Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/50smXyQzlEvmObM0WVw55d3ogn0.roa
File:                     50smXyQzlEvmObM0WVw55d3ogn0.roa (raw, json)
Hash identifier:          3jzwZZipNX3D7LKkLjA39bFNYXZ83uccUX6UgHW1XUQ=
Subject key identifier:   E7:4B:26:5F:24:33:94:4B:E6:39:B3:34:59:5C:39:E5:DD:E8:82:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0202
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/50smXyQzlEvmObM0WVw55d3ogn0.roa
Signing time:             Mon 01 May 2023 01:35:44 +0000
ROA not before:           Mon 01 May 2023 01:35:44 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        182.249.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:44 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=E74B265F2433944BE639B334595C39E5DDE8827D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:28:99:79:e4:cd:0e:6d:87:fb:a7:d7:e5:
                    96:d7:54:55:3b:21:0c:83:7d:cf:6d:0e:05:2c:40:
                    c3:fd:10:6b:77:4d:58:bf:47:39:f2:ba:69:51:2d:
                    8c:8c:58:46:e6:bb:fa:80:26:41:bb:37:74:0e:c5:
                    0d:8b:52:e5:9a:cf:b2:d9:95:f2:ef:24:88:e2:46:
                    2f:91:ef:c6:65:38:51:28:13:c0:d8:9d:92:41:9c:
                    4f:af:5b:e8:aa:82:13:82:60:74:6f:69:aa:df:1a:
                    35:4d:ba:ee:96:bb:fe:e7:e1:83:d2:62:51:8a:67:
                    d7:8f:ba:35:95:47:1a:06:8d:2a:9a:2c:d3:f0:41:
                    a7:20:a3:7a:17:5b:d4:95:d4:5d:88:d2:e8:9f:31:
                    7b:5a:da:92:2b:f2:3b:ff:f3:cb:36:42:fc:b4:7d:
                    cc:76:d3:4e:d1:4d:43:de:67:53:49:b1:d2:89:a1:
                    be:22:b0:95:e0:23:3b:9d:a5:fb:92:b2:1e:90:96:
                    ce:c2:ee:e7:14:dd:0a:54:cb:9f:b7:66:5d:1a:e4:
                    7d:f4:a2:3e:a9:5e:ac:36:70:54:05:6c:53:ed:2a:
                    57:0b:cf:69:fa:4b:52:32:ab:46:a6:b4:dd:0f:e2:
                    72:e5:f5:ef:27:fc:c7:4f:3f:b8:ae:73:29:1f:f9:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:26:5F:24:33:94:4B:E6:39:B3:34:59:5C:39:E5:DD:E8:82:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/50smXyQzlEvmObM0WVw55d3ogn0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:f2:10:d7:69:de:58:96:ea:33:6b:dd:84:68:42:dc:b0:
         f4:9b:17:b8:a5:3f:d8:ed:c5:4b:04:85:fc:66:4a:57:b2:f6:
         34:48:05:d2:5b:c3:ca:69:a8:e1:22:f6:16:16:d0:29:e9:27:
         81:c3:2d:e9:13:3e:c1:32:b1:4d:9b:9f:45:80:57:c8:32:55:
         eb:6e:ad:b3:1f:0f:34:00:9f:9a:a7:b6:09:14:cd:ca:47:a4:
         24:74:5d:7d:55:29:14:29:e2:2f:b8:17:76:e2:89:c9:99:15:
         78:32:1a:ce:f4:66:45:08:10:3e:91:43:6c:d5:c6:18:da:46:
         71:1b:1a:85:ad:01:ec:91:fe:0f:c5:d2:e2:41:f5:e8:43:a7:
         34:88:e0:85:36:b4:63:a1:92:7f:68:b8:1f:0e:07:d9:e5:87:
         e0:98:1d:94:73:1f:c4:9b:b0:8b:12:9d:0c:f8:64:45:c3:ae:
         6c:84:38:06:56:9f:a2:31:33:36:e9:a8:e5:4e:a4:14:e2:1b:
         f4:a9:e1:6a:e4:6e:bb:72:a4:ba:9d:8d:25:73:cd:bb:59:4b:
         f9:7c:28:37:04:a8:95:b8:7a:75:6f:aa:f8:00:d1:9b:c7:90:
         ab:b2:38:d7:a8:26:fa:61:ff:16:cf:1c:2d:64:a2:13:e5:f8:
         7d:26:cd:e9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM1NDRaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEU3NEIyNjVGMjQzMzk0
NEJFNjM5QjMzNDU5NUMzOUU1RERFODgyN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw8SiZeeTNDm2H+6fX5ZbXVFU7IQyDfc9tDgUsQMP9EGt3TVi/
RznyumlRLYyMWEbmu/qAJkG7N3QOxQ2LUuWaz7LZlfLvJIjiRi+R78ZlOFEoE8DY
nZJBnE+vW+iqghOCYHRvaarfGjVNuu6Wu/7n4YPSYlGKZ9ePujWVRxoGjSqaLNPw
Qacgo3oXW9SV1F2I0uifMXta2pIr8jv/88s2Qvy0fcx2007RTUPeZ1NJsdKJob4i
sJXgIzudpfuSsh6Qls7C7ucU3QpUy5+3Zl0a5H30oj6pXqw2cFQFbFPtKlcLz2n6
S1Iyq0amtN0P4nLl9e8n/MdPP7iucykf+UvjAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU50smXyQzlEvmObM0WVw55d3ogn0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzUwc21YeVF6bEV2bU9iTTBXVnc1NWQzb2duMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwC2+TANBgkqhkiG9w0BAQsFAAOCAQEAPAvyENdp3liW6jNr3YRoQtyw9JsX
uKU/2O3FSwSF/GZKV7L2NEgF0lvDymmo4SL2FhbQKekngcMt6RM+wTKxTZufRYBX
yDJV626tsx8PNACfmqe2CRTNykekJHRdfVUpFCniL7gXduKJyZkVeDIazvRmRQgQ
PpFDbNXGGNpGcRsaha0B7JH+D8XS4kH16EOnNIjghTa0Y6GSf2i4Hw4H2eWH4Jgd
lHMfxJuwixKdDPhkRcOubIQ4BlafojEzNumo5U6kFOIb9KnhauRuu3Kkup2NJXPN
u1lL+XwoNwSolbh6dW+q+ADRm8eQq7I416gm+mH/Fs8cLWSiE+X4fSbN6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:21 2024 by rpki-client on console-ams.rpki-client.org