Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/hgjcJ4IdiKj9zZdg6LAh8tiXC44.roa
File:                     hgjcJ4IdiKj9zZdg6LAh8tiXC44.roa (raw, json)
Hash identifier:          T6Mewzg3UIsmUYkzP1cJd1bON/1gY4iRrzZdGsGNyxs=
Subject key identifier:   86:08:DC:27:82:1D:88:A8:FD:CD:97:60:E8:B0:21:F2:D8:97:0B:8E
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       29
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/hgjcJ4IdiKj9zZdg6LAh8tiXC44.roa
Signing time:             Sat 01 Oct 2022 01:29:50 +0000
ROA not before:           Sat 01 Oct 2022 01:29:50 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     17707
IP address blocks:        202.5.64.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Oct  1 01:29:50 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=8608DC27821D88A8FDCD9760E8B021F2D8970B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:dc:3e:69:f8:13:61:00:2d:1f:b6:21:23:
                    ec:9f:3c:2b:68:a3:cc:01:4b:1e:d1:b9:cc:3f:cb:
                    b7:d3:01:dd:b5:f0:64:cc:32:3e:50:4f:b2:fe:de:
                    47:f6:5c:b8:4b:42:1a:9d:fd:1f:44:60:a7:6b:d1:
                    60:1c:da:ef:1a:1a:08:33:be:89:85:3f:ce:9b:db:
                    54:cd:63:fe:b2:1f:46:d0:20:8a:97:0c:69:ca:68:
                    76:bd:0c:b5:c8:04:81:91:37:f8:ca:91:1c:7b:d9:
                    ed:71:66:f4:a2:ba:93:13:71:b4:2b:d3:d8:0d:0b:
                    bc:aa:da:42:db:6a:7c:55:36:e6:0b:e2:b8:40:b8:
                    20:7f:0c:74:db:89:4d:77:87:57:e0:50:bf:05:74:
                    ea:75:38:9f:fe:be:21:4d:24:96:c0:11:99:46:60:
                    a9:b7:7c:5e:aa:3f:f7:de:01:df:d6:1e:4b:70:85:
                    e2:84:c5:d3:73:74:3c:38:41:14:54:fa:6c:42:8b:
                    af:15:bc:17:55:5f:ef:a4:50:0a:16:ef:64:b7:5e:
                    35:68:4c:7a:5a:c7:04:80:93:4b:6c:17:90:f8:e0:
                    12:51:5e:5e:e2:d3:9b:b7:bc:e0:3d:12:37:70:2f:
                    4b:30:e3:65:93:3d:76:af:03:35:13:23:dd:f6:2a:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:08:DC:27:82:1D:88:A8:FD:CD:97:60:E8:B0:21:F2:D8:97:0B:8E
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/hgjcJ4IdiKj9zZdg6LAh8tiXC44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d4:8b:60:be:f3:6c:af:2a:6f:7c:d6:80:92:75:51:06:c7:1c:
         93:73:5c:ad:ef:9e:75:e9:a7:96:09:d3:b6:b2:6a:bb:fb:81:
         ab:e7:c1:ed:ef:a7:5a:72:2b:14:e4:ac:04:3c:09:72:60:b7:
         cc:84:ca:a0:ed:9f:c6:ea:64:ba:ca:4d:56:84:83:de:25:40:
         5c:0e:ca:01:d7:0b:25:57:08:4f:2f:ae:55:ab:95:3b:30:de:
         d5:14:2e:1e:cf:2a:c1:34:45:22:13:3c:20:57:8e:5d:25:8c:
         d1:da:d9:58:d4:26:9c:b6:b6:be:ce:32:50:c8:0e:47:fe:f4:
         bd:30:b1:82:38:48:2a:00:c5:c6:fe:1c:c5:6b:b6:05:1c:c5:
         a9:57:22:a7:ff:7d:57:cf:42:31:05:34:92:31:c8:06:4d:17:
         cb:9f:2b:7f:d9:19:57:78:22:5b:e3:26:3a:f0:fd:7a:fb:46:
         31:2d:29:76:a2:8d:0f:3e:fb:09:35:a9:a8:f3:7b:40:35:32:
         3d:18:cc:c1:09:f1:13:dc:58:f0:5e:65:ec:4f:d3:1e:e6:3a:
         45:08:c4:fc:7b:b7:d6:66:ea:64:88:ba:c3:aa:9d:ff:a2:29:
         77:49:3a:03:b3:32:d3:9b:ca:96:d2:c0:07:a2:0f:22:94:8e:
         32:df:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 02:08:18 2023 by rpki-client on console-fra.rpki-client.org