Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5tPErCMFTG34Hujg3rBH64C6cBo.roa
File:                     5tPErCMFTG34Hujg3rBH64C6cBo.roa (raw, json)
Hash identifier:          XzJWdENWFEM9tEigiT3ZU6aOSrvNHX+UhbM6AnJ6Sxs=
Subject key identifier:   E6:D3:C4:AC:23:05:4C:6D:F8:1E:E8:E0:DE:B0:47:EB:80:BA:70:1A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0279
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5tPErCMFTG34Hujg3rBH64C6cBo.roa
Signing time:             Sun 01 Oct 2023 01:32:31 +0000
ROA not before:           Sun 01 Oct 2023 01:32:31 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        125.29.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:31 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E6D3C4AC23054C6DF81EE8E0DEB047EB80BA701A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:15:bf:76:ca:c3:c4:c7:5b:56:ab:8b:47:
                    eb:51:9b:06:31:bb:1c:80:26:38:07:c8:d1:a4:7c:
                    1f:55:d1:83:af:d3:a5:ba:2a:68:37:b4:06:f2:f3:
                    c2:a3:eb:0f:ee:34:d6:97:8d:e6:72:ab:aa:38:dc:
                    99:f3:e7:47:52:c6:6b:ca:9f:c7:ee:3a:13:d8:10:
                    c9:6f:ad:1b:a3:be:68:7f:3e:92:d3:67:ef:e2:31:
                    54:94:f0:fe:ab:26:3f:b1:13:3e:00:b7:ee:42:3c:
                    86:62:14:29:93:7c:08:06:f2:9d:e4:44:0a:ff:ea:
                    32:00:56:82:ac:ad:74:23:0b:31:f2:2b:43:52:ee:
                    cf:56:8d:ab:66:d1:27:b9:ad:ce:85:51:41:70:39:
                    ea:f0:9f:34:3b:16:47:0d:5c:91:83:78:65:62:24:
                    9b:28:9f:dd:39:1f:a6:f0:30:96:93:b2:23:4f:10:
                    e0:93:b1:c5:70:15:7b:fa:7e:45:80:2c:90:75:8b:
                    04:f4:f2:42:b1:ac:1f:02:9d:76:f5:c3:5b:c1:64:
                    e8:23:ca:5f:16:5c:e3:83:e7:7b:2b:ad:70:1e:74:
                    97:c2:50:64:82:64:27:ad:92:22:49:18:b8:9e:0f:
                    e5:37:90:98:0a:99:28:55:f9:2d:30:dd:01:86:16:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:C4:AC:23:05:4C:6D:F8:1E:E8:E0:DE:B0:47:EB:80:BA:70:1A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5tPErCMFTG34Hujg3rBH64C6cBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.29.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:92:5f:3a:23:25:42:38:a4:3d:cf:ce:f2:b7:fc:aa:5b:
         be:54:ff:82:0b:e5:9c:fe:91:f6:42:d4:38:99:d8:35:6a:8a:
         9e:d6:fb:bd:d5:16:30:e2:97:c6:2c:1f:7a:ff:9f:96:0b:3a:
         79:3b:ae:da:0b:92:65:d5:d3:5e:5b:35:b6:07:1e:e5:77:6d:
         48:dd:58:21:62:5a:c5:fe:73:93:4a:d9:41:7e:a2:26:ad:06:
         96:40:f0:2b:c0:fb:13:00:d1:ef:09:99:b8:14:45:8c:d1:8a:
         73:8b:d4:4c:43:82:a5:cd:f7:25:45:72:13:20:28:d3:58:26:
         91:c4:2f:50:8a:a1:38:cb:01:2d:b2:9a:5d:69:26:98:a6:01:
         33:b4:9d:ad:90:24:fa:9d:3f:e8:63:9b:be:27:0e:d6:90:d5:
         c7:5b:89:c9:d6:bc:32:1c:a7:3d:3b:18:3b:78:bd:6b:0c:c8:
         65:07:59:dc:14:31:e9:61:e3:48:5d:c2:22:3c:f6:a4:fd:58:
         06:42:c6:8f:bc:73:04:44:6d:b2:37:e7:04:41:48:3a:25:c9:
         23:51:eb:e8:3c:c1:2c:b2:c6:68:ca:9c:aa:f1:5e:32:ad:d3:
         61:3b:e5:93:5f:e0:36:5c:bd:04:5f:58:9a:ee:37:71:10:32:
         f9:15:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org