Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5e3zdv85o_O32GqaVUmqnjBxMi8.roa
File:                     5e3zdv85o_O32GqaVUmqnjBxMi8.roa (raw, json)
Hash identifier:          DKyB6ds3nCbLwDIr3OS3vJvgf/tsGZryzKCRVB4mJLo=
Subject key identifier:   E5:ED:F3:76:FF:39:A3:F3:B7:D8:6A:9A:55:49:AA:9E:30:71:32:2F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       036E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5e3zdv85o_O32GqaVUmqnjBxMi8.roa
Signing time:             Wed 31 Jul 2024 01:31:44 +0000
ROA not before:           Wed 31 Jul 2024 01:31:44 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.186.64.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jul 31 01:31:44 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=E5EDF376FF39A3F3B7D86A9A5549AA9E3071322F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:ff:73:08:30:a5:a6:69:c0:c8:1c:00:d8:
                    1d:a2:58:94:d8:05:6c:23:4d:c4:26:c0:22:58:f4:
                    ea:ee:16:54:ba:57:cd:a4:47:39:b9:02:ff:49:5f:
                    16:00:ff:e4:fd:b9:bc:a2:5e:94:bc:c4:c0:47:ae:
                    c0:a4:c9:fa:71:d7:11:c9:bf:31:01:40:86:51:4c:
                    64:69:04:ef:76:b0:76:c4:55:86:dd:e1:45:e7:ea:
                    c1:51:ab:53:5c:5b:d3:56:6f:b4:c7:72:01:7e:a2:
                    0c:3b:d7:4f:5f:65:0f:b2:ed:4c:a7:a2:0d:61:12:
                    ba:dc:66:78:e1:d3:24:ba:5b:60:37:de:dd:63:f5:
                    b4:01:1d:29:bd:af:b5:a4:19:28:43:1b:92:e7:b9:
                    13:4e:22:df:e7:68:7d:29:fe:ac:36:6e:da:27:1a:
                    81:c7:11:ef:82:42:2f:85:09:07:0e:cb:16:a4:83:
                    2b:a3:0d:40:88:d6:40:06:0f:86:c2:25:50:52:52:
                    43:c6:70:ae:f9:2f:72:19:6d:23:73:18:69:f1:4a:
                    90:54:c2:8e:d3:ce:98:96:fa:46:78:20:86:7e:4e:
                    a8:02:20:bf:7b:a4:5a:4d:78:4c:af:05:19:5c:f5:
                    79:39:4c:a9:70:8c:5e:cf:92:9e:a9:80:54:4c:09:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:F3:76:FF:39:A3:F3:B7:D8:6A:9A:55:49:AA:9E:30:71:32:2F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5e3zdv85o_O32GqaVUmqnjBxMi8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:0a:72:10:ad:69:06:6b:ae:18:5f:2b:c0:5f:ff:a0:1f:
         97:d5:41:d4:ce:37:ba:61:6a:a2:cc:0a:ad:6c:ae:69:e2:08:
         c7:1a:25:e0:3b:c6:c1:0b:47:1e:7f:66:60:de:87:52:f4:9b:
         17:ab:70:a4:34:6b:9c:5a:4f:e1:7f:5d:31:a4:ba:25:10:4a:
         bf:c7:c4:4c:0d:5f:33:d6:33:cd:a9:85:18:ab:52:0e:28:63:
         48:f2:6d:c5:44:66:9f:e5:dc:b4:cc:e8:55:64:51:39:16:c9:
         14:3c:65:8f:2f:dc:1a:0d:40:36:4e:eb:11:cc:ca:78:cd:d8:
         a8:7a:a9:40:6c:9a:c9:ab:e9:20:9b:57:a7:8b:ab:1e:fe:31:
         35:68:be:9b:00:b1:2f:77:6f:69:ee:99:9f:b0:a5:54:3a:9f:
         55:3c:ae:b0:16:c8:02:e6:c3:e5:19:40:4c:27:92:a8:4d:09:
         e9:93:23:7d:af:3c:a6:bd:0e:e5:c0:d7:4c:1e:05:57:57:ac:
         3a:d4:57:d8:85:77:89:39:0e:a0:50:97:f1:de:e6:be:b9:18:
         2a:8f:a8:64:3a:81:93:f3:71:dc:1e:1e:6f:fd:7f:6a:f8:0d:
         e1:7e:48:68:f9:27:ed:6d:89:d7:c5:77:33:2d:d4:95:ab:7e:
         f7:80:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:12 2025 by rpki-client