Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0DamIupHhmOY7LKh-CvlEPMntjA.roa
File:                     0DamIupHhmOY7LKh-CvlEPMntjA.roa (raw, json)
Hash identifier:          w+f0Xe9NLdS2hxxNjUOuClNruUSztrFfyFm65EIId8s=
Subject key identifier:   D0:36:A6:22:EA:47:86:63:98:EC:B2:A1:F8:2B:E5:10:F3:27:B6:30
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       036D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0DamIupHhmOY7LKh-CvlEPMntjA.roa
Signing time:             Wed 31 Jul 2024 01:31:43 +0000
ROA not before:           Wed 31 Jul 2024 01:31:43 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.64.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jul 31 01:31:43 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=D036A622EA47866398ECB2A1F82BE510F327B630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:a1:4a:5c:72:49:3e:01:65:34:d5:67:e2:
                    0b:3b:31:a8:30:a2:e8:0a:9d:e5:f2:18:79:fd:17:
                    9d:de:5c:4b:c9:3e:32:78:7f:5b:ae:9d:70:13:95:
                    d7:f0:f6:30:8b:2b:62:d0:05:19:ee:da:68:a6:fc:
                    5b:44:7f:95:a0:4b:47:b6:5c:83:5d:8f:fb:91:10:
                    b0:cc:09:31:c8:16:d0:1b:ab:0f:30:46:0a:38:fd:
                    1f:de:76:6b:b5:3a:b3:1f:45:5b:e2:e3:7c:67:85:
                    2b:17:0d:e5:88:4c:c9:36:91:02:38:84:c0:b5:ca:
                    5e:26:b7:12:86:f2:82:eb:14:78:9a:8f:84:d4:91:
                    64:e2:c6:49:54:29:7e:fb:61:84:35:07:55:01:29:
                    3b:87:84:6b:8b:6d:d6:ca:0e:8b:25:53:32:43:60:
                    df:fc:dd:0b:b4:ae:51:4c:25:09:28:44:ea:20:81:
                    01:7e:83:77:3c:44:ce:88:f9:5e:f6:e3:8e:71:ad:
                    0f:63:f2:e1:1a:8d:26:6f:6f:9c:12:e9:38:33:0a:
                    b1:85:41:4c:95:45:f7:44:ed:55:e0:00:e7:67:17:
                    e1:43:ee:37:94:00:8c:be:16:25:a6:e1:78:d0:3d:
                    5d:33:58:f2:95:7b:8c:d9:55:9c:c6:9c:c6:e7:b2:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:A6:22:EA:47:86:63:98:EC:B2:A1:F8:2B:E5:10:F3:27:B6:30
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0DamIupHhmOY7LKh-CvlEPMntjA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:70:ed:4f:20:69:be:e6:68:46:e3:cf:92:e8:f8:e0:33:0a:
         9f:d5:14:e0:49:53:a7:01:07:22:3f:f0:08:d5:3e:bc:56:c3:
         1d:4f:7d:5d:b4:a0:11:89:1b:0f:0e:94:cb:b2:6e:df:ac:38:
         d8:19:37:69:d0:d1:b3:d3:da:8d:3d:91:e0:db:b4:77:48:51:
         33:58:67:51:27:1d:fb:d3:b4:5c:b7:ac:13:08:77:fc:01:11:
         e8:33:a0:5c:aa:00:ca:58:c2:4d:88:01:f5:a4:94:51:af:41:
         ec:e1:87:a2:3a:6f:db:b6:57:07:e4:fd:67:00:de:fe:b2:4b:
         29:f7:46:2e:15:ca:e2:08:b0:9a:43:a8:09:c2:b6:9c:12:f5:
         20:d6:e0:5e:34:72:12:4a:e7:a0:55:3b:c2:1f:b5:f3:4c:76:
         ce:da:10:65:71:7f:d2:3a:96:cc:6c:a7:4f:ff:29:03:c1:5a:
         db:fa:9b:b2:b7:ab:11:e3:5a:ec:5d:55:83:f0:c2:58:d0:4c:
         bd:ff:fd:be:c5:06:41:b7:46:b5:ce:d1:fe:29:ef:04:b8:6b:
         cd:0e:f7:53:1d:cf:58:31:2c:31:e3:44:5d:92:67:72:d5:ac:
         f6:f6:53:92:eb:9f:73:93:57:b6:9a:91:02:36:6a:1e:c5:61:
         62:d9:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:50:04 2025 by rpki-client