Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/iZ2QSwQw27y9VmD1f_XYjoH3lHI.roa
File:                     iZ2QSwQw27y9VmD1f_XYjoH3lHI.roa (raw, json)
Hash identifier:          p3wLhd6Qa7HfChUAjmbAEF9Tdf+TVVWYtqTfKiiNLxY=
Subject key identifier:   89:9D:90:4B:04:30:DB:BC:BD:56:60:F5:7F:F5:D8:8E:81:F7:94:72
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       27
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/iZ2QSwQw27y9VmD1f_XYjoH3lHI.roa
Signing time:             Tue 01 Nov 2022 01:28:26 +0000
ROA not before:           Tue 01 Nov 2022 01:28:26 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23805
IP address blocks:        202.76.192.0/19 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Nov  1 01:28:26 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=899D904B0430DBBCBD5660F57FF5D88E81F79472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:0e:8f:a3:eb:32:4a:48:bc:87:f0:7f:55:
                    e5:07:92:f2:2f:93:81:74:40:e1:3b:06:36:0b:76:
                    44:23:da:c6:f8:6f:d6:6b:3e:9e:45:4a:64:b6:a0:
                    51:4a:f3:24:49:ea:68:e8:85:cc:75:00:be:bf:49:
                    ea:23:56:a9:f8:0d:9d:4b:8f:ab:be:a9:8c:18:a8:
                    85:f8:99:87:1a:0c:d0:2a:9e:02:31:a0:20:ca:54:
                    d9:01:72:40:e8:5d:65:2a:92:4c:7d:7f:d9:9b:ce:
                    1b:a3:5a:d6:09:b0:8a:04:40:82:e2:61:56:cb:ab:
                    a1:3b:a8:e7:f5:9a:8c:19:ff:80:05:12:c0:3f:38:
                    76:4a:71:e8:20:d1:da:1f:1e:fc:40:11:a1:75:d6:
                    85:64:3c:91:56:0a:04:4d:a7:2b:43:0c:da:5a:c8:
                    a6:c1:f4:6f:2d:44:57:77:e4:0f:71:31:8b:6d:7c:
                    83:90:a6:27:1a:94:bb:55:73:e1:44:b7:9c:d7:2f:
                    00:21:c1:b0:ad:d8:18:28:7e:a3:95:6c:8b:fc:b8:
                    81:b1:b0:4e:0b:24:83:cc:03:26:3a:d7:35:fe:e3:
                    d9:78:2d:2d:4d:87:5b:cd:11:4b:94:be:2e:d1:8c:
                    78:34:e8:b9:f3:5a:01:b1:b1:2f:48:65:f1:21:55:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9D:90:4B:04:30:DB:BC:BD:56:60:F5:7F:F5:D8:8E:81:F7:94:72
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/iZ2QSwQw27y9VmD1f_XYjoH3lHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.76.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:49:6b:02:7f:cf:a8:45:3d:6b:78:ba:3e:35:17:9f:5e:ce:
         f2:80:73:a4:db:b2:8d:c4:31:87:6d:2d:77:24:8b:0c:16:ed:
         dc:6a:57:ea:5b:ae:67:c5:38:c6:fc:97:80:5c:c5:05:2f:1c:
         15:28:b7:5b:a6:6f:28:fd:e3:d7:ca:19:29:4e:45:91:9f:ab:
         68:3f:5f:d0:1c:0c:25:66:7e:4c:6a:ab:f9:ce:d4:8c:2c:4a:
         07:79:e5:43:aa:e0:fb:a3:c4:b9:29:b5:91:7a:ef:5b:80:0d:
         8e:92:b2:f6:bd:6e:7a:71:73:f5:57:9e:46:da:a9:8f:7b:2a:
         ed:d9:5e:97:5a:e6:90:15:9d:d8:fe:f4:01:c7:a0:41:2c:74:
         65:a5:87:38:72:75:6d:0b:64:1c:3b:c5:3b:0c:21:2d:64:d6:
         4b:22:20:de:0a:76:f4:f9:e8:0a:98:0e:c2:17:5f:ce:6a:0e:
         07:29:1c:fb:2e:0f:5d:76:d9:39:64:1b:c1:84:64:cf:57:3c:
         c3:a9:41:a8:d8:ab:f6:e2:6f:c3:99:e1:32:c3:b7:47:b9:36:
         23:bb:5d:4c:87:e6:83:a3:2b:e9:b5:22:48:0d:ee:76:01:8b:
         48:af:7e:a3:30:7b:f3:61:6d:97:b9:97:9b:4c:23:7c:00:94:
         e7:b0:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org