d7:34:cc:1e:9c:49:6e:fe:22:f4:5b:47:3e:4f:
                    94:8d:92:5c:cb:ad:2c:b9:64:b6:ed:fe:8f:b1:2d:
                    fb:3b:75:48:1d:1e:61:73:14:ce:0f:14:c5:39:ee:
                    57:7e:46:3d:62:3b:ed:38:1c:77:89:b8:c2:93:ff:
                    20:e6:5b:7b:d6:93:3a:34:27:fb:11:a5:c8:89:9c:
                    fa:84:6d:56:72:02:31:f3:4b:2c:8a:b0:e5:eb:20:
                    36:6a:04:be:28:88:89:9f:e6:22:af:fe:8e:a8:94:
                    b4:b0:92:bb:d9:e4:d6:17:a4:a5:f9:93:b3:d4:cb:
                    70:b1:f3:a4:25:08:79:a8:90:54:c7:a5:a5:a3:18:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:32:B6:1E:E0:8D:95:C3:A9:8E:1E:D0:69:84:F7:15:7A:BC:7C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/k6cyth7gjZXDqY4e0GmE9xV6vHw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:bd:83:d6:fe:84:9e:d9:8c:a3:36:1f:d3:e7:0d:5b:8a:
         a3:18:37:d0:5f:2d:5c:4d:8c:7e:4e:b4:c3:b2:56:60:63:fb:
         42:97:45:9b:10:96:8b:55:b1:b6:dc:37:f6:df:08:83:ee:ca:
         48:e2:ca:b7:ae:98:af:ff:b0:3b:43:e8:9b:49:8b:bc:63:56:
         d0:8a:99:bf:0e:5c:9e:7c:26:06:7d:4a:b4:f6:82:0d:29:c8:
         c8:94:39:42:45:39:a2:9b:08:10:3d:cb:d2:71:cd:c1:d0:c3:
         64:96:1e:43:2e:10:fb:33:8e:33:52:fa:3b:1c:9d:7e:75:c3:
         79:ef:1f:10:02:06:59:fc:61:b9:06:a1:90:d2:2b:e9:e2:48:
         5d:d5:98:db:60:0e:f4:3d:eb:8e:0c:02:a5:21:4a:ce:9b:e1:
         bc:87:da:00:2c:ab:8c:ca:e4:4c:e4:f6:b2:d2:80:12:ea:ac:
         4a:87:a4:b2:93:86:71:0a:10:e3:4f:f2:8b:da:60:a7:a1:30:
         ca:0b:39:7d:f1:de:5d:4f:d2:b6:ca:fb:f0:d8:3f:61:70:9c:
         bd:49:83:6d:61:94:6c:c6:cd:21:c8:91:fa:9b:53:79:0d:f1:
         1b:e7:ac:45:e5:ce:16:ca:b5:ab:7c:3d:da:d1:18:30:5c:3a:
         36:7a:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org