Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cl4A_XFOyJ2Un9QldC2hGMK8WJs.roa
File:                     Cl4A_XFOyJ2Un9QldC2hGMK8WJs.roa (raw, json)
Hash identifier:          To3JJfFPgI/AoH11e0EJt+S+dvwjqtpoNpXA5fuhFDw=
Subject key identifier:   0A:5E:00:FD:71:4E:C8:9D:94:9F:D4:25:74:2D:A1:18:C2:BC:58:9B
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       61
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cl4A_XFOyJ2Un9QldC2hGMK8WJs.roa
Signing time:             Mon 01 Aug 2022 01:29:06 +0000
ROA not before:           Mon 01 Aug 2022 01:29:06 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        119.240.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:06 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=0A5E00FD714EC89D949FD425742DA118C2BC589B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:a9:36:10:13:43:5d:62:bf:0a:64:8b:97:
                    47:5b:93:9c:00:40:a0:d3:e8:e9:63:0e:0e:40:27:
                    00:12:2a:9c:6b:35:b0:1f:8d:57:35:60:a7:35:86:
                    d2:19:10:e2:7f:a2:aa:28:bc:84:4e:8b:76:de:73:
                    81:54:6f:a2:22:8a:73:d8:61:03:cc:99:78:6d:b9:
                    aa:51:e9:56:5b:43:f5:e4:42:36:da:22:b9:44:1f:
                    68:f9:43:09:0b:f3:b1:3d:77:b1:85:8d:60:86:54:
                    3f:83:39:02:5c:cd:84:4c:49:a0:d3:6e:46:35:7d:
                    bd:ed:de:8b:67:9e:97:96:5d:fb:6f:76:98:31:be:
                    c5:65:52:ea:19:8b:2d:67:9d:69:08:da:a4:9c:50:
                    5e:bf:e4:a5:a2:34:4f:f0:9f:d5:0b:e3:14:50:3f:
                    c0:e6:06:1e:ad:24:c6:4a:60:29:db:bf:2a:69:5b:
                    c7:36:c6:df:e7:11:7c:95:c6:f7:ae:a0:48:a8:9e:
                    7b:86:45:a7:47:42:95:f6:c1:d1:a4:54:a9:fc:4e:
                    81:bf:be:b8:5a:b1:39:cb:f2:99:7d:2c:a0:38:93:
                    2e:12:c1:ff:ca:6c:9d:8c:c0:10:0a:6f:f9:5d:93:
                    49:d4:a4:61:0f:b3:fe:e1:5b:ce:05:9e:f4:43:14:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:00:FD:71:4E:C8:9D:94:9F:D4:25:74:2D:A1:18:C2:BC:58:9B
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Cl4A_XFOyJ2Un9QldC2hGMK8WJs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.240.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:f2:ba:8f:22:84:4e:71:69:8e:05:24:9d:f8:02:da:9f:
         67:c6:65:df:b4:01:06:e0:30:87:97:92:9a:af:17:7d:37:7a:
         da:3c:a2:8e:37:c0:c4:d1:c6:3b:99:f0:2a:42:4b:dc:58:7b:
         f3:b9:cd:94:84:d1:c4:8d:44:7b:03:c6:3f:52:92:2f:c7:64:
         78:53:75:81:36:08:f9:d6:6a:b5:3e:d2:40:cc:c7:c0:3e:0d:
         88:98:ac:d0:65:4d:2d:74:bb:ce:14:39:3d:58:03:dd:10:c7:
         d7:a3:da:b5:92:93:d9:a6:12:4d:b5:b9:75:83:8a:d2:a9:ac:
         4d:12:b7:a1:f6:72:f6:0d:e6:b1:58:eb:24:85:04:ec:86:2d:
         91:cd:69:36:ae:86:11:61:5a:26:41:8b:3c:3a:69:f7:44:6c:
         c6:25:19:79:79:0a:f4:66:b3:a6:75:d4:aa:ff:eb:b7:af:97:
         00:52:e2:a6:c9:a4:94:ed:a6:70:3f:ea:df:54:78:27:14:6e:
         dc:91:c8:4b:7e:83:ad:52:7e:ab:c9:00:a5:a7:a0:a5:e9:26:
         bf:ff:d3:7d:65:ec:0e:7c:8c:91:a3:d5:9f:0a:c0:8b:4b:01:
         20:d5:91:c6:1f:cf:0c:8f:fd:38:e2:2c:dc:87:06:b3:67:2e:
         96:88:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org