Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-n4NrZ9aTI9QfNQTfpG7YcrPT1g.roa
File:                     -n4NrZ9aTI9QfNQTfpG7YcrPT1g.roa (raw, json)
Hash identifier:          PWokWFBUFhISqlTsIW0JNYq5JOCvFhuP/Aj2U4yyVJM=
Subject key identifier:   FA:7E:0D:AD:9F:5A:4C:8F:50:7C:D4:13:7E:91:BB:61:CA:CF:4F:58
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0248
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-n4NrZ9aTI9QfNQTfpG7YcrPT1g.roa
Signing time:             Tue 01 Aug 2023 01:28:43 +0000
ROA not before:           Tue 01 Aug 2023 01:28:43 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        14.13.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 09:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug  1 01:28:43 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=FA7E0DAD9F5A4C8F507CD4137E91BB61CACF4F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:f7:88:07:37:d3:a8:8b:0f:f0:c5:c2:4b:
                    2d:ae:17:2f:30:d9:a9:98:a0:29:6e:e6:ad:84:e1:
                    86:fb:de:76:4b:b6:93:3b:e5:69:c7:ce:27:c1:81:
                    b4:66:58:ae:82:72:bd:20:fe:6a:56:55:3d:32:de:
                    ee:2f:9b:0e:d9:f7:b2:e0:15:1a:af:6e:1d:79:e1:
                    f2:e5:24:63:13:b8:7e:67:5b:bb:61:bb:fd:5a:6a:
                    d6:37:64:6a:27:56:c1:e1:3a:d9:31:e4:5d:4b:54:
                    a7:ec:af:ea:a8:49:85:3d:d9:98:db:f6:0e:1c:4e:
                    9a:4b:22:84:bf:4d:68:ae:20:b8:f4:28:0a:5d:10:
                    db:8f:7c:7d:83:dd:38:a8:86:9c:a4:42:e5:8a:7e:
                    b3:86:1b:07:1c:0f:65:3b:55:d0:d4:6f:63:fd:d8:
                    69:ff:bb:51:9f:a0:48:99:eb:cf:b6:c6:13:2c:60:
                    0b:4b:86:ee:db:9a:8a:6a:62:95:d3:4b:7b:81:ef:
                    92:83:70:6f:24:7c:fb:99:79:5c:85:44:42:f3:e6:
                    ad:da:eb:14:7c:7d:0f:27:61:a0:05:86:d8:c6:90:
                    4a:7b:5b:6d:f8:39:ec:e5:85:02:f1:d5:50:c4:2a:
                    14:01:a6:74:65:96:13:3b:97:5c:d4:d3:e9:24:6a:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7E:0D:AD:9F:5A:4C:8F:50:7C:D4:13:7E:91:BB:61:CA:CF:4F:58
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-n4NrZ9aTI9QfNQTfpG7YcrPT1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:4b:3a:d4:1e:ef:fd:8b:19:af:5d:1c:16:53:65:81:00:
         17:bd:c8:0d:fd:11:54:c3:12:b2:cd:bb:13:18:57:84:92:47:
         f2:77:86:f8:4e:03:85:d5:1c:b2:60:1f:e9:72:ea:40:3f:e8:
         ae:db:94:84:a0:1a:a3:de:90:26:cb:05:5c:e4:68:c7:c7:24:
         e0:d7:e8:2f:71:f2:c0:61:38:f9:f2:dc:5b:6f:93:f3:97:43:
         d3:39:5e:00:94:52:bd:01:c2:c9:97:67:ef:e1:f5:95:2a:bf:
         21:31:2c:37:64:5b:86:9c:0b:80:9f:df:3a:08:74:65:c2:7b:
         ef:c2:36:41:66:17:27:b0:4f:00:4d:44:05:e2:2a:8f:25:04:
         41:1a:71:35:84:19:ce:3e:62:95:3b:3b:51:22:05:db:e3:4d:
         17:30:d2:4f:7b:75:73:92:f5:ed:a3:e6:9c:7c:57:b8:c1:f8:
         9e:f8:27:51:a5:b5:15:7f:d3:de:63:35:8c:b9:3a:c1:d7:0d:
         a1:c1:65:66:d2:f2:78:61:6a:99:9b:c3:5b:da:cf:ed:82:9c:
         d8:29:5b:8e:bd:56:f3:38:39:f4:78:ee:5d:94:d7:08:a2:01:
         dd:91:82:80:31:8d:f4:3d:71:76:ef:5b:a5:8e:66:0e:fb:2e:
         43:95:f2:c1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA4MDEw
MTI4NDNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEZBN0UwREFEOUY1QTRD
OEY1MDdDRDQxMzdFOTFCQjYxQ0FDRjRGNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsxfeIBzfTqIsP8MXCSy2uFy8w2amYoClu5q2E4Yb73nZLtpM7
5WnHzifBgbRmWK6Ccr0g/mpWVT0y3u4vmw7Z97LgFRqvbh154fLlJGMTuH5nW7th
u/1aatY3ZGonVsHhOtkx5F1LVKfsr+qoSYU92Zjb9g4cTppLIoS/TWiuILj0KApd
ENuPfH2D3TiohpykQuWKfrOGGwccD2U7VdDUb2P92Gn/u1GfoEiZ68+2xhMsYAtL
hu7bmopqYpXTS3uB75KDcG8kfPuZeVyFRELz5q3a6xR8fQ8nYaAFhtjGkEp7W234
OezlhQLx1VDEKhQBpnRllhM7l1zU0+kkapDNAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU+n4NrZ9aTI9QfNQTfpG7YcrPT1gwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLy1uNE5yWjlhVEk5UWZOUVRmcEc3WWNyUFQxZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAODTANBgkqhkiG9w0BAQsFAAOCAQEAAmpLOtQe7/2LGa9dHBZTZYEAF73I
Df0RVMMSss27ExhXhJJH8neG+E4DhdUcsmAf6XLqQD/ortuUhKAao96QJssFXORo
x8ck4NfoL3HywGE4+fLcW2+T85dD0zleAJRSvQHCyZdn7+H1lSq/ITEsN2RbhpwL
gJ/fOgh0ZcJ778I2QWYXJ7BPAE1EBeIqjyUEQRpxNYQZzj5ilTs7USIF2+NNFzDS
T3t1c5L17aPmnHxXuMH4nvgnUaW1FX/T3mM1jLk6wdcNocFlZtLyeGFqmZvDW9rP
7YKc2Clbjr1W8zg59HjuXZTXCKIB3ZGCgDGN9D1xdu9bpY5mDvsuQ5XywQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org