Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/oQUoc_pOjUU9G24WQGoeP9VJct4.roa
File:                     oQUoc_pOjUU9G24WQGoeP9VJct4.roa (raw, json)
Hash identifier:          DnQ+W96n5XNSJxGq3W1ks5/sk2y8ezG5jaXF11dCyqo=
Subject key identifier:   A1:05:28:73:FA:4E:8D:45:3D:1B:6E:16:40:6A:1E:3F:D5:49:72:DE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       96
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/oQUoc_pOjUU9G24WQGoeP9VJct4.roa
Signing time:             Mon 24 Oct 2022 02:58:33 +0000
ROA not before:           Mon 24 Oct 2022 02:58:33 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        115.42.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:58:33 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=A1052873FA4E8D453D1B6E16406A1E3FD54972DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:9b:91:69:12:4e:8c:60:f9:47:39:05:46:
                    c4:b2:ca:38:ac:ce:97:51:10:b6:1f:0e:45:2b:06:
                    3a:19:0a:9c:9a:89:cb:9b:ba:d2:f4:bb:ed:b1:95:
                    cf:89:11:3e:19:37:6a:9a:8b:5c:e7:3b:a9:7a:52:
                    dd:5f:f0:14:6e:ab:22:3b:6d:c6:01:9a:4d:3d:55:
                    25:89:1c:1a:3c:f6:df:d7:a9:91:7c:7e:36:05:af:
                    8f:00:da:e7:89:49:6d:fd:3f:0e:0e:78:b5:eb:74:
                    5e:94:51:a4:a4:ad:43:a1:94:b1:5e:4e:d4:c8:8a:
                    62:1e:05:df:b7:90:c6:02:f2:fd:67:34:aa:5c:17:
                    8c:29:7c:e9:e5:7f:68:86:13:4f:36:ef:d3:44:d7:
                    fb:0c:89:19:b5:d2:23:0b:eb:cf:e0:d5:5e:38:b8:
                    5e:8e:c9:4c:74:85:c1:09:83:00:d5:d9:70:85:c6:
                    3e:43:bd:f1:a3:12:3f:38:d9:99:b4:b0:79:f3:4c:
                    37:5b:3e:4a:eb:e2:bd:06:0d:a9:5c:b6:91:66:16:
                    29:6e:1d:87:75:67:d2:fb:a6:34:a8:1d:0b:d1:cc:
                    c4:42:75:f0:3a:a0:ce:13:eb:62:3c:ec:50:0e:4a:
                    8f:ee:c6:97:3e:2c:8e:d3:cb:62:30:ef:84:04:1c:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:28:73:FA:4E:8D:45:3D:1B:6E:16:40:6A:1E:3F:D5:49:72:DE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/oQUoc_pOjUU9G24WQGoeP9VJct4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:b8:32:48:53:fb:b1:2c:62:24:f9:2e:4a:81:ed:f0:26:
         fe:7b:7a:2a:61:07:70:20:96:ce:60:27:76:10:73:eb:25:36:
         0a:a5:8f:48:7d:ef:b7:76:0d:11:75:7a:0d:8b:08:57:ee:57:
         95:02:e6:04:d5:8f:d5:21:ac:2b:8f:69:c8:37:52:54:5a:e1:
         3c:64:e2:ae:c1:0c:75:0b:cb:70:38:dc:71:9b:a7:30:f9:bb:
         dd:c1:f1:b0:be:41:d8:25:bf:b7:f1:1c:e1:ba:fd:63:4d:db:
         37:d0:2e:9a:54:f4:0c:a2:52:1d:cc:65:6e:e8:6e:b6:35:a0:
         fc:39:3f:fa:70:c8:8a:06:a1:0d:92:6a:32:8b:88:2b:75:be:
         b7:31:27:7e:ea:73:d5:60:86:4a:3d:32:a2:fa:49:08:8f:19:
         2e:58:45:cf:8e:4d:bb:97:7e:37:0d:cb:dd:df:ad:15:c3:fa:
         85:ba:ae:ed:4a:2d:af:7b:44:73:ea:bc:27:d3:e4:f2:98:9c:
         b7:2d:36:69:b3:ca:5c:84:0d:66:1b:3b:0d:c1:13:88:46:be:
         44:36:42:ea:84:a4:a4:4a:f1:7a:15:f0:4f:aa:2f:73:1b:63:
         31:58:e0:1e:7d:7e:db:60:b9:46:de:48:8e:6f:eb:6b:55:1b:
         1e:be:b5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org