Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa
File:                     rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa (raw, json)
Hash identifier:          mIN/mZCAcm8JAuX7D6550V0yfSZ3Eh2Wq/GWXONb/zA=
Subject key identifier:   AF:19:0D:F3:2A:D1:B8:1A:B6:71:39:C8:AF:64:F9:73:23:B5:64:6C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       64
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa
Signing time:             Mon 17 Oct 2022 02:26:07 +0000
ROA not before:           Mon 17 Oct 2022 02:26:07 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23788
IP address blocks:        110.172.0.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:26:07 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=AF190DF32AD1B81AB67139C8AF64F97323B5646C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:1d:75:55:40:7d:0d:35:4d:92:f2:b7:30:
                    7a:08:9a:c7:22:43:d7:1e:b2:f0:89:18:bd:9e:ac:
                    cd:31:b0:cd:93:7c:ff:cd:48:31:cd:25:6d:71:8a:
                    44:a9:e7:67:4f:df:c9:70:c7:14:09:95:e3:df:0b:
                    96:f2:e7:57:06:da:8d:d2:68:4c:24:11:83:60:9c:
                    b1:fa:44:2f:c8:8d:37:ac:63:ad:cd:21:60:7b:f6:
                    1e:07:42:50:b1:16:c5:f0:4b:30:db:23:32:46:48:
                    4b:55:c9:9a:13:30:3b:fc:06:c7:51:15:07:b0:1c:
                    9b:b0:fa:37:8d:51:b3:a5:5c:cc:17:6e:4f:e4:96:
                    85:57:49:21:e1:a9:bf:f0:0b:45:e6:84:04:f3:e1:
                    1e:11:e0:d2:87:ab:a6:86:d1:7a:07:bb:0c:57:e2:
                    9b:73:58:7e:5a:f3:d8:73:a8:16:90:9e:7d:4c:3d:
                    c3:46:9e:77:4a:0c:2b:e6:73:bd:a5:9a:43:90:02:
                    64:88:89:93:15:38:26:a3:21:ce:c5:5f:0d:0f:9a:
                    d5:e0:f4:ee:a0:fe:cc:d7:d5:d3:39:4a:46:a3:9b:
                    0f:b7:9d:54:f9:45:1b:c0:38:0d:87:7d:ba:81:95:
                    9e:2b:24:f2:d1:74:d4:98:8c:0b:74:8d:10:76:7c:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:19:0D:F3:2A:D1:B8:1A:B6:71:39:C8:AF:64:F9:73:23:B5:64:6C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rxkN8yrRuBq2cTnIr2T5cyO1ZGw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:67:02:a2:48:02:02:8e:aa:d7:37:08:bc:bb:4e:a7:b8:c7:
         34:7c:d0:b9:0c:43:d5:a8:af:d0:1c:07:9a:eb:74:89:bb:5a:
         73:6e:66:a8:b9:31:90:6e:d9:d9:b4:39:d5:21:cf:0d:82:2e:
         72:bf:6b:09:c2:07:64:0d:24:26:65:8d:3c:75:ed:fb:fa:7d:
         28:b8:7e:04:5e:ab:57:d1:4d:48:62:4c:9a:57:bf:ea:47:2f:
         8e:cd:57:77:53:5a:99:9d:b0:94:84:f6:8e:5d:03:ee:de:64:
         55:0f:bc:72:ac:f8:e0:90:8c:c4:dc:fd:de:b7:c1:04:f8:9f:
         a2:15:f6:a7:a6:27:15:ac:d9:8d:9e:dc:2a:77:fc:1a:f5:22:
         36:ca:44:a6:dd:3d:2e:8f:1f:5c:55:0c:55:ed:aa:ce:51:3e:
         64:3b:e9:5b:1a:1e:37:08:a5:d7:85:d4:a2:cd:46:0d:99:aa:
         3f:8e:73:a4:13:28:d0:07:dc:f6:bd:95:3d:b5:7a:d4:d8:e6:
         f1:c8:c5:9f:2c:3e:f1:f9:bf:05:af:75:4e:cf:7c:68:07:0e:
         a3:76:ea:7b:36:2a:cf:6d:24:53:6b:2e:bc:e4:de:82:5a:3d:
         9e:36:27:7d:18:c8:93:79:7b:15:60:6c:31:04:dc:ad:2d:48:
         ba:80:9c:af
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAy
MjYwN1oXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQUYxOTBERjMyQUQxQjgx
QUI2NzEzOUM4QUY2NEY5NzMyM0I1NjQ2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANIbHXVVQH0NNU2S8rcwegiaxyJD1x6y8IkYvZ6szTGwzZN8/81I
Mc0lbXGKRKnnZ0/fyXDHFAmV498LlvLnVwbajdJoTCQRg2CcsfpEL8iNN6xjrc0h
YHv2HgdCULEWxfBLMNsjMkZIS1XJmhMwO/wGx1EVB7Acm7D6N41Rs6VczBduT+SW
hVdJIeGpv/ALReaEBPPhHhHg0oerpobRege7DFfim3NYflrz2HOoFpCefUw9w0ae
d0oMK+ZzvaWaQ5ACZIiJkxU4JqMhzsVfDQ+a1eD07qD+zNfV0zlKRqObD7edVPlF
G8A4DYd9uoGVnisk8tF01JiMC3SNEHZ8MEkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSvGQ3zKtG4GrZxOcivZPlzI7VkbDAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvcnhrTjh5clJ1QnEyY1RuSXIyVDVjeU8xWkd3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBG6sADANBgkqhkiG9w0BAQsFAAOCAQEAE2cCokgCAo6q1zcIvLtOp7jHNHzQ
uQxD1aiv0BwHmut0ibtac25mqLkxkG7Z2bQ51SHPDYIucr9rCcIHZA0kJmWNPHXt
+/p9KLh+BF6rV9FNSGJMmle/6kcvjs1Xd1NamZ2wlIT2jl0D7t5kVQ+8cqz44JCM
xNz93rfBBPifohX2p6YnFazZjZ7cKnf8GvUiNspEpt09Lo8fXFUMVe2qzlE+ZDvp
WxoeNwil14XUos1GDZmqP45zpBMo0Afc9r2VPbV61Njm8cjFnyw+8fm/Ba91Ts98
aAcOo3bqezYqz20kU2suvOTeglo9njYnfRjIk3l7FWBsMQTcrS1IuoCcrw==
-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org