Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3LK42V5IzMM4qBwrzb4XXdwo0ww.roa
File:                     3LK42V5IzMM4qBwrzb4XXdwo0ww.roa (raw, json)
Hash identifier:          zEJDZ9YpG9QM0yGsybnBBAPtET5tzivYZjZdVMZ1Xvk=
Subject key identifier:   DC:B2:B8:D9:5E:48:CC:C3:38:A8:1C:2B:CD:BE:17:5D:DC:28:D3:0C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0203
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3LK42V5IzMM4qBwrzb4XXdwo0ww.roa
Signing time:             Mon 01 May 2023 01:35:45 +0000
ROA not before:           Mon 01 May 2023 01:35:45 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.64.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:45 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=DCB2B8D95E48CCC338A81C2BCDBE175DDC28D30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:d7:af:80:7b:e8:98:be:1c:3d:b7:8b:05:
                    03:1f:0e:d4:cd:ce:61:71:d6:69:ee:cf:2e:9d:50:
                    06:f0:5b:6a:da:eb:eb:8e:5f:46:da:14:60:63:4f:
                    03:69:63:13:42:ee:68:3a:49:8e:7d:1e:cd:fa:c8:
                    52:be:a3:77:da:e6:04:84:74:a2:64:36:b3:88:f4:
                    a0:7c:66:8c:ec:a6:85:fd:a8:7b:f2:6d:06:47:c6:
                    e3:61:00:7d:54:81:3a:fd:4e:67:55:22:94:ac:3c:
                    67:7f:09:a0:34:88:17:6a:10:51:fb:76:e8:8d:b5:
                    18:fe:92:ac:2b:60:6f:33:bd:af:8c:fc:94:3d:77:
                    f1:d0:de:0e:61:37:3f:f7:a6:13:44:b6:d6:e3:0d:
                    f3:97:88:83:ba:08:52:52:d0:29:8d:5b:95:8d:ec:
                    eb:4e:23:a4:af:c8:71:4d:eb:c4:a1:e9:15:9c:a2:
                    fb:93:fb:9f:ba:7d:6a:4a:01:18:22:e5:15:73:97:
                    82:e2:b8:f5:a2:4d:a3:3d:9e:3f:be:38:8e:60:9c:
                    b2:99:94:86:43:93:50:7c:08:41:29:48:2b:7f:ca:
                    49:59:2f:52:03:b6:b1:e1:3c:bf:77:a9:54:87:fc:
                    14:98:db:96:e3:b5:ed:c0:9d:3a:bd:12:be:31:76:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B2:B8:D9:5E:48:CC:C3:38:A8:1C:2B:CD:BE:17:5D:DC:28:D3:0C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3LK42V5IzMM4qBwrzb4XXdwo0ww.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:52:74:06:bb:cb:65:2e:8a:67:09:cf:0c:c6:35:96:71:
         0c:f7:18:14:70:b9:d8:7a:f8:ff:a6:c5:8b:b9:74:0d:99:7c:
         62:8c:32:6e:07:79:55:53:48:21:5b:9f:e6:74:8a:36:63:53:
         5c:5f:d7:ba:37:fe:38:3d:d0:07:30:82:e0:46:d5:06:5c:44:
         17:e2:c6:d6:f1:a2:4f:5f:25:c4:bb:9c:0b:04:bb:98:73:85:
         ee:5e:87:49:52:fb:e0:3f:e3:1b:d8:d9:f6:99:56:83:63:f9:
         6b:20:08:9f:cd:c5:61:a4:8a:71:f9:dd:c0:b0:6a:27:99:54:
         34:e1:98:c6:53:22:92:16:0e:0d:8c:43:33:1a:df:66:83:29:
         d6:2e:0f:e1:5e:e7:9d:84:f9:ee:a0:8f:9c:81:a9:a4:a1:3c:
         bb:9d:28:dd:29:fd:cd:58:35:80:22:d1:bc:42:f1:39:76:02:
         04:67:35:24:05:e4:80:29:2e:5e:e1:d9:d4:23:b0:76:1f:59:
         0f:77:87:b0:e8:7a:8d:1b:bd:e0:b3:59:c3:82:56:80:1b:73:
         d8:4d:26:09:40:c4:b5:63:76:b0:0a:f4:6a:59:5b:26:4a:ce:
         8c:7f:5e:10:1b:c7:6f:64:0f:84:54:9b:61:20:cb:e8:70:ba:
         ff:4c:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:21 2024 by rpki-client on console-ams.rpki-client.org