Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ad3dEE38qrisgxTSBPVU26hhyso.roa
File:                     Ad3dEE38qrisgxTSBPVU26hhyso.roa (raw, json)
Hash identifier:          aBFeuOKj5NmPnX9+W4x8na0vzezRZUq3btRSZ5BvlME=
Subject key identifier:   01:DD:DD:10:4D:FC:AA:B8:AC:83:14:D2:04:F5:54:DB:A8:61:CA:CA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0176
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ad3dEE38qrisgxTSBPVU26hhyso.roa
Signing time:             Mon 01 May 2023 01:28:47 +0000
ROA not before:           Mon 01 May 2023 01:28:47 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.153.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:47 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=01DDDD104DFCAAB8AC8314D204F554DBA861CACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0c:6c:33:bb:97:2b:e5:e0:60:1c:c2:0e:df:
                    2d:4d:3b:0b:88:a4:6f:c3:ab:fe:42:36:c7:97:dd:
                    d2:3e:6c:af:40:eb:ca:b8:1e:2d:c7:4b:bc:d6:f4:
                    1c:2c:49:44:ea:73:81:99:72:8d:2f:34:69:68:ed:
                    f8:b5:1f:c8:df:9f:08:c8:0a:a9:83:41:2d:59:2f:
                    35:03:b0:64:24:68:36:83:c9:7d:60:28:d3:4e:8d:
                    4c:4b:17:fa:3e:66:d6:25:f3:01:78:8d:10:74:12:
                    ad:fb:1f:0a:10:fd:9d:35:11:a8:70:bc:23:a5:3c:
                    a4:3b:c4:14:c7:ab:57:91:24:9b:76:d6:ad:bf:4d:
                    cc:82:1f:dd:a7:22:9b:c2:09:05:5a:ea:0c:8c:bd:
                    b5:ae:1b:83:e8:b6:32:91:66:1f:5a:88:a7:ae:d3:
                    d1:ee:89:b0:c9:c9:b2:be:56:4c:60:4c:bb:0f:5a:
                    5f:b5:42:0b:99:70:24:8c:e5:a8:84:5d:34:22:7d:
                    c2:f7:d6:82:ca:5a:2c:78:b8:36:48:6d:c4:a2:0b:
                    16:a6:8a:63:5a:ec:a3:a2:e9:e9:4a:27:5d:5f:11:
                    85:0d:33:de:85:b8:ad:49:8b:e0:28:1a:8e:e8:95:
                    66:2e:4e:f6:b2:06:d0:31:c5:fe:52:1a:c8:93:7e:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:DD:10:4D:FC:AA:B8:AC:83:14:D2:04:F5:54:DB:A8:61:CA:CA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ad3dEE38qrisgxTSBPVU26hhyso.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:f5:dd:12:76:02:05:fe:29:d3:5a:74:63:c4:3a:fd:e6:ae:
         92:19:02:c4:32:b5:7b:c5:c5:8c:bf:1d:5f:e6:5f:06:c0:6b:
         17:42:e4:28:50:09:88:25:37:9b:bb:a8:81:09:37:d3:fe:67:
         31:ca:10:42:e7:1d:dd:11:44:d6:b2:e6:0c:53:93:53:08:36:
         f7:7c:5c:41:08:07:14:e7:59:74:d3:a4:0e:2b:b6:0f:60:af:
         70:34:14:00:bd:45:ce:7d:a2:87:d9:b7:97:c2:9b:a2:4c:fd:
         5c:04:88:f1:a9:32:4f:4e:f9:e6:42:28:c9:96:7b:13:fd:73:
         51:27:4f:d3:93:0c:a0:b6:c9:6e:8c:15:8d:73:a9:a9:c1:4a:
         a1:5a:a0:07:15:9f:7e:64:01:75:25:e0:ba:c6:99:aa:4b:80:
         2c:46:a7:cd:1e:9f:ca:04:5a:92:05:49:a8:e7:76:4a:00:72:
         93:86:f9:70:87:47:b5:63:c2:4e:6c:aa:41:76:9d:14:64:1e:
         df:2d:6e:80:46:e8:df:be:ac:f8:b1:98:9f:f5:10:65:08:72:
         c4:1b:1f:41:14:ad:7b:bc:1a:82:77:ff:c6:c2:1c:c6:5a:9b:
         04:0c:c2:d8:d6:f4:70:7d:92:a8:58:f2:98:10:98:7f:18:50:
         26:bd:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org