Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9tsDI7YvhDHaUFH5A_dTNFloJgM.roa
File:                     9tsDI7YvhDHaUFH5A_dTNFloJgM.roa (raw, json)
Hash identifier:          cAgX4M8KWJS/Ib9/KGy1D3MhCTCG7XX4cLDa7x2SmiI=
Subject key identifier:   F6:DB:03:23:B6:2F:84:31:DA:50:51:F9:03:F7:53:34:59:68:26:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0221
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9tsDI7YvhDHaUFH5A_dTNFloJgM.roa
Signing time:             Mon 01 May 2023 01:37:54 +0000
ROA not before:           Mon 01 May 2023 01:37:54 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.178.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:54 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F6DB0323B62F8431DA5051F903F7533459682603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:8e:b5:8a:8f:44:e0:31:c1:ff:71:18:83:
                    d2:05:34:7a:5e:09:1f:59:a6:20:81:75:54:8e:62:
                    80:74:8c:29:7f:a6:f6:82:3e:2d:fc:63:a5:de:fb:
                    df:6d:af:3f:0c:84:cd:68:7b:34:f6:b5:1d:0a:bc:
                    f2:1a:2f:55:01:aa:87:8d:8c:77:10:78:65:d9:21:
                    c6:67:4f:0f:4a:50:1f:b1:42:66:01:80:6d:ba:39:
                    fb:99:e7:db:6a:33:80:db:93:1d:11:42:68:62:a5:
                    66:21:73:f5:54:b4:0a:b8:ae:1c:8b:72:75:f9:c8:
                    9d:dc:9e:50:4e:55:26:76:7d:ba:71:35:86:a4:d5:
                    d7:23:41:c0:ea:06:84:1d:fe:72:a2:c5:18:d0:f0:
                    a2:93:d2:7c:7b:e6:c2:4a:f9:80:cb:bd:d3:46:4b:
                    6c:26:98:ca:bb:eb:ad:eb:ca:7f:e1:87:cb:09:ad:
                    e0:fb:14:0f:67:59:b7:c5:40:21:1e:6a:81:38:e6:
                    05:98:49:83:52:a5:47:2f:e0:72:fe:27:22:e3:aa:
                    23:85:3f:27:3e:f1:d0:c0:80:5f:31:72:00:f7:30:
                    a2:8c:5e:1f:c6:2e:c4:5f:99:aa:66:26:99:d2:2a:
                    20:13:af:05:62:a1:dc:6c:92:38:cf:6c:dd:27:c7:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DB:03:23:B6:2F:84:31:DA:50:51:F9:03:F7:53:34:59:68:26:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9tsDI7YvhDHaUFH5A_dTNFloJgM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:30:6e:83:4e:38:b3:8f:1c:09:20:db:5b:cc:81:06:35:
         76:cc:3f:c5:18:01:c0:73:90:aa:d0:9a:9b:7d:ca:32:83:b4:
         33:f4:c3:1b:92:15:37:72:38:ad:bb:63:51:1a:a3:5a:d3:14:
         c8:da:67:2b:2c:33:8a:9d:94:15:68:00:13:3d:4b:8f:f8:1f:
         af:0d:1b:27:8f:f5:55:1e:25:42:40:69:5c:4f:8c:7e:8f:92:
         80:fb:18:94:95:27:47:f4:7c:84:de:88:de:03:88:41:15:53:
         31:5b:62:bd:fc:55:10:e0:22:45:b1:eb:7c:da:5b:75:75:e9:
         ba:2d:3f:7d:33:d7:39:47:5c:96:8a:44:a5:30:c5:6c:ae:c7:
         9e:c3:f9:75:ec:b8:e5:bb:5d:00:46:e4:fa:cc:18:2a:7c:a7:
         f4:b6:3b:de:fd:b3:00:ac:c1:04:86:56:53:e7:61:64:9f:2c:
         8b:64:d0:45:41:3a:59:28:ac:2c:3d:3f:46:42:95:95:8d:cf:
         8f:28:b1:32:da:fe:22:15:cc:d7:33:90:02:80:7a:18:4a:9d:
         47:f6:83:59:9a:10:01:fa:f0:77:98:c0:40:da:ed:e4:ac:3f:
         54:b7:f9:bf:bc:79:78:d2:29:89:ca:c9:55:f2:84:98:17:94:
         ae:95:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:33 2024 by rpki-client on console-fra.rpki-client.org