Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tAaPXRSOLS_NdJ9jTXaMsGTjLUY.roa
File:                     tAaPXRSOLS_NdJ9jTXaMsGTjLUY.roa (raw, json)
Hash identifier:          L6BBwW957Nw3RTJlY5RiRGCaT+RkIoj9VSr7olxh4KU=
Subject key identifier:   B4:06:8F:5D:14:8E:2D:2F:CD:74:9F:63:4D:76:8C:B0:64:E3:2D:46
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       48
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tAaPXRSOLS_NdJ9jTXaMsGTjLUY.roa
Signing time:             Mon 17 Oct 2022 01:43:37 +0000
ROA not before:           Mon 17 Oct 2022 01:43:37 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9378
IP address blocks:        180.131.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:43:37 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B4068F5D148E2D2FCD749F634D768CB064E32D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:7a:2a:13:c7:53:86:33:0d:24:b5:b0:19:
                    02:ed:56:62:e6:5d:95:a3:2d:bb:af:60:43:59:d7:
                    83:0a:08:ce:aa:eb:8e:04:5b:00:9b:d3:ca:34:7b:
                    2d:dc:ed:12:21:9c:da:21:25:4a:a3:42:79:d2:fa:
                    a0:47:be:21:93:37:fa:6f:88:d5:e9:06:ea:ba:f3:
                    42:bb:4b:5c:43:14:57:48:7f:db:79:f2:a6:d0:4b:
                    ae:e6:b0:8f:23:43:8a:7b:06:0e:47:f2:b2:7d:eb:
                    33:e3:64:58:49:63:93:cd:d2:f1:0b:d2:90:a7:b3:
                    87:ad:9f:bc:fe:13:3e:26:29:cf:8f:21:6a:d9:79:
                    72:1d:23:10:31:1f:1b:b6:14:93:bd:04:eb:f6:86:
                    60:f3:79:02:d9:f1:b2:73:34:38:1a:f1:8e:22:f7:
                    39:e1:5e:88:a0:4a:25:00:ba:e6:77:60:97:60:0c:
                    93:c6:e4:d2:d5:bc:9a:03:d3:99:db:9b:4e:01:60:
                    f3:25:fd:be:44:c8:4d:45:53:cc:d4:1d:02:a5:a1:
                    c2:01:89:76:e8:1d:09:30:af:fe:77:39:07:0f:cb:
                    ca:69:bf:6e:c3:be:e8:df:9e:01:d6:07:ce:96:bb:
                    fe:80:f4:3b:e1:0f:08:6d:f3:0e:a0:0e:5c:c3:ca:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:8F:5D:14:8E:2D:2F:CD:74:9F:63:4D:76:8C:B0:64:E3:2D:46
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tAaPXRSOLS_NdJ9jTXaMsGTjLUY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:97:0c:ca:78:b7:13:bf:18:68:82:0c:8c:dc:e5:27:55:
         c0:eb:e2:28:b8:8a:89:ff:b5:a1:54:f4:f6:77:78:5b:ee:12:
         34:df:f4:73:5e:f0:b8:fd:70:67:44:36:07:35:51:56:0c:97:
         8c:98:b4:bd:6e:ee:65:73:38:c9:fb:16:71:89:a4:82:6d:f3:
         4e:22:07:d6:10:bd:a7:50:0b:df:e1:ea:22:8a:04:e0:f1:5f:
         47:32:21:de:db:0d:cb:38:58:28:d7:17:2f:72:3f:a5:cb:a2:
         88:bf:90:1c:a0:1d:43:25:f4:87:11:23:5b:62:51:23:7d:be:
         75:a2:13:4d:e4:62:6f:8f:67:84:cc:9e:da:51:82:94:28:40:
         06:4e:bf:10:5f:48:af:c1:fb:dd:fe:12:57:3e:dc:d3:00:ac:
         de:4e:d1:39:2b:91:95:ae:af:72:d2:2c:e9:86:48:f1:86:d7:
         3d:d6:f6:3a:c9:66:c4:3f:6c:34:d9:5d:38:7a:96:c9:72:86:
         12:9a:c5:c2:83:50:fb:6b:6c:a3:65:73:7e:b8:8c:5a:49:f1:
         a0:1e:d4:39:fc:9a:59:3f:5d:e6:c3:cf:ee:3b:b8:1a:4e:0d:
         c4:58:4d:cc:cb:6b:65:66:1e:e9:03:f7:71:9b:cb:dc:d6:da:
         26:75:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:41 2023 by rpki-client on console-fra.rpki-client.org