Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zKR2oMFYQt1SQ5CS1bt75Vbk_6I.roa
File:                     zKR2oMFYQt1SQ5CS1bt75Vbk_6I.roa (raw, json)
Hash identifier:          6HALCzG4u5MucZ2NWuiIn8ozd72P9pbT08xBmUVIIlc=
Subject key identifier:   CC:A4:76:A0:C1:58:42:DD:52:43:90:92:D5:BB:7B:E5:56:E4:FF:A2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       BE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zKR2oMFYQt1SQ5CS1bt75Vbk_6I.roa
Signing time:             Mon 24 Oct 2022 04:44:56 +0000
ROA not before:           Mon 24 Oct 2022 04:44:56 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9824
IP address blocks:        219.117.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:44:56 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=CCA476A0C15842DD52439092D5BB7BE556E4FFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:71:04:24:13:f8:c2:84:de:26:9b:73:9c:
                    06:7b:f6:94:4c:72:8c:69:43:eb:96:e3:9e:51:f3:
                    f9:8b:0c:6e:e7:25:2e:52:c2:89:ce:ec:92:80:35:
                    bf:28:cb:d7:3e:4d:07:d4:78:3f:ad:ef:67:7f:c6:
                    42:14:a3:73:48:39:d2:fa:4f:57:ff:3d:a6:98:22:
                    6a:29:65:c1:d2:9f:be:53:50:18:1a:a2:42:5e:1f:
                    f1:51:24:7e:5f:3d:ef:75:12:ef:31:04:16:34:0e:
                    cf:dc:3b:ce:0e:b5:cb:0e:bc:25:f8:f8:3e:c0:c8:
                    ec:99:cf:68:18:fc:3e:1f:69:24:c5:81:ab:7a:c4:
                    ee:6d:aa:67:31:8c:d5:33:e9:57:95:8c:d4:35:16:
                    7f:08:ca:97:7d:4e:2f:31:ea:c4:13:03:26:64:cd:
                    5c:2b:b3:31:d2:a4:61:b1:ea:ac:af:0d:2b:a5:e7:
                    9c:3e:22:1f:ea:50:96:a6:02:ac:55:1c:2b:4b:4d:
                    e7:85:aa:fa:86:95:9c:fc:9d:71:f3:5c:99:21:ed:
                    90:5a:0a:3f:77:d2:01:a9:be:30:aa:cf:38:bf:bd:
                    1b:57:65:66:dc:e2:22:5f:7d:50:77:4b:df:26:3a:
                    d1:26:8e:34:f9:10:01:3e:51:11:96:91:19:22:50:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:76:A0:C1:58:42:DD:52:43:90:92:D5:BB:7B:E5:56:E4:FF:A2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zKR2oMFYQt1SQ5CS1bt75Vbk_6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:c9:f9:d8:4a:eb:83:ca:62:f2:13:36:49:47:a0:85:a8:
         d9:f9:71:3a:c8:01:fa:21:fc:03:77:e6:48:30:f3:ee:56:f7:
         0d:b3:79:d1:46:76:24:31:23:68:f2:fa:73:0c:67:00:94:3e:
         3a:d2:27:8d:47:d3:81:8c:09:05:3d:4e:a5:ad:8f:bf:40:50:
         21:11:d3:72:db:b4:0f:ba:24:a7:0d:22:11:8a:68:c9:cf:08:
         4b:02:a5:6c:f1:73:b6:3d:54:38:ff:a8:32:44:cf:ab:b0:81:
         c5:b9:8f:37:ca:72:5b:b5:c9:e6:60:7c:3c:ab:e3:ee:1c:07:
         cb:d4:2b:f9:4a:b7:f9:cc:15:d8:a9:e6:de:3d:f7:ae:30:f0:
         09:d7:52:24:e5:c3:64:e4:ec:b5:93:17:a6:03:9b:42:fc:3d:
         de:4c:c3:ae:81:09:48:42:93:11:52:86:80:4c:ee:6b:a8:64:
         c2:5f:bf:88:ee:c7:02:2b:32:8b:d6:54:97:0c:42:4e:13:78:
         4a:3c:1b:65:7c:a0:63:4e:a2:77:31:90:58:5a:6e:ae:14:3f:
         ea:fc:e9:d5:72:c0:f5:d4:bd:2a:69:1d:e5:03:68:bc:39:27:
         de:12:5a:22:69:55:f1:70:dc:8c:e9:73:0b:c5:da:c0:02:be:
         f9:5f:b3:fd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
NDQ0NTZaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENDQTQ3NkEwQzE1ODQy
REQ1MjQzOTA5MkQ1QkI3QkU1NTZFNEZGQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7JXEEJBP4woTeJptznAZ79pRMcoxpQ+uW455R8/mLDG7nJS5S
wonO7JKANb8oy9c+TQfUeD+t72d/xkIUo3NIOdL6T1f/PaaYImopZcHSn75TUBga
okJeH/FRJH5fPe91Eu8xBBY0Ds/cO84OtcsOvCX4+D7AyOyZz2gY/D4faSTFgat6
xO5tqmcxjNUz6VeVjNQ1Fn8Iypd9Ti8x6sQTAyZkzVwrszHSpGGx6qyvDSul55w+
Ih/qUJamAqxVHCtLTeeFqvqGlZz8nXHzXJkh7ZBaCj930gGpvjCqzzi/vRtXZWbc
4iJffVB3S98mOtEmjjT5EAE+URGWkRkiUICdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUzKR2oMFYQt1SQ5CS1bt75Vbk/6IwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3pLUjJvTUZZUXQxU1E1Q1MxYnQ3NVZia182SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXbdaAwDQYJKoZIhvcNAQELBQADggEBAFIcyfnYSuuDymLyEzZJR6CFqNn5
cTrIAfoh/AN35kgw8+5W9w2zedFGdiQxI2jy+nMMZwCUPjrSJ41H04GMCQU9TqWt
j79AUCER03LbtA+6JKcNIhGKaMnPCEsCpWzxc7Y9VDj/qDJEz6uwgcW5jzfKclu1
yeZgfDyr4+4cB8vUK/lKt/nMFdip5t49964w8AnXUiTlw2Tk7LWTF6YDm0L8Pd5M
w66BCUhCkxFShoBM7muoZMJfv4juxwIrMovWVJcMQk4TeEo8G2V8oGNOoncxkFha
bq4UP+r86dVywPXUvSppHeUDaLw5J94SWiJpVfFw3IzpcwvF2sACvvlfs/0=
-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:41 2023 by rpki-client on console-fra.rpki-client.org