Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/bcL33TsD01ucqKQdkawCOP_AyHI.roa
File:                     bcL33TsD01ucqKQdkawCOP_AyHI.roa (raw, json)
Hash identifier:          nQ0c0M3aOSkcs+eQizzF1JfPQGrBKdi21hvMxNxCUDw=
Subject key identifier:   6D:C2:F7:DD:3B:03:D3:5B:9C:A8:A4:1D:91:AC:02:38:FF:C0:C8:72
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       07
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/bcL33TsD01ucqKQdkawCOP_AyHI.roa
Signing time:             Sun 02 Oct 2022 04:28:53 +0000
ROA not before:           Sun 02 Oct 2022 04:28:53 +0000
ROA not after:            Mon 02 Oct 2023 04:19:44 +0000
asID:                     18274
IP address blocks:        219.122.96.0/20 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Oct  2 04:28:53 2022 GMT
            Not After : Oct  2 04:19:44 2023 GMT
        Subject: CN=6DC2F7DD3B03D35B9CA8A41D91AC0238FFC0C872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:2d:e3:91:51:9d:6f:cb:61:3c:df:78:ce:
                    01:8f:45:8d:8e:a2:a1:19:91:6a:88:09:5b:e7:e4:
                    d3:5c:9e:35:dc:38:e3:0e:2c:c9:9f:d4:5c:1a:32:
                    3b:17:bb:9a:c7:5f:a4:7a:bf:37:01:2a:b7:a8:3d:
                    4c:c3:3a:33:ba:d6:68:d9:a4:58:5f:4f:ec:53:0c:
                    07:22:72:3e:bd:46:aa:99:fc:b3:1e:91:e5:18:97:
                    89:a6:5a:97:46:34:4b:27:d6:d1:27:b2:6f:2c:31:
                    f1:87:5c:7a:a2:60:21:d6:07:a1:7f:33:64:46:f2:
                    73:df:50:80:72:e2:2e:c0:8c:7a:56:26:df:59:28:
                    b3:da:69:5b:a3:46:03:9b:91:90:03:57:94:8f:49:
                    8e:9c:76:fd:bc:5d:22:37:93:d0:d3:c0:e0:de:1c:
                    64:e4:e0:d7:49:a8:78:69:aa:01:06:4a:50:16:bf:
                    30:39:1e:2a:77:d7:95:55:c6:d4:6e:29:3c:af:48:
                    af:c6:a3:ae:57:e0:83:c6:57:d2:34:9a:c0:61:01:
                    5d:4b:9f:ef:c1:f3:bb:1e:a8:91:cf:81:97:97:6b:
                    37:cb:fc:2c:a4:36:c4:bd:db:41:07:ca:03:8f:22:
                    42:6a:b3:28:0f:99:4e:bd:11:00:ed:01:c4:12:71:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:F7:DD:3B:03:D3:5B:9C:A8:A4:1D:91:AC:02:38:FF:C0:C8:72
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/bcL33TsD01ucqKQdkawCOP_AyHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:9d:ff:1d:fa:f7:95:39:18:e9:15:5c:70:31:dd:2b:9e:55:
         0b:04:e7:a1:42:e5:96:a5:b7:7a:a5:7a:2a:18:9b:01:c7:c3:
         0f:1b:1d:56:0e:ea:15:ec:66:c1:55:e4:e7:50:a4:c8:bd:5e:
         ff:68:85:71:af:cd:0b:fe:c6:7d:48:27:50:62:53:8d:91:6e:
         40:2d:20:60:33:a2:0b:8f:32:ea:8a:11:9d:be:ca:04:fe:0d:
         4f:f4:f3:79:36:a6:c2:ec:f6:d1:db:45:43:33:e3:d9:e7:ae:
         9b:0c:ea:c2:a0:8b:4c:a0:bc:1b:b0:f2:f0:47:9f:e9:d8:95:
         f2:ce:b8:b7:3a:68:f0:eb:33:30:77:9f:4d:5f:aa:01:24:36:
         7f:3e:a1:12:da:d6:83:33:cc:b9:1e:d8:37:94:08:f8:b7:17:
         df:f4:c5:53:91:e6:79:0a:ac:d7:85:49:e8:ce:ab:ab:4c:4b:
         90:96:fc:9c:8d:d1:83:76:4d:ff:30:57:95:a5:00:7b:24:57:
         b3:52:b0:9f:46:b7:73:7f:ed:e6:a1:1d:c1:cc:54:c0:8c:60:
         8a:ea:0a:2c:54:8f:3f:56:ab:76:69:cf:b2:28:5b:dc:74:1a:
         bd:b7:fc:c5:9b:15:a3:5b:38:f5:29:c7:b3:76:3f:26:27:e6:
         e2:bd:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 04:51:43 2023 by rpki-client on console-ams.rpki-client.org