Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qrWrG50HEgdUmpI4B9GYeckM5v8.roa
File:                     qrWrG50HEgdUmpI4B9GYeckM5v8.roa (raw, json)
Hash identifier:          AozYGxUl9iOC1VqK+IOHHlvUAHQd2UO3FR4ut8FbMjA=
Subject key identifier:   AA:B5:AB:1B:9D:07:12:07:54:9A:92:38:07:D1:98:79:C9:0C:E6:FF
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       86
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qrWrG50HEgdUmpI4B9GYeckM5v8.roa
Signing time:             Mon 24 Oct 2022 02:34:36 +0000
ROA not before:           Mon 24 Oct 2022 02:34:36 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        110.232.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:34:36 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=AAB5AB1B9D071207549A923807D19879C90CE6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:40:70:6c:57:16:f0:bb:b8:f4:69:ea:be:
                    77:20:9c:7f:a3:92:f6:9d:3e:c5:19:13:e7:88:4c:
                    5c:7b:d7:ad:54:04:51:60:03:2d:ac:c0:5b:d0:7b:
                    fa:4e:3a:76:22:aa:6b:60:ed:f5:80:57:a9:6a:d5:
                    88:4e:04:72:4c:6c:c4:d4:bf:31:a1:ce:28:35:83:
                    78:35:72:8b:2e:87:92:45:12:a1:e7:86:7b:84:9d:
                    0c:60:e2:8b:b0:e2:27:2f:60:80:1c:3e:cf:8c:4f:
                    cf:9b:32:21:f8:c7:c8:d6:a1:49:0d:ef:a8:9c:5b:
                    57:05:d0:dd:85:46:8d:f6:b6:f6:d1:52:7e:f6:5c:
                    33:64:c2:61:97:96:d5:d1:6f:b2:12:dc:6e:7e:fd:
                    69:4a:28:30:4f:2f:fe:df:da:76:f3:0e:8b:b1:fa:
                    70:a3:e4:06:02:49:94:c8:03:34:3e:7e:dc:85:25:
                    66:e1:ac:4b:33:c6:67:1f:99:12:cd:54:5d:ba:58:
                    78:65:7a:35:c0:f4:5d:5b:b2:8d:d8:22:29:e1:ab:
                    9a:cc:f0:69:25:1c:7a:87:52:a3:41:e1:38:8e:68:
                    67:3d:05:7a:0a:84:0f:b8:43:ed:5b:9d:3c:32:3c:
                    6d:13:0b:6a:a0:57:b9:d6:f8:70:59:bb:00:1d:a7:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B5:AB:1B:9D:07:12:07:54:9A:92:38:07:D1:98:79:C9:0C:E6:FF
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qrWrG50HEgdUmpI4B9GYeckM5v8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:2d:a6:40:ab:26:1c:eb:4c:a9:bb:57:ab:7c:b0:13:d0:
         6e:df:fa:dd:35:9a:6a:33:30:19:06:f9:f2:d3:38:5c:ff:3a:
         f9:af:cc:31:b4:23:5b:a6:68:23:9c:51:7c:bf:7c:34:91:da:
         07:a7:ea:30:c4:d1:3f:78:94:4d:d1:0b:7d:b7:f8:1a:b9:49:
         d6:7f:00:e0:13:a3:f6:70:3c:f7:a2:0e:53:33:c5:70:00:74:
         88:34:df:ce:3d:48:d4:5f:b1:66:7d:80:25:fb:72:1a:f2:b1:
         8f:18:e0:0b:db:88:48:09:65:b1:c0:03:25:ab:4d:30:15:6c:
         af:68:cd:e9:78:62:c1:61:71:b5:ee:e0:01:03:16:21:20:e2:
         6a:fe:c7:12:11:5d:90:36:9f:1f:83:bf:f3:c3:4f:f1:13:a3:
         74:5e:44:a6:68:33:81:c7:ef:69:9c:ed:45:5a:63:2b:77:a8:
         0a:6d:08:89:e7:8a:f2:57:25:d0:46:ff:b9:25:aa:8b:89:7c:
         16:a7:df:c9:e0:d9:cf:6b:24:e1:f5:11:cf:64:00:e6:20:58:
         bb:7e:b7:8c:b4:55:3f:aa:f8:4a:c9:03:32:1a:2f:d8:b4:f1:
         07:8f:bd:c5:15:27:9c:af:b1:4f:8c:e4:26:48:33:06:c1:ba:
         45:f4:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org