Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/14G1Ud6O91WkMAQkd9wOeEfXaDg.roa
File:                     14G1Ud6O91WkMAQkd9wOeEfXaDg.roa (raw, json)
Hash identifier:          tJXobiEA0IDbcz3fxfr0+HVG+bpQ2t6Tkg5d8tEq7DE=
Subject key identifier:   D7:81:B5:51:DE:8E:F7:55:A4:30:04:24:77:DC:0E:78:47:D7:68:38
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0372
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/14G1Ud6O91WkMAQkd9wOeEfXaDg.roa
Signing time:             Sat 31 Aug 2024 01:29:41 +0000
ROA not before:           Sat 31 Aug 2024 01:29:41 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.142.0.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:41 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D781B551DE8EF755A430042477DC0E7847D76838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:7a:3e:9f:56:3d:99:8b:47:9b:a8:cb:86:
                    02:25:b2:7a:b1:84:e0:de:1b:cd:32:b3:ca:51:8d:
                    c9:a9:b0:34:a5:2b:b7:1a:a1:75:e0:4a:a8:4d:e9:
                    c6:ff:c5:66:cb:b2:85:73:50:65:a6:2f:98:f6:83:
                    50:fa:3d:77:b6:a4:a5:45:13:dd:e8:cf:36:76:40:
                    d3:ce:23:7b:22:97:c2:2f:71:9a:98:a8:b8:a7:62:
                    4b:44:0c:fb:f6:08:4f:3e:79:bd:53:38:70:21:e3:
                    cf:06:b0:a6:1f:b4:97:0a:5b:50:7b:d2:bd:7d:b1:
                    84:14:56:7b:7d:f4:7e:77:58:83:c5:70:2c:f9:6c:
                    9b:2c:c7:0b:4e:8f:b7:28:70:af:c5:24:bc:39:ad:
                    6c:7e:b5:3b:36:df:32:47:5b:31:8c:72:f6:e2:93:
                    1d:d8:b6:14:9d:9c:f9:38:bf:f9:0f:69:1b:f5:f3:
                    39:4e:25:ad:6f:e5:3f:5f:46:f2:48:ad:17:df:18:
                    18:1e:75:30:a5:8b:ea:17:54:80:00:77:b5:1c:22:
                    a3:61:69:86:0f:05:85:cc:b6:d0:c4:69:af:75:72:
                    82:9b:9f:f0:c5:92:38:73:82:2e:3b:99:0a:52:32:
                    4b:c5:5d:c7:99:d1:c8:33:01:0d:cc:cf:9c:74:11:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:81:B5:51:DE:8E:F7:55:A4:30:04:24:77:DC:0E:78:47:D7:68:38
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/14G1Ud6O91WkMAQkd9wOeEfXaDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.142.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8e:51:d2:52:f6:01:27:e1:c0:49:9b:a2:06:e7:92:4b:5a:95:
         e0:3d:26:f7:d7:b4:a1:54:8e:62:a4:b3:9c:b5:c1:7f:1b:c7:
         4f:95:f0:28:5f:d4:79:f3:9b:87:83:06:07:15:79:56:4f:19:
         6c:19:43:14:8e:38:97:a5:ba:ec:b8:cb:4f:78:74:9f:97:0b:
         52:dd:5b:dd:1d:68:80:14:42:11:be:24:56:04:4f:4e:f0:a8:
         1c:77:f6:f5:5a:ab:4a:d6:99:59:0d:f4:ed:68:7f:40:01:0a:
         4e:6e:7d:1f:07:88:94:eb:8b:8f:3a:24:00:f9:f0:3c:1a:93:
         b8:0c:97:bc:bc:6f:73:38:05:6d:d2:d8:28:d2:fa:46:98:9c:
         8d:51:2a:d0:08:14:20:fd:af:16:ea:75:3f:20:3a:35:e4:27:
         d8:3f:df:76:ed:76:f8:41:06:7c:ed:bb:a6:5c:d2:a5:37:68:
         2b:27:2e:6d:19:09:64:2d:ec:94:84:35:0d:76:d6:ce:5b:a1:
         a7:b4:fb:d9:26:c5:da:b8:e7:82:da:84:59:15:14:c7:8f:24:
         1a:83:3c:d1:38:ce:98:45:b1:0e:25:09:b1:7a:d3:0f:91:8e:
         3b:11:a3:55:4d:54:cf:2a:98:2c:d9:38:71:04:37:aa:43:96:
         2e:43:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:53 2025 by rpki-client