Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/UYKFvpmDOe10rZVRjxlfyxHyZGc.roa
File:                     UYKFvpmDOe10rZVRjxlfyxHyZGc.roa (raw, json)
Hash identifier:          EFXNHdzZ8jQ6KbSMvuT8vIX/XeDOZOPUZP7YCuFbUWM=
Subject key identifier:   51:82:85:BE:99:83:39:ED:74:AD:95:51:8F:19:5F:CB:11:F2:64:67
Certificate issuer:       /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial:       2F
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/UYKFvpmDOe10rZVRjxlfyxHyZGc.roa
Signing time:             Tue 01 Nov 2022 01:28:14 +0000
ROA not before:           Tue 01 Nov 2022 01:28:14 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9621
IP address blocks:        157.70.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
        Validity
            Not Before: Nov  1 01:28:14 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=518285BE998339ED74AD95518F195FCB11F26467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:53:38:cf:c1:1e:cb:0f:ad:75:60:13:00:
                    2d:2e:8e:4b:bc:c2:ca:9b:a9:d6:7b:db:6d:f7:66:
                    44:12:10:55:da:b5:e7:4f:d6:3d:86:a9:9a:07:d2:
                    3c:48:48:d7:53:fe:fa:dd:44:9d:c8:8e:a4:9a:a9:
                    14:81:d2:2e:79:e7:6b:4a:00:ac:bc:c5:77:68:e4:
                    88:cf:c6:88:cd:15:7f:a1:0a:82:91:99:96:c5:94:
                    f6:6d:91:48:8e:4c:ec:d7:70:4a:b6:39:91:3d:d0:
                    cf:60:3a:52:8b:48:d1:90:18:b0:88:09:87:60:2b:
                    d2:4e:62:70:3b:39:e7:81:b7:5d:e8:c2:6c:d9:c1:
                    b7:e8:91:4d:eb:8e:e9:4b:2d:0d:d2:da:7a:b1:59:
                    35:62:e9:4b:23:41:4e:e0:3b:ad:85:59:aa:59:ff:
                    f4:77:9c:d1:ee:78:97:d7:7c:d4:c2:b2:5f:39:9e:
                    81:b6:9e:18:36:e3:78:10:08:62:23:9c:ac:13:d6:
                    5e:35:37:41:01:a1:97:fa:87:06:40:1a:0e:01:c3:
                    02:5d:ea:7f:b0:5f:4d:82:ab:ce:18:fa:27:75:7d:
                    09:b4:92:63:1a:de:52:b2:94:ed:e2:2e:4d:e6:6b:
                    a2:be:25:fc:ca:7a:62:85:de:cf:d5:27:74:f3:98:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:85:BE:99:83:39:ED:74:AD:95:51:8F:19:5F:CB:11:F2:64:67
            X509v3 Authority Key Identifier:
                keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/UYKFvpmDOe10rZVRjxlfyxHyZGc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:60:d2:25:1f:1a:18:17:57:e6:fd:f6:88:92:4a:dd:79:
         e5:1a:3d:02:46:42:6e:2e:26:d2:23:9f:e6:41:39:0d:bf:7a:
         55:92:5f:8e:a3:27:a5:8e:e6:85:70:cd:1d:ed:88:35:b9:70:
         1f:9b:18:dd:24:d6:93:3d:35:fe:5a:29:4f:92:a5:16:ed:bf:
         a3:ee:2e:6c:38:46:c4:60:5f:4d:eb:16:fe:9e:64:9f:4d:9d:
         28:7e:89:2d:d2:f3:72:d0:9a:68:ae:a4:c8:ce:a2:5e:c8:f4:
         b9:18:b9:c3:54:14:3b:0b:f9:44:98:10:64:bd:cd:80:11:5d:
         67:54:e3:5a:9a:f0:47:38:f5:a2:d9:0c:8c:ae:d4:7d:8b:97:
         ba:41:22:29:33:b6:d2:ec:a4:61:1e:34:00:ca:6f:d3:6d:1c:
         3a:65:f7:92:18:45:9d:db:18:71:5d:60:57:15:70:32:a1:a5:
         33:92:ae:be:8b:3a:72:de:2d:36:34:57:d0:12:4b:39:e0:06:
         45:d6:1f:6c:e9:30:78:0e:c8:4a:ad:0f:61:a9:31:4c:04:f7:
         c0:f8:21:ea:26:58:e9:55:62:dc:ac:9f:37:c0:0b:c0:b6:9a:
         c2:89:08:c1:19:dd:c1:63:fc:3c:11:f6:61:7b:70:44:f4:24:
         f7:97:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:27:10 2023 by rpki-client on console-ams.rpki-client.org