Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ojX1JBr4IuVNRzlqqKDMYTYh97E.roa
File:                     ojX1JBr4IuVNRzlqqKDMYTYh97E.roa (raw, json)
Hash identifier:          sg2jlLbKszoIytvxVdbBLD+SyRKU2kKqkyYw4ev9jPY=
Subject key identifier:   A2:35:F5:24:1A:F8:22:E5:4D:47:39:6A:A8:A0:CC:61:36:21:F7:B1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       38
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ojX1JBr4IuVNRzlqqKDMYTYh97E.roa
Signing time:             Mon 17 Oct 2022 01:17:36 +0000
ROA not before:           Mon 17 Oct 2022 01:17:36 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     7686
IP address blocks:        210.228.0.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:17:36 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=A235F5241AF822E54D47396AA8A0CC613621F7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:d9:b9:3f:16:7f:a0:cb:70:34:d2:e0:dd:
                    cd:33:ed:ad:25:fa:cc:34:33:c8:3a:29:e3:d8:b9:
                    ee:90:40:ef:b1:15:fb:eb:77:10:ec:82:e5:39:61:
                    ce:12:3f:30:d3:42:44:19:03:1f:a1:cc:fe:9c:e8:
                    49:ed:6b:c4:82:cf:f2:f2:44:f9:78:0b:cf:4e:d6:
                    ca:e0:64:1e:28:cd:bd:06:63:da:ed:9e:79:cd:83:
                    41:49:9d:c9:d3:65:56:13:26:7c:d6:9b:de:27:20:
                    bf:3b:e4:5d:d3:a9:df:c2:e4:eb:f9:ba:c1:d9:13:
                    ac:f1:0c:c6:5e:31:02:b2:66:86:15:67:5d:9f:1b:
                    0b:02:6a:30:ba:c6:3d:f8:19:73:54:d1:9a:70:6d:
                    ad:9b:c5:d1:23:d3:7e:9b:4f:f9:e0:5c:03:e9:a9:
                    61:b1:23:c6:61:eb:f0:a6:5c:89:21:37:ff:b3:00:
                    19:0f:83:26:b3:af:59:fa:ea:fe:7e:93:e7:06:20:
                    50:74:ac:0b:e1:c1:43:9b:3c:35:e7:8b:0d:c6:62:
                    69:a0:77:96:1c:43:f2:2f:52:d7:38:6e:4b:81:bf:
                    58:6c:f6:06:21:7a:18:89:32:5a:a7:ca:e8:09:6f:
                    cc:81:25:ca:0d:b6:49:a4:4e:db:3b:4c:c6:c7:07:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:35:F5:24:1A:F8:22:E5:4D:47:39:6A:A8:A0:CC:61:36:21:F7:B1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ojX1JBr4IuVNRzlqqKDMYTYh97E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cc:75:3b:b2:66:ac:50:b5:cb:7e:9c:9c:32:18:29:80:85:38:
         95:2c:0b:85:92:28:ab:1a:6d:8d:6c:f8:1d:cb:43:16:fe:c7:
         c4:ef:7a:68:92:70:3d:40:4b:96:bd:40:46:66:98:a7:b4:05:
         82:c1:ca:72:b9:c2:5b:2f:c6:9d:f7:5e:54:3b:1c:51:38:e1:
         8b:c0:cf:47:4d:ce:f0:69:94:c2:66:6a:87:0b:7f:05:fa:79:
         b8:74:08:64:2b:8c:07:2d:bc:3b:8e:f1:a8:36:57:0a:3e:0d:
         0d:35:5b:d9:5c:49:f5:75:33:aa:75:9c:c2:d9:0d:b1:e6:06:
         9e:2f:15:56:0f:d3:da:53:33:50:5d:0f:60:fa:7d:08:eb:71:
         df:97:75:2a:80:2f:47:fd:a8:43:e8:06:be:de:ce:18:7a:60:
         03:0d:bb:42:d5:9f:86:f2:e2:80:ef:4f:61:c9:b2:26:e9:0a:
         a0:67:1f:e3:8c:77:d7:b5:9e:55:91:b8:63:85:d0:1e:79:3c:
         e0:78:59:a6:e3:b9:d6:3e:6d:4a:0e:d5:e7:57:7c:4c:e0:b5:
         57:df:ae:24:27:26:21:95:7a:56:8c:84:3e:91:ed:94:e0:ff:
         7f:a6:62:1a:8b:2d:d3:90:84:3d:fa:7e:69:1a:a7:f7:4c:29:
         49:cd:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org