Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CK2jI4OK4COmp4BK9hLY8a4z9fg.roa
File:                     CK2jI4OK4COmp4BK9hLY8a4z9fg.roa (raw, json)
Hash identifier:          L5CTYxhWrAtATCz0LnPVfIMGIWBmiJKSvmu5D05UNwQ=
Subject key identifier:   08:AD:A3:23:83:8A:E0:23:A6:A7:80:4A:F6:12:D8:F1:AE:33:F5:F8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0173
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CK2jI4OK4COmp4BK9hLY8a4z9fg.roa
Signing time:             Mon 01 May 2023 01:28:45 +0000
ROA not before:           Mon 01 May 2023 01:28:45 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        27.84.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:45 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=08ADA323838AE023A6A7804AF612D8F1AE33F5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:8e:a6:90:67:1c:b0:1f:a3:c1:91:01:a8:
                    17:2c:f8:70:0c:ea:a3:90:24:99:da:34:ac:8c:7c:
                    3a:f8:06:c7:dc:72:35:fa:80:e3:aa:9f:20:a9:5c:
                    6b:ad:bb:8f:76:0f:55:ce:b5:6c:96:76:ae:b9:36:
                    c5:ba:f9:56:a0:8d:b3:27:f5:15:ff:9c:57:bb:3b:
                    34:48:d4:aa:f0:db:c2:34:e6:26:20:d6:c0:dd:bb:
                    3b:a4:1f:15:04:80:eb:7d:d6:9f:c6:d5:7a:a2:6d:
                    e6:06:af:76:8e:83:af:84:7b:22:0e:f0:47:71:d4:
                    15:b9:1d:14:e2:7a:b6:ee:6c:c6:11:4d:c0:ba:74:
                    a4:aa:2c:56:cc:b8:7d:4b:7f:12:63:1e:9b:4d:d4:
                    3c:71:2c:62:20:35:01:e0:ce:95:b1:97:b3:c8:32:
                    6d:8d:6e:70:52:f9:90:68:0a:43:7d:a2:2e:b9:ab:
                    85:8f:38:08:74:fb:1c:cb:70:15:ff:e0:52:9a:cc:
                    a9:2f:76:c1:ac:b7:ee:a5:e1:b7:b4:cd:7e:54:95:
                    31:35:55:0e:a5:bd:de:f1:45:1d:aa:ef:33:b3:10:
                    ea:55:af:65:96:78:68:14:09:53:c3:9c:fa:0e:ef:
                    c8:fa:28:19:99:dd:05:0e:37:15:31:1d:c6:d6:43:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AD:A3:23:83:8A:E0:23:A6:A7:80:4A:F6:12:D8:F1:AE:33:F5:F8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CK2jI4OK4COmp4BK9hLY8a4z9fg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:06:ff:dc:bf:37:ec:f2:cc:1b:39:00:b5:ba:b3:c2:ff:89:
         86:cb:a9:6b:f8:35:3a:80:9e:79:ef:a3:b2:75:a6:b6:f3:72:
         08:85:c3:fe:84:a5:84:c3:97:9f:99:51:77:d4:42:2c:f1:a9:
         99:f1:3b:67:e0:dd:3d:77:d2:7a:3b:20:32:14:c3:1b:6e:22:
         ed:b8:26:51:ab:ee:34:43:32:85:78:cc:d3:84:57:3a:ef:d9:
         16:46:a9:59:6f:d5:74:3c:fc:d7:2b:2f:b1:27:65:9b:f9:53:
         d6:e8:23:dd:0d:56:1a:5a:0f:33:e2:eb:84:ff:df:b9:e6:93:
         09:8b:55:3c:39:8a:e2:3d:d0:46:b2:af:a0:98:81:e6:75:26:
         bd:98:89:5d:05:93:41:94:c3:a9:59:94:79:2c:26:c1:d0:83:
         ca:fd:cf:d1:29:3c:02:04:4f:42:2e:8b:93:b1:98:4e:9a:6f:
         00:87:c9:70:d5:dd:f7:07:6c:39:7f:b5:85:14:c0:b5:a4:5d:
         04:59:b2:8a:b4:f4:15:74:72:2e:a8:2b:60:5e:7e:ae:72:cb:
         92:b4:73:0c:a0:0d:44:83:ca:78:25:a8:79:f1:7f:61:90:01:
         01:53:0a:01:80:04:db:1c:be:91:43:fb:8c:55:53:8d:03:a4:
         ba:53:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:33 2024 by rpki-client on console-fra.rpki-client.org