Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/AHhwFgFSj0jwvkl2tKgP1mLshbo.roa
File:                     AHhwFgFSj0jwvkl2tKgP1mLshbo.roa (raw, json)
Hash identifier:          iIvpRwpOkSEKaLggHlaQ7GBbShvTWHv7qmLRN9nnFug=
Subject key identifier:   00:78:70:16:01:52:8F:48:F0:BE:49:76:B4:A8:0F:D6:62:EC:85:BA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0261
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AHhwFgFSj0jwvkl2tKgP1mLshbo.roa
Signing time:             Sun 01 Oct 2023 01:29:21 +0000
ROA not before:           Sun 01 Oct 2023 01:29:21 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.234.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:21 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0078701601528F48F0BE4976B4A80FD662EC85BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:24:61:0c:5a:e9:8e:b0:31:bb:95:9b:31:
                    b3:62:3c:3b:99:5e:e9:e6:c1:cd:1f:35:01:7a:f3:
                    8e:33:f8:a9:b9:b9:1e:42:1d:37:9e:ae:26:09:10:
                    79:90:10:c8:14:3e:83:73:50:e8:0c:a9:74:e3:61:
                    49:13:2c:6a:4a:3b:40:2c:7e:68:a8:d6:b3:c8:d9:
                    d0:82:b4:d1:7d:b3:77:60:53:31:f3:99:0d:7c:c7:
                    ce:6e:05:32:58:5c:b6:29:ae:e0:90:85:68:e5:ab:
                    b5:4e:6d:53:75:e1:ed:af:2f:9c:38:b1:66:1c:0d:
                    c4:e7:a6:79:93:e0:5a:56:7a:18:f4:37:00:90:b1:
                    16:a5:61:17:25:30:4f:7a:7c:f7:3d:91:af:b9:02:
                    7b:8f:14:17:24:d5:38:27:bc:3e:9b:a5:e6:2e:e7:
                    66:04:66:22:c3:7e:7f:17:8f:fc:91:78:73:a0:55:
                    a0:85:6d:e2:6e:1f:a2:76:b0:c2:a0:d3:91:7e:3a:
                    13:87:de:f0:7a:aa:72:d1:73:dc:13:68:a7:6b:55:
                    2d:27:1e:a7:d8:18:20:c9:68:b0:67:c5:53:f4:56:
                    d9:6c:0f:66:54:79:87:42:57:d2:f1:0d:a0:3d:8c:
                    ad:6c:31:f9:03:d0:ce:c7:69:ee:bc:39:41:9b:f6:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:78:70:16:01:52:8F:48:F0:BE:49:76:B4:A8:0F:D6:62:EC:85:BA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AHhwFgFSj0jwvkl2tKgP1mLshbo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:d6:44:3c:bb:9e:27:81:46:09:47:20:fd:95:ae:e2:8a:95:
         f3:47:41:14:ca:98:54:0e:db:1e:cf:2d:37:6f:01:d7:4c:85:
         e8:19:7d:1a:b6:93:1c:06:83:c5:c9:d8:17:2f:8a:fe:7f:e7:
         f3:58:30:a9:7a:29:a5:7b:7d:8e:68:85:ee:83:01:ec:44:7b:
         21:b2:f4:30:12:65:c9:c9:ab:92:6a:14:09:af:03:8b:39:b6:
         1c:1f:d1:d1:bd:01:95:ca:8b:c6:78:2e:d3:a1:08:6e:2a:64:
         b1:0c:c3:0d:46:72:47:10:55:a9:e7:b2:e0:26:a2:c9:e0:90:
         48:c7:c6:f3:c2:30:32:5b:ad:75:3b:f8:75:1b:a6:fb:6c:21:
         f3:e9:97:4a:7d:fa:06:31:ba:d8:9c:f8:e4:f8:0b:98:9f:0a:
         48:6c:d6:79:ed:87:71:2d:d3:b3:fd:81:eb:9b:58:f7:65:6f:
         50:c1:5a:c9:ca:24:ca:01:5b:5c:44:4c:9c:0d:96:e6:30:81:
         73:15:34:32:86:bd:e3:6f:0a:82:33:50:3d:41:fd:b9:84:ca:
         f6:3b:75:e9:f4:5a:be:c9:0e:8c:42:28:fd:a2:61:93:34:c3:
         dd:1e:d8:13:c7:8c:e3:f5:45:8b:fb:32:f4:02:9f:f6:3b:e3:
         15:4c:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org