Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/vkE-8B_gvPG1ibdUzp_jSy1dvYU.roa
File:                     vkE-8B_gvPG1ibdUzp_jSy1dvYU.roa (raw, json)
Hash identifier:          YKNtTGXjOu1sSMT/4dOQabWDf605owlPBrhU2phXihQ=
Subject key identifier:   BE:41:3E:F0:1F:E0:BC:F1:B5:89:B7:54:CE:9F:E3:4B:2D:5D:BD:85
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       05
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/vkE-8B_gvPG1ibdUzp_jSy1dvYU.roa
Signing time:             Fri 30 Sep 2022 00:27:18 +0000
ROA not before:           Fri 30 Sep 2022 00:27:18 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     45677
IP address blocks:        103.251.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Sep 30 00:27:18 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=BE413EF01FE0BCF1B589B754CE9FE34B2D5DBD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:30:8e:47:d5:8e:a5:19:9b:1e:6d:3b:29:
                    65:67:fe:f4:2b:c0:e7:5f:df:a2:5c:6d:3c:c0:4b:
                    5b:1b:55:33:55:10:cc:d0:6b:2d:f6:17:2d:99:0f:
                    48:12:a5:f6:63:3b:45:0d:40:0f:4e:46:ed:e5:7e:
                    3f:4b:0b:a2:a9:c4:bf:f2:ea:9e:b1:96:20:2a:e2:
                    88:69:88:1f:5f:53:5c:05:cf:8a:99:11:82:8c:1e:
                    9e:dd:80:d8:e3:10:e3:07:df:54:2f:ac:9e:4c:d9:
                    3c:3a:c9:98:ad:76:3d:9e:36:40:cf:7c:ee:8c:ab:
                    65:3f:d6:92:59:cd:37:3c:26:af:8d:68:2e:b3:80:
                    0d:33:a3:ab:27:7e:fd:0d:49:57:98:9a:89:e5:f8:
                    67:d3:4d:51:d2:28:31:cc:a6:d1:e2:92:1d:b5:53:
                    f8:e9:ed:c7:6c:cc:fc:9a:45:86:73:59:97:ac:83:
                    11:08:6a:71:22:a2:1c:f6:ef:ed:57:cc:22:7b:7d:
                    9b:7a:49:63:31:79:0d:bf:43:e5:84:1b:93:7f:32:
                    db:92:48:55:36:33:61:72:73:72:8e:fd:f7:d5:93:
                    64:44:cc:37:64:cf:ab:d5:e7:6a:a1:35:08:8e:19:
                    d7:79:a9:b9:3c:8c:49:e6:06:e0:3c:ef:68:f2:7c:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:3E:F0:1F:E0:BC:F1:B5:89:B7:54:CE:9F:E3:4B:2D:5D:BD:85
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/vkE-8B_gvPG1ibdUzp_jSy1dvYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:7f:e9:66:c6:9a:bf:3b:65:19:e0:5f:db:fa:da:8e:8a:
         bc:73:cd:ff:dc:98:4a:f6:21:68:ea:5c:d5:bc:b4:e5:bc:0c:
         9f:bc:08:1e:8f:0a:ef:61:63:40:42:11:09:0f:d0:ca:c3:9a:
         dd:4a:23:a9:ae:26:ee:65:84:04:31:44:1a:54:ac:08:89:28:
         11:eb:11:a2:1e:7d:d8:13:f9:8c:be:6a:ea:a0:f8:5f:d4:fc:
         55:eb:b1:55:f8:0b:fe:9c:b4:3d:ce:f3:d9:18:c9:4d:38:43:
         22:27:0e:00:2f:48:17:10:8b:d6:48:c0:e9:79:86:0c:67:80:
         c7:41:82:0d:17:e2:7b:9d:39:ec:40:2b:c2:04:c9:e8:d3:8d:
         63:3f:86:62:94:93:70:c1:16:ea:b7:86:7c:e1:bf:94:a8:c2:
         0f:90:30:d8:95:5b:b3:d2:a2:c8:05:a3:9e:df:15:22:7d:b1:
         55:81:a2:5b:f8:50:a9:b2:49:cc:cb:8f:59:a0:20:69:42:30:
         69:93:26:a7:63:00:fa:fc:54:bd:e6:dc:09:74:22:db:ba:35:
         96:b5:40:69:7f:80:37:7f:c4:79:5e:90:2e:e4:24:d9:2c:cf:
         ca:ed:d1:44:d6:44:60:ee:18:8b:de:10:a0:bc:48:7d:db:44:
         23:44:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org