Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/rdbD23l_MjUyJBsT4lWsUqkQetc.roa
File:                     rdbD23l_MjUyJBsT4lWsUqkQetc.roa (raw, json)
Hash identifier:          HA+DudeTXo1lwdNzLIl1DTfunHgBA+7sUHiaqohF6hU=
Subject key identifier:   AD:D6:C3:DB:79:7F:32:35:32:24:1B:13:E2:55:AC:52:A9:10:7A:D7
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       5F
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rdbD23l_MjUyJBsT4lWsUqkQetc.roa
Signing time:             Mon 01 Aug 2022 01:29:05 +0000
ROA not before:           Mon 01 Aug 2022 01:29:05 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        111.168.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:05 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=ADD6C3DB797F323532241B13E255AC52A9107AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:a3:83:f0:45:6c:69:a7:88:bc:ae:b1:5a:
                    a8:32:9a:15:7b:6f:b0:a5:16:64:10:c4:81:f5:dc:
                    52:1b:64:34:1b:b7:b8:89:3b:32:f6:42:8a:15:0a:
                    59:e7:c6:21:b8:03:1d:06:a7:4b:53:dc:39:d5:44:
                    89:37:b9:88:d4:69:32:8c:eb:fa:bc:78:93:8e:19:
                    b8:0c:57:d6:64:17:d7:7c:41:6a:7f:0e:41:02:35:
                    37:57:3b:83:cf:81:b0:84:f2:04:94:ce:ab:73:7b:
                    a4:d1:2c:00:93:8d:df:10:ce:ce:8b:77:44:99:61:
                    6a:d9:36:a9:bb:f0:0c:44:03:e0:c6:d1:0a:76:57:
                    19:90:6e:f1:f3:c8:56:9c:38:c1:a2:75:46:fd:7a:
                    61:5a:6c:23:84:fb:55:bd:0c:e4:75:e3:1e:44:3d:
                    a0:b5:46:92:22:f0:49:bc:ed:24:f2:34:31:26:a0:
                    50:63:a6:d4:75:39:41:c5:92:53:c0:b1:4a:28:d3:
                    eb:db:4e:68:ba:e5:b2:e0:0f:b7:96:1b:d2:b3:1c:
                    3b:5e:b5:86:6e:4c:2f:53:cb:93:f8:35:9e:fc:0e:
                    2c:74:4d:1a:90:5e:1f:9d:2b:a8:85:65:db:b4:46:
                    87:a5:a0:8d:0f:c6:6a:96:fb:1a:98:99:6c:61:2d:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:C3:DB:79:7F:32:35:32:24:1B:13:E2:55:AC:52:A9:10:7A:D7
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rdbD23l_MjUyJBsT4lWsUqkQetc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.168.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a8:fb:25:34:49:42:91:f7:e5:22:74:09:96:0b:d3:6a:1e:1d:
         cd:53:27:9c:9a:ab:de:41:51:c3:23:1b:5f:47:74:df:dd:46:
         de:ae:a3:22:5f:cb:34:7f:23:ee:85:82:93:b8:5d:ca:9e:82:
         0e:ea:dd:c7:85:45:6a:17:d3:3a:4a:6a:0a:be:4a:96:9f:a8:
         c2:9a:ec:c5:ef:a9:41:59:d9:f1:32:b2:f3:44:64:a2:0e:98:
         d9:c8:b7:34:95:a1:a9:ab:ed:4a:3d:ac:5b:f4:33:5d:23:8e:
         6e:a0:00:4b:80:69:84:4b:51:b0:54:71:ab:42:7c:78:93:37:
         0a:8b:27:5f:6d:a1:13:08:83:08:6e:8d:61:af:f8:73:f7:b0:
         4d:42:a2:06:41:49:9f:ab:18:f3:14:94:35:8a:2a:4c:8d:8d:
         58:bb:f4:e2:11:c6:af:eb:ad:56:da:53:73:67:32:ee:ed:99:
         27:9c:98:16:07:41:93:ed:13:c2:67:42:24:41:85:91:07:bd:
         c7:2b:15:97:61:53:35:d0:5d:57:92:a1:5c:ff:22:3f:cf:7a:
         22:78:f9:d5:6d:8a:07:64:7c:e1:f6:e6:1d:70:55:77:c4:7e:
         8e:de:ec:fc:99:0e:ab:e7:a6:46:fe:ab:f7:1c:fa:9a:db:14:
         ae:53:a2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org