Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wNhbhBHkWZRxgrQ48h24Nl-fWhY.roa
File:                     wNhbhBHkWZRxgrQ48h24Nl-fWhY.roa (raw, json)
Hash identifier:          TVNChtcTdYwG5lWGV0qIyK8pO0TDsPZnka8hzczL1Z0=
Subject key identifier:   C0:D8:5B:84:11:E4:59:94:71:82:B4:38:F2:1D:B8:36:5F:9F:5A:16
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       FD
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wNhbhBHkWZRxgrQ48h24Nl-fWhY.roa
Signing time:             Thu 24 Nov 2022 01:11:28 +0000
ROA not before:           Thu 24 Nov 2022 01:11:28 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     0
IP address blocks:        210.211.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov 24 01:11:28 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=C0D85B8411E459947182B438F21DB8365F9F5A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:bb:e3:6c:35:64:68:a5:13:a7:ef:4a:ae:
                    bf:dd:f1:80:a8:b2:4f:9e:e6:7a:37:c6:7a:85:3b:
                    ce:57:2c:63:0b:1f:5b:a7:0f:30:66:16:9a:9e:82:
                    93:a1:13:54:3d:36:fa:d8:f4:29:79:0e:9a:5c:9e:
                    db:7c:99:03:ae:b2:64:9f:95:d4:d6:db:99:05:78:
                    06:77:70:6e:87:16:6e:89:a1:6a:39:fa:86:a3:52:
                    7c:d1:93:7a:f3:c4:01:a1:dd:05:87:ed:52:b6:3e:
                    67:2d:b0:2b:31:78:e5:fe:03:ee:65:92:5b:35:a6:
                    ff:d4:76:e3:5f:66:0b:74:09:ef:43:27:e2:08:b7:
                    a4:e7:3c:c9:2b:7f:04:73:d9:e0:ad:54:d7:8d:69:
                    fa:99:a9:3b:42:51:97:0a:a3:96:9d:c6:f5:f6:3e:
                    62:01:88:8b:64:f6:d0:db:e6:99:56:ec:40:67:7d:
                    5a:3d:3a:af:bf:39:76:16:ac:f7:01:f4:d5:90:31:
                    64:d4:c4:3f:29:8f:dc:2c:0c:bc:bd:cb:36:69:7d:
                    1a:a8:5d:5f:c1:38:e7:cb:c8:99:f2:18:89:b4:64:
                    03:76:65:68:8e:c2:da:fb:6e:33:ab:a8:e1:2a:d9:
                    a4:a2:82:1a:5d:1d:64:9b:b2:90:cd:e5:ea:2b:d8:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D8:5B:84:11:E4:59:94:71:82:B4:38:F2:1D:B8:36:5F:9F:5A:16
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wNhbhBHkWZRxgrQ48h24Nl-fWhY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.211.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:e4:6a:10:3f:e2:9f:55:dc:7c:ef:fc:1c:ba:a2:1d:06:2f:
         be:d9:dd:95:1a:90:4e:8a:bd:e1:d3:d4:e0:cf:d1:68:d7:f1:
         ae:4e:7d:64:f3:d6:a1:55:f9:f8:cd:06:20:b0:ec:76:ed:7b:
         6a:42:65:05:28:5a:10:e0:47:4a:55:45:5d:2a:3e:b3:0b:c4:
         18:b6:4d:6e:36:5c:5b:4d:1b:26:6a:1f:a8:50:71:fa:26:ff:
         a1:e1:d2:b4:3d:5c:6a:78:60:27:ad:0b:81:1a:4e:55:c9:e8:
         bf:30:17:fb:21:73:66:2a:e2:99:a6:b3:18:29:ac:04:27:6d:
         d5:ba:29:ed:11:03:03:4e:bd:1f:c9:e0:08:1e:55:10:96:2a:
         24:9d:d8:b3:fb:bc:52:54:9e:03:d7:8d:7c:c3:a1:e3:15:7d:
         01:15:d1:a9:98:0b:a9:1b:64:70:de:06:42:1f:ab:fa:9f:26:
         ad:43:91:ce:b3:f7:25:38:43:3f:ba:43:4a:b3:bc:f0:5b:b5:
         5c:b1:3e:75:fc:25:93:be:63:69:19:0c:50:41:93:d8:cd:9d:
         fe:a1:3d:00:d7:70:de:e0:e2:5f:11:d0:42:ed:b3:94:30:54:
         26:a3:c7:95:9f:c2:5f:81:c8:da:0a:e0:d7:d8:ec:8d:61:e3:
         9a:5d:37:0a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjExMjQw
MTExMjhaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMwRDg1Qjg0MTFFNDU5
OTQ3MTgyQjQzOEYyMURCODM2NUY5RjVBMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2vLvjbDVkaKUTp+9Krr/d8YCosk+e5no3xnqFO85XLGMLH1un
DzBmFpqegpOhE1Q9NvrY9Cl5Dppcntt8mQOusmSfldTW25kFeAZ3cG6HFm6JoWo5
+oajUnzRk3rzxAGh3QWH7VK2PmctsCsxeOX+A+5lkls1pv/UduNfZgt0Ce9DJ+II
t6TnPMkrfwRz2eCtVNeNafqZqTtCUZcKo5adxvX2PmIBiItk9tDb5plW7EBnfVo9
Oq+/OXYWrPcB9NWQMWTUxD8pj9wsDLy9yzZpfRqoXV/BOOfLyJnyGIm0ZAN2ZWiO
wtr7bjOrqOEq2aSighpdHWSbspDN5eor2J0bAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwNhbhBHkWZRxgrQ48h24Nl+fWhYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3dOaGJoQkhrV1pSeGdyUTQ4aDI0TmwtZldoWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATS0yAwDQYJKoZIhvcNAQELBQADggEBAJvkahA/4p9V3Hzv/By6oh0GL77Z
3ZUakE6KveHT1ODP0WjX8a5OfWTz1qFV+fjNBiCw7Hbte2pCZQUoWhDgR0pVRV0q
PrMLxBi2TW42XFtNGyZqH6hQcfom/6Hh0rQ9XGp4YCetC4EaTlXJ6L8wF/shc2Yq
4pmmsxgprAQnbdW6Ke0RAwNOvR/J4AgeVRCWKiSd2LP7vFJUngPXjXzDoeMVfQEV
0amYC6kbZHDeBkIfq/qfJq1Dkc6z9yU4Qz+6Q0qzvPBbtVyxPnX8JZO+Y2kZDFBB
k9jNnf6hPQDXcN7g4l8R0ELts5QwVCajx5Wfwl+ByNoK4NfY7I1h45pdNwo=
-----END CERTIFICATE-----
Generated at Wed Nov 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org