Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa
File:                     Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa (raw, json)
Hash identifier:          NF8zwTpNBlfEfBsDDOmPz6lq+TO5Q7+UHfbW1JN/3x0=
Subject key identifier:   29:B9:78:B4:4E:B5:21:FA:0E:A6:80:9F:51:E5:10:F4:57:92:B1:E9
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       14
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa
Signing time:             Thu 20 Oct 2022 06:24:20 +0000
ROA not before:           Thu 20 Oct 2022 06:24:20 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        210.199.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:24:20 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=29B978B44EB521FA0EA6809F51E510F45792B1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:3c:79:77:85:e8:fd:09:76:d6:3f:f1:68:
                    41:b4:59:57:5c:94:e2:2b:04:93:bf:64:10:24:94:
                    4b:16:68:97:0d:99:40:d8:d9:b9:76:17:9e:14:af:
                    b5:54:80:a7:b0:7e:60:7f:64:f6:70:c9:0f:7f:a0:
                    c0:23:ce:42:55:17:ad:59:f0:65:55:85:17:d5:c4:
                    ad:d2:65:7e:55:10:25:9b:bc:2a:7d:54:51:92:2b:
                    9d:fc:10:09:56:63:89:0f:01:71:72:a8:f8:76:e8:
                    2b:6c:68:66:c9:bf:b4:de:8e:75:72:3f:3b:a5:56:
                    73:86:94:ec:f8:ec:05:7a:64:df:31:33:e8:2b:20:
                    40:b9:41:e5:fc:b0:11:a5:0c:21:ce:6b:bf:21:0d:
                    84:75:98:38:67:98:9c:d4:7f:01:1f:75:ce:c0:d1:
                    a3:31:ef:1d:f2:ff:b8:df:70:54:c0:7d:fc:0a:9f:
                    1f:e2:c7:61:be:c9:11:d8:f4:a5:c9:17:62:09:76:
                    43:ff:20:c2:9c:01:20:fa:c6:81:0b:f1:80:b8:88:
                    fb:9e:4e:3b:d1:6d:e2:58:90:dd:43:8f:f9:93:1b:
                    53:2c:ee:29:9d:a2:f7:c4:35:84:25:52:b0:07:5a:
                    58:5f:e5:86:e5:a9:d4:55:4f:82:57:74:a9:c7:49:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B9:78:B4:4E:B5:21:FA:0E:A6:80:9F:51:E5:10:F4:57:92:B1:E9
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Kbl4tE61IfoOpoCfUeUQ9FeSsek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:d1:a4:a7:b5:9a:a1:c7:a7:a0:4c:54:d6:e4:de:cc:ef:
         0c:0d:11:5d:d0:15:73:9e:92:bd:6a:a5:96:e2:76:e1:10:cf:
         01:dc:53:0f:25:91:d6:d5:26:ee:2e:9b:64:36:48:dc:7a:29:
         a1:81:3a:66:3d:ff:ba:35:79:22:38:22:80:aa:40:6a:3b:e0:
         4d:b3:76:cc:39:d2:28:7e:a0:c0:03:e5:03:23:f5:ef:e3:d4:
         85:5e:6b:ed:35:b5:a4:74:ef:6a:9d:a1:b9:35:30:70:99:7e:
         ae:47:37:98:12:7a:40:ed:cd:07:fb:db:c3:2a:9a:b7:01:5f:
         52:03:4f:fb:0c:96:2b:78:57:7a:7d:e5:21:9e:59:3c:79:40:
         f0:1a:18:6d:f8:7e:8c:e5:16:5d:f1:71:c5:df:6e:b3:59:cc:
         88:cd:48:e3:8f:86:b9:68:d5:00:17:09:6f:c3:41:c6:3a:01:
         4a:a4:80:f6:82:ad:79:86:20:dd:19:97:38:84:50:c6:99:fa:
         f3:12:31:58:18:b0:11:07:d9:77:97:2d:ea:a8:6f:33:fe:fe:
         4e:fb:73:42:23:a0:84:7a:ab:86:1e:e2:fe:75:cc:c0:fa:ba:
         3a:1d:33:82:1a:06:5d:bc:61:77:1d:29:2f:0e:07:41:a7:ab:
         9f:70:aa:af
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF
NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTIyMTAyMDA2
MjQyMFoXDTIzMTAyMDA2MDcxOVowMzExMC8GA1UEAxMoMjlCOTc4QjQ0RUI1MjFG
QTBFQTY4MDlGNTFFNTEwRjQ1NzkyQjFFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM20PHl3hej9CXbWP/FoQbRZV1yU4isEk79kECSUSxZolw2ZQNjZ
uXYXnhSvtVSAp7B+YH9k9nDJD3+gwCPOQlUXrVnwZVWFF9XErdJlflUQJZu8Kn1U
UZIrnfwQCVZjiQ8BcXKo+HboK2xoZsm/tN6OdXI/O6VWc4aU7PjsBXpk3zEz6Csg
QLlB5fywEaUMIc5rvyENhHWYOGeYnNR/AR91zsDRozHvHfL/uN9wVMB9/AqfH+LH
Yb7JEdj0pckXYgl2Q/8gwpwBIPrGgQvxgLiI+55OO9Ft4liQ3UOP+ZMbUyzuKZ2i
98Q1hCVSsAdaWF/lhuWp1FVPgld0qcdJcjECAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQpuXi0TrUh+g6mgJ9R5RD0V5Kx6TAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy
00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t
eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzY4L0tibDR0RTYxSWZvT3BvQ2ZVZVVROUZlU3Nlay5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXSx2AwDQYJKoZIhvcNAQELBQADggEBAGYs0aSntZqhx6egTFTW5N7M7wwNEV3Q
FXOekr1qpZbiduEQzwHcUw8lkdbVJu4um2Q2SNx6KaGBOmY9/7o1eSI4IoCqQGo7
4E2zdsw50ih+oMAD5QMj9e/j1IVea+01taR072qdobk1MHCZfq5HN5gSekDtzQf7
28MqmrcBX1IDT/sMlit4V3p95SGeWTx5QPAaGG34fozlFl3xccXfbrNZzIjNSOOP
hrlo1QAXCW/DQcY6AUqkgPaCrXmGIN0ZlziEUMaZ+vMSMVgYsBEH2XeXLeqobzP+
/k77c0IjoIR6q4Ye4v51zMD6ujodM4IaBl28YXcdKS8OB0Gnq59wqq8=
-----END CERTIFICATE-----
Generated at Fri Oct 6 06:41:28 2023 by rpki-client on console-fra.rpki-client.org