Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8CK2ikaFhWKZq9jefn0vuvvlZic.roa
File:                     8CK2ikaFhWKZq9jefn0vuvvlZic.roa (raw, json)
Hash identifier:          m2R/M1dRmaQHNaalw90hKXXaaZZTAegrCDCl4PQLhG4=
Subject key identifier:   F0:22:B6:8A:46:85:85:62:99:AB:D8:DE:7E:7D:2F:BA:FB:E5:66:27
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       018C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8CK2ikaFhWKZq9jefn0vuvvlZic.roa
Signing time:             Mon 01 May 2023 01:30:26 +0000
ROA not before:           Mon 01 May 2023 01:30:26 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.138.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:26 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F022B68A4685856299ABD8DE7E7D2FBAFBE56627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:e3:a5:c2:0d:65:ff:37:4b:c0:08:17:85:
                    25:6a:d9:b9:47:77:1f:23:d9:80:43:63:79:19:ae:
                    e4:fc:92:5c:26:0e:03:85:0b:89:ac:75:63:02:d3:
                    95:48:34:ec:e0:f2:51:63:68:13:be:31:77:5a:6b:
                    00:84:5f:04:51:3b:7d:d5:71:b1:f8:14:92:2e:73:
                    55:33:7b:ea:44:16:5c:20:87:a2:bd:76:77:29:35:
                    8b:2b:96:3d:44:a7:00:d1:29:be:59:7f:e3:eb:5a:
                    ea:0e:85:f5:aa:9a:26:f7:60:3a:ee:e0:ab:b6:fb:
                    b1:51:1a:96:c9:a3:38:16:4e:45:34:d1:0c:e0:a9:
                    43:d4:ac:6c:4e:86:b3:a4:0a:f9:b4:72:27:bb:96:
                    a7:e3:34:43:f3:da:95:6f:d2:a1:4a:c2:cd:7f:e1:
                    36:e6:1e:9b:5f:80:ba:6d:2c:8f:4d:c3:61:ca:ca:
                    14:a9:bc:8c:0d:43:71:ea:cc:77:fb:be:6c:8e:a0:
                    6b:92:2f:94:4a:c4:0b:59:58:2e:1c:74:b4:18:f8:
                    92:ae:20:eb:c4:7e:58:51:f1:b8:8d:f4:ff:4d:cc:
                    93:95:78:fe:e2:8a:3d:8f:bf:21:58:9d:fb:c3:4f:
                    ab:c6:df:ac:d8:dc:a0:1d:b6:cf:58:5f:0e:bb:a1:
                    b9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:22:B6:8A:46:85:85:62:99:AB:D8:DE:7E:7D:2F:BA:FB:E5:66:27
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8CK2ikaFhWKZq9jefn0vuvvlZic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:bf:29:22:35:b7:91:48:98:2e:76:10:1a:33:5d:b1:fb:3d:
         75:2d:66:fc:87:c1:44:da:8d:7e:8e:17:18:6b:aa:6c:3c:9a:
         12:13:3a:14:c7:d9:73:1a:ee:43:12:04:65:dd:e5:8a:30:85:
         36:ce:e6:c5:77:e6:4e:e1:26:1b:71:b6:bd:6a:1e:e7:b0:d1:
         e8:00:b3:08:5a:f6:89:bb:29:c4:8b:4f:fc:51:f2:e2:45:7f:
         2a:fe:11:65:a0:eb:cd:ac:22:96:92:03:d1:1c:b9:e5:65:d6:
         16:f7:c6:ff:25:83:ea:d0:b3:ac:ea:f1:f8:86:ae:e7:2b:9f:
         19:80:ad:3d:08:cb:c6:7c:bd:62:59:98:33:5b:7a:1f:24:54:
         19:c4:db:c1:af:a6:8b:38:b5:e8:b7:75:8d:fd:0c:59:68:18:
         f0:41:ad:a6:f1:5e:47:43:b1:2d:4d:a1:81:77:60:e7:40:cd:
         bd:da:4c:03:e6:8b:02:f8:47:18:83:47:6c:9e:05:6c:43:d6:
         77:5e:a5:0f:5e:6d:dc:5d:44:cf:1a:7e:00:2e:88:dd:2b:40:
         aa:be:ee:47:0f:79:fd:ed:96:bf:64:03:bc:27:0b:6f:26:a4:
         be:f5:93:dc:74:13:e9:31:31:f2:2c:f2:c0:27:a6:c2:dc:f1:
         be:6c:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org