Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/pviZ_rYXxEbcJ2zsuqjMBesobHk.roa
File:                     pviZ_rYXxEbcJ2zsuqjMBesobHk.roa (raw, json)
Hash identifier:          WBy4jzX3Oq9B72nMcEItnTIYR+nfO2HgNeZdEwFiffw=
Subject key identifier:   A6:F8:99:FE:B6:17:C4:46:DC:27:6C:EC:BA:A8:CC:05:EB:28:6C:79
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       BA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pviZ_rYXxEbcJ2zsuqjMBesobHk.roa
Signing time:             Mon 24 Oct 2022 04:40:56 +0000
ROA not before:           Mon 24 Oct 2022 04:40:56 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        219.113.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:40:56 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=A6F899FEB617C446DC276CECBAA8CC05EB286C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:1e:34:a9:dc:48:63:00:b1:a8:dd:cb:32:
                    2f:95:7b:0a:16:b5:ed:a8:14:ff:ab:bb:3b:51:bc:
                    eb:1a:cf:4e:c5:0f:7a:ec:db:de:5d:d3:09:bb:e1:
                    64:e8:c9:a6:f8:ac:26:d4:40:cf:e7:8e:de:c7:db:
                    6e:27:9b:6f:fd:47:58:22:15:dc:cb:f2:86:9f:88:
                    66:b8:c2:8c:99:1a:9a:6d:b7:d5:99:af:f5:23:db:
                    63:b7:7d:49:a0:88:78:1a:f2:c0:e3:8a:03:35:0c:
                    93:c2:c5:20:ae:07:33:19:60:b1:85:6c:6e:fa:fa:
                    ab:10:d9:f4:6d:81:71:44:db:cd:f7:5a:2e:94:7b:
                    d4:99:e9:a3:e5:12:27:12:a3:4f:76:78:08:a5:51:
                    6c:5b:3f:6e:4e:94:6d:e6:a5:93:45:9a:09:2c:8a:
                    31:3f:a7:c6:3b:5d:54:e0:69:21:ff:d0:29:0d:5b:
                    2c:ef:61:ac:9b:28:08:8b:9a:b4:9b:67:89:ed:2f:
                    48:35:a9:d9:fa:de:c6:7f:f3:fc:5f:06:3a:61:95:
                    49:b5:fd:3b:cb:83:0b:2b:2a:37:49:aa:8b:28:7f:
                    2d:65:37:09:f0:4b:0c:3a:f6:8a:d9:3a:36:2b:8a:
                    9f:76:f3:68:d7:b7:a2:13:cd:7d:c8:4d:c4:f3:44:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:99:FE:B6:17:C4:46:DC:27:6C:EC:BA:A8:CC:05:EB:28:6C:79
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/pviZ_rYXxEbcJ2zsuqjMBesobHk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:a0:35:32:c7:1e:20:c3:44:87:d0:f2:0f:ce:c7:1b:69:
         47:55:90:21:1d:72:66:70:1c:a2:f0:69:68:0d:0f:c7:20:37:
         62:44:bd:0b:ce:62:c9:1f:33:13:c6:50:31:74:1a:97:dc:f3:
         3f:bf:f0:24:ca:d6:3f:21:37:8a:4f:b6:d6:b1:5d:be:a3:07:
         40:9e:29:fa:50:55:4b:bd:df:c0:ca:d3:2d:0b:ca:0d:68:17:
         a9:1c:c4:b8:ba:bd:6f:94:50:10:54:a6:05:f2:62:d6:e2:e3:
         3d:31:5a:11:1b:d3:b8:aa:db:36:cb:c3:f0:1a:52:be:3f:9a:
         94:b4:f1:0f:c5:d1:b3:92:06:a3:fc:c9:a8:76:db:7a:5d:6e:
         4f:7b:32:0d:90:48:f3:09:b5:a8:5f:12:3e:55:00:3c:0a:8f:
         6a:9c:4c:ad:22:1f:df:b6:34:56:23:9f:bb:4f:a7:7a:ca:56:
         69:09:6a:a7:d5:b2:24:8a:0c:05:2c:0e:12:14:7f:77:5b:e8:
         ec:9a:aa:44:aa:7d:eb:e1:78:ef:d7:4e:ad:79:49:4d:fe:c4:
         fd:97:eb:26:02:4b:8a:ae:d9:e3:6b:60:da:c3:49:f1:6d:35:
         80:c3:fe:ef:77:58:9f:78:ea:96:f1:9e:e5:ab:09:f2:24:54:
         5d:b7:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org