Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/lS11edqcQLbl2dwbuRBUT7IiSnU.roa
File:                     lS11edqcQLbl2dwbuRBUT7IiSnU.roa (raw, json)
Hash identifier:          Rf0fEuRqbsiMe8Ye+tiA/GbqhKrdoc90Bl4iy0jzWbU=
Subject key identifier:   95:2D:75:79:DA:9C:40:B6:E5:D9:DC:1B:B9:10:54:4F:B2:22:4A:75
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       5D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lS11edqcQLbl2dwbuRBUT7IiSnU.roa
Signing time:             Mon 17 Oct 2022 02:15:50 +0000
ROA not before:           Mon 17 Oct 2022 02:15:50 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     18136
IP address blocks:        117.53.32.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:15:50 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=952D7579DA9C40B6E5D9DC1BB910544FB2224A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:86:42:ac:56:e5:aa:c0:fb:1a:4a:71:5a:
                    3b:0b:99:f1:02:6e:f0:49:30:5e:be:e8:45:e4:d0:
                    25:8e:c1:30:a0:74:da:30:e7:c6:21:35:cd:af:94:
                    a7:51:c7:71:8c:92:5e:c6:c8:06:34:cf:1a:7c:e0:
                    9a:d2:96:f4:53:c5:fa:7f:f1:13:63:30:61:c6:41:
                    93:a9:d7:68:3a:35:0e:c9:7b:5b:e7:e6:02:b7:c5:
                    6c:cd:55:1c:c3:ae:b6:91:52:e5:56:6d:41:9f:e2:
                    85:c9:db:a0:86:ac:0e:6f:2b:cc:08:f1:01:4b:a8:
                    ca:d0:f7:c5:80:6f:27:e5:84:de:47:97:15:11:b9:
                    34:8b:d2:61:7c:32:72:9d:4a:83:0a:da:24:4d:2e:
                    28:8d:b9:50:7e:af:96:47:73:02:2b:86:bf:07:cf:
                    f3:98:f4:d9:a7:06:1f:1b:58:d9:de:60:b2:91:a9:
                    11:c8:66:c9:4a:c6:ba:26:45:3a:62:fc:8d:55:24:
                    ca:7c:db:5f:1f:93:aa:cc:ed:7a:63:31:f1:1c:99:
                    2f:11:66:5f:5a:67:39:8e:ad:54:05:7f:b8:c7:86:
                    3d:f1:85:55:f3:92:47:ce:62:b8:7f:62:a1:1f:a4:
                    54:7a:18:ab:a5:b4:96:79:7e:5e:af:72:6f:0f:25:
                    c1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2D:75:79:DA:9C:40:B6:E5:D9:DC:1B:B9:10:54:4F:B2:22:4A:75
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lS11edqcQLbl2dwbuRBUT7IiSnU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.53.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:00:e6:8d:6c:93:96:da:d7:f5:89:f9:a1:cf:0e:61:30:
         d7:b7:21:86:80:5a:34:af:14:97:c6:84:fc:a1:31:42:27:45:
         ab:24:f6:b8:e1:7d:d1:eb:b0:f4:38:bf:98:d1:bd:4c:01:81:
         81:ff:79:b7:60:86:f4:2f:48:c0:81:6d:24:44:10:44:9c:18:
         7a:62:44:00:95:39:dd:4b:0b:7e:ae:bb:ed:9a:de:53:4d:1d:
         ff:1d:83:11:03:1a:07:71:f8:f9:ce:24:ce:7b:a7:39:5e:4d:
         0d:e2:fb:ad:42:c4:97:98:21:3f:76:13:11:4f:27:ec:fc:d9:
         b5:38:e5:02:0a:3f:11:b7:88:0f:ba:d5:bb:fb:53:84:f1:e4:
         5d:39:61:8b:a0:92:4d:98:b7:a8:26:c4:12:e1:85:5d:18:ab:
         cb:da:f7:b9:f5:46:1c:42:7c:64:ca:04:c5:25:3f:7b:a6:3f:
         70:bb:af:d6:de:71:bd:62:be:7a:c5:81:78:d0:d9:1d:49:8f:
         6a:df:41:0e:91:b8:76:1d:2d:de:1e:ad:6f:1b:c5:d1:ef:c0:
         0e:8e:2e:5e:52:56:f5:5b:9e:59:5a:d9:3c:5f:35:da:65:6b:
         64:c8:52:e0:4d:42:d2:95:64:48:2a:37:1e:dc:81:c0:a1:b9:
         a5:2e:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org