Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/yd8ZJnnuU9iwmKcK9DPHkHYxVwU.roa
File:                     yd8ZJnnuU9iwmKcK9DPHkHYxVwU.roa (raw, json)
Hash identifier:          EKqHZQUKB+VhJjgTuvJLAqnO0GR6Irz9QNf5k+sbmBs=
Subject key identifier:   C9:DF:19:26:79:EE:53:D8:B0:98:A7:0A:F4:33:C7:90:76:31:57:05
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       95
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yd8ZJnnuU9iwmKcK9DPHkHYxVwU.roa
Signing time:             Mon 24 Oct 2022 02:56:42 +0000
ROA not before:           Mon 24 Oct 2022 02:56:42 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        115.42.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:56:42 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=C9DF192679EE53D8B098A70AF433C79076315705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:88:f6:b7:78:55:3a:12:9f:5f:bb:6e:bb:
                    9a:e1:46:8c:23:7c:8b:10:b6:a0:d3:e2:67:3f:7d:
                    60:44:88:cb:3e:e2:fa:71:f8:2d:b1:42:a9:7f:b6:
                    cf:67:07:73:a2:36:b9:11:01:be:b7:29:a8:5b:ec:
                    51:6f:98:d4:7a:49:6b:06:7d:71:4a:9a:e9:b5:b7:
                    ab:b1:b8:35:31:d8:69:d6:22:3b:8d:d6:17:a5:17:
                    97:54:84:e9:3d:72:c8:41:c1:41:27:9e:cd:6f:9a:
                    44:13:18:7d:4b:87:9f:39:5e:7d:fd:96:21:95:19:
                    29:3d:fd:51:61:4f:47:c0:fd:07:f7:4e:0b:ab:c7:
                    cb:8b:8b:0f:2b:0d:ee:e2:d0:82:15:bb:ae:10:a9:
                    14:77:18:f5:03:37:c2:b0:61:56:2a:7c:ca:71:77:
                    70:04:3f:bf:4b:da:5e:39:b1:15:cc:5d:c6:37:7f:
                    5b:59:9e:f2:31:60:7c:bf:9e:cd:c3:f4:00:4b:35:
                    31:cc:9a:df:63:ce:fe:74:f0:e3:36:1d:21:62:0c:
                    d6:f1:04:74:e0:60:f2:17:67:46:78:35:7c:f6:4b:
                    67:a9:23:44:16:2d:a0:69:28:65:2a:ff:d4:82:3d:
                    30:c2:f3:54:0e:44:e9:37:83:c1:a5:d1:20:5c:6d:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DF:19:26:79:EE:53:D8:B0:98:A7:0A:F4:33:C7:90:76:31:57:05
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/yd8ZJnnuU9iwmKcK9DPHkHYxVwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:b2:97:81:34:60:61:76:30:da:8a:f8:d4:33:97:cf:a8:
         9b:79:40:ff:3a:f4:9c:83:62:9f:60:70:9f:79:c2:fe:47:8c:
         79:a8:e6:c0:f2:e5:24:0b:d9:a8:9a:a4:c5:f9:d5:64:f7:1e:
         82:a4:f7:cc:1a:ca:4b:3f:83:07:ab:87:52:88:64:d1:e8:83:
         19:f8:01:4d:8a:31:cf:b5:ae:37:6d:37:fe:bc:53:c7:04:64:
         41:09:05:aa:45:67:f4:d9:0e:d0:2b:74:26:6d:a7:21:91:ab:
         73:10:e8:08:39:24:37:c6:75:33:d4:37:0d:70:ce:b7:39:43:
         a4:f7:89:c2:b9:a2:cb:ba:ee:3d:d2:77:3c:5f:fe:d5:b6:73:
         f2:0f:c9:99:84:f3:11:9b:9e:4f:72:f6:85:0a:af:6b:ba:05:
         e4:b3:8e:76:c5:d4:3a:15:3e:0c:50:bf:52:d3:e0:76:b2:1b:
         b9:16:06:87:cd:0e:0d:76:e6:be:cb:6c:53:02:63:ff:33:1f:
         0c:f8:27:67:3b:a0:7d:0e:ae:44:8c:a3:17:52:62:4d:bb:80:
         70:74:04:55:6c:40:7e:f8:6d:23:78:ae:1b:d6:21:1a:48:de:
         db:19:62:6d:4f:f0:1d:4a:35:f2:37:97:d8:25:ca:21:13:81:
         7c:fc:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:41 2023 by rpki-client on console-fra.rpki-client.org