Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zGXLFOYDitjTwNX0fnPSsmkLTq0.roa
File:                     zGXLFOYDitjTwNX0fnPSsmkLTq0.roa (raw, json)
Hash identifier:          S6ne6E7S5j5fJb7MpFEl726RZt88mtUTvndhOqJH34s=
Subject key identifier:   CC:65:CB:14:E6:03:8A:D8:D3:C0:D5:F4:7E:73:D2:B2:69:0B:4E:AD
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       EE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zGXLFOYDitjTwNX0fnPSsmkLTq0.roa
Signing time:             Mon 31 Oct 2022 02:28:05 +0000
ROA not before:           Mon 31 Oct 2022 02:28:05 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        116.70.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:28:05 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=CC65CB14E6038AD8D3C0D5F47E73D2B2690B4EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:f9:13:8c:26:ca:2b:23:8f:9b:5b:20:fc:
                    4a:67:bf:63:27:fc:59:f5:8b:5e:36:74:72:7c:8f:
                    b1:c0:35:7f:63:88:24:f1:9d:de:ab:0e:99:c6:e1:
                    95:2b:1e:62:75:b6:07:72:94:14:46:ab:30:2a:fe:
                    13:27:ee:1a:fd:3a:7c:c1:fa:ed:0d:4a:76:79:19:
                    e3:86:d9:c1:2b:e6:ec:88:af:3f:70:7a:3b:84:47:
                    0b:fb:91:3e:2a:f2:db:74:df:48:46:e4:a1:d4:12:
                    6b:59:03:b4:e5:75:db:e5:a2:01:16:0d:a5:85:3d:
                    71:12:d8:e6:03:ea:c5:20:ae:1c:79:df:7f:c3:40:
                    48:c5:19:fe:46:b0:8a:3d:01:4c:09:12:d6:4f:65:
                    8d:60:28:b4:01:87:2b:17:2e:78:e3:0e:37:e8:ff:
                    be:31:98:2e:3b:4d:1f:a6:16:3c:47:d5:4c:95:b8:
                    04:39:a8:2f:a4:51:cf:8d:86:3c:9a:67:88:be:22:
                    6d:fb:79:e9:d2:d1:63:23:46:0f:20:29:8e:fa:2e:
                    c2:7c:50:cc:82:5e:4b:30:22:21:8f:6f:a3:8d:ad:
                    d2:97:30:f3:3a:7b:2c:a4:0e:8f:5f:1c:2b:b1:38:
                    cb:70:10:f6:20:e6:65:67:40:33:4f:29:9b:ea:aa:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:65:CB:14:E6:03:8A:D8:D3:C0:D5:F4:7E:73:D2:B2:69:0B:4E:AD
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zGXLFOYDitjTwNX0fnPSsmkLTq0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.70.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:32:86:29:1b:6e:14:36:76:aa:8f:6e:40:c8:43:db:87:
         a8:95:9a:d6:65:18:45:aa:5a:f0:16:2f:ba:35:64:56:cf:05:
         e6:61:dc:96:74:19:6f:cf:fe:ec:72:17:de:a3:93:02:cc:cf:
         b2:40:78:3f:88:f5:98:ce:43:22:82:88:9f:7a:ae:cb:e7:9f:
         5a:35:5b:48:0a:2c:3a:ef:b4:c7:c2:44:81:f5:8f:23:fa:5e:
         c2:cb:34:ad:87:72:43:29:c3:37:72:da:bf:33:cc:c4:9d:ad:
         79:94:31:ef:2f:77:e4:c8:e6:8b:43:4b:a3:78:8d:fa:ba:2d:
         df:32:e7:0b:05:1a:0c:60:0f:f4:c8:d9:7f:ae:27:d1:c8:a6:
         6f:6b:ee:2d:9c:1d:da:8a:5a:2e:cc:1e:9b:35:75:63:33:6b:
         70:92:e2:1a:ea:f8:dd:e4:a9:a1:e0:d6:65:ea:c7:95:47:c7:
         65:b7:49:b8:46:bd:7f:f9:d5:15:3b:93:75:4c:42:6d:09:07:
         79:f3:c5:06:20:a4:01:0a:ce:78:10:6d:97:3b:be:8f:15:60:
         0d:b0:67:a8:a4:26:b8:9c:3e:db:13:29:b2:42:64:6e:0b:51:
         d2:56:10:68:9f:87:0f:8f:23:56:06:e8:90:f7:85:0a:b2:a6:
         0e:02:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org