Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yPl_0dE-lVkAM7ParVQ0MDQzJUE.roa
File:                     yPl_0dE-lVkAM7ParVQ0MDQzJUE.roa (raw, json)
Hash identifier:          zicgzlDgK4qr9FIrz3Z8xBcVOms5I2SctoGT5rXfhgc=
Subject key identifier:   C8:F9:7F:D1:D1:3E:95:59:00:33:B3:DA:AD:54:34:30:34:33:25:41
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       74
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yPl_0dE-lVkAM7ParVQ0MDQzJUE.roa
Signing time:             Mon 17 Oct 2022 02:50:11 +0000
ROA not before:           Mon 17 Oct 2022 02:50:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        114.69.160.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:50:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C8F97FD1D13E95590033B3DAAD54343034332541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:15:a8:ba:01:a1:e2:36:60:88:76:b0:c6:
                    6e:1a:6e:68:da:04:d8:57:56:5e:46:38:ba:d3:5a:
                    b9:0a:e4:15:5f:e6:62:c3:0f:01:30:21:e8:c5:4b:
                    88:a0:fc:62:8b:75:6c:1a:72:88:2d:44:5b:cc:c0:
                    7d:db:6a:90:c1:f9:85:dc:ea:9a:58:bf:f5:b1:e5:
                    63:7e:01:8f:93:7b:eb:cb:49:f9:c8:61:f9:da:ec:
                    b2:fb:b8:98:39:63:0c:8d:db:ba:a3:41:f4:da:33:
                    88:e6:cb:64:ef:97:db:40:9b:eb:b8:b1:86:86:12:
                    d3:4d:c2:4f:02:d4:f9:2a:13:76:33:4a:22:42:93:
                    35:b0:b3:e5:82:33:9f:53:59:7d:2f:16:19:86:15:
                    95:70:f0:19:25:d3:ae:23:d9:5d:cf:2b:22:aa:47:
                    52:35:44:e9:12:37:4b:99:09:1d:a1:67:d7:2b:66:
                    48:a9:94:c7:95:49:22:54:7e:f1:56:cf:ff:e9:14:
                    dd:5c:60:ad:b3:67:29:52:6a:2b:ca:92:4a:f4:f9:
                    01:40:48:2e:fb:95:da:58:62:48:b7:26:ae:64:03:
                    6f:e6:7c:04:08:c7:e1:2d:ae:5f:97:fc:21:a5:d1:
                    04:32:a9:3e:97:af:07:3d:da:03:94:0e:01:a6:19:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F9:7F:D1:D1:3E:95:59:00:33:B3:DA:AD:54:34:30:34:33:25:41
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yPl_0dE-lVkAM7ParVQ0MDQzJUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.69.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:57:cf:4e:4f:a7:71:c5:e8:06:c4:2d:3b:c3:45:3c:3d:1d:
         2b:9f:14:b7:f9:57:56:9e:d0:af:05:31:5a:8d:0c:cf:f6:18:
         45:9d:19:32:b4:6c:f1:1f:62:f0:8b:02:bc:6e:75:7a:6a:83:
         f7:da:a8:f3:8d:c6:9c:f5:41:a5:6c:f2:06:16:33:4c:98:c8:
         87:3b:6e:ac:f9:34:65:dd:9c:2b:49:72:73:83:8f:5d:8a:ce:
         61:36:3d:87:5b:fb:67:a0:d9:67:6d:d1:15:05:63:c2:fc:bd:
         86:49:ac:dc:80:9a:7d:bc:9f:22:b5:2d:02:13:45:c6:e9:bb:
         f8:41:05:c0:12:fc:2a:c9:a4:c2:c9:4f:4d:4a:53:01:97:22:
         e1:9f:7b:19:bf:41:db:e0:aa:8d:23:ca:2f:53:b2:bf:f5:9e:
         31:e0:8f:69:f2:8a:26:ec:60:fb:30:de:da:0b:a5:5c:14:0f:
         6e:a4:f3:21:d5:b6:33:e6:ec:2c:95:ab:51:f6:12:24:6d:51:
         26:e1:6e:01:96:4a:a7:9e:12:e9:0e:73:ab:d6:65:49:28:19:
         3e:a5:67:28:e5:d6:3c:f0:37:68:78:b4:2a:8f:1a:67:26:20:
         45:a2:58:82:81:51:67:b9:36:37:13:fd:08:c4:b3:f7:d8:64:
         f3:ec:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org