Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/B83qAavjFPRB6fdXamomqhjWFmQ.roa
File:                     B83qAavjFPRB6fdXamomqhjWFmQ.roa (raw, json)
Hash identifier:          f1TXRkWZVhnxwGMxY91Sg1IyFrwi8MGIQwXlQEqaZNA=
Subject key identifier:   07:CD:EA:01:AB:E3:14:F4:41:E9:F7:57:6A:6A:26:AA:18:D6:16:64
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0220
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B83qAavjFPRB6fdXamomqhjWFmQ.roa
Signing time:             Mon 01 May 2023 01:37:54 +0000
ROA not before:           Mon 01 May 2023 01:37:54 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.132.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:54 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=07CDEA01ABE314F441E9F7576A6A26AA18D61664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:a7:0f:8d:0e:62:94:5e:fc:7e:3f:29:c0:
                    b0:35:d9:80:82:35:ee:7d:09:7a:eb:61:b2:ec:9b:
                    bb:67:11:1a:8f:a8:3f:7d:7e:94:5b:f4:23:b5:7f:
                    7e:a8:d6:48:96:6b:8f:42:4f:22:82:9c:86:b7:e9:
                    ea:dc:1f:20:ec:80:54:2e:f5:fc:6b:21:3b:68:73:
                    c3:3a:4e:7b:8b:97:1e:f8:30:12:2d:0e:ac:9c:eb:
                    78:a5:43:9e:5f:7a:6c:fc:27:e6:ae:7f:73:eb:a6:
                    e9:15:e7:61:19:e4:33:57:e2:90:4d:48:3d:bc:6e:
                    34:5a:ff:d3:58:d4:07:82:63:26:66:de:78:7f:b6:
                    ac:43:85:3e:66:27:3f:c3:7c:59:e8:a3:7f:6d:82:
                    96:d0:4b:66:72:99:31:70:05:e0:5a:6d:df:be:c3:
                    fe:51:d4:46:f4:5a:31:27:21:7e:0f:40:f9:0f:1a:
                    a4:4c:35:98:54:46:9f:5c:ae:54:90:89:2b:dd:e5:
                    d6:13:12:8a:3a:eb:4a:c8:50:97:a0:37:33:56:a3:
                    b8:72:1c:cc:55:3e:41:71:a6:08:fa:eb:ac:5a:f5:
                    f7:60:02:6d:11:5a:0d:7e:9e:0d:5b:48:b9:9e:c9:
                    2f:72:c8:6c:8e:93:93:90:fe:9e:1e:75:d8:0c:6f:
                    ba:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CD:EA:01:AB:E3:14:F4:41:E9:F7:57:6A:6A:26:AA:18:D6:16:64
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B83qAavjFPRB6fdXamomqhjWFmQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:91:f1:11:88:ee:be:b8:a4:39:00:54:72:04:d2:2b:e5:8d:
         5f:42:aa:49:e0:68:01:09:ff:3a:17:be:2e:e3:aa:db:d9:bb:
         72:5e:bb:70:b4:ba:7f:a8:a7:9b:0a:9b:de:2e:ce:26:24:50:
         a2:dc:1f:0c:dd:51:bc:da:2c:8a:dc:8e:be:f8:3f:af:8c:6b:
         c5:d3:9b:a8:02:db:3b:b8:8b:42:ad:35:d7:cb:85:77:0a:a5:
         9a:da:0c:f7:09:5b:9d:d0:1a:01:ed:7e:96:0b:2b:f6:d5:28:
         0e:72:8e:7a:58:2c:4e:e0:51:38:77:12:cf:2b:7b:4e:a3:13:
         d5:0e:eb:43:12:ef:42:2b:c2:53:5b:b2:12:b1:3e:cc:44:31:
         3b:51:c3:7c:6b:cd:e7:9d:1b:54:eb:cb:a7:64:24:10:74:9a:
         bd:fe:e0:48:6a:81:7f:ba:ec:95:98:c5:22:37:3d:3c:a5:3e:
         52:97:a9:40:64:b5:e0:8e:bb:8f:cf:04:e9:03:c2:43:16:db:
         f6:12:58:fb:b6:a5:3e:27:93:0a:45:86:4f:4a:84:35:b6:d2:
         b4:fd:8d:fd:34:1d:91:f2:85:86:58:2c:75:b4:ee:ac:7a:68:
         1c:3a:05:3a:17:a6:db:b0:8c:e5:f9:9b:83:64:7e:ee:62:2f:
         ee:20:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org