Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CVlrfImlV2gqdyW-lDrt-fiT5xE.roa
File:                     CVlrfImlV2gqdyW-lDrt-fiT5xE.roa (raw, json)
Hash identifier:          CK4FeidYGAwtbblk4z5rVFYj1aFwPZyyluJgk4l+FNQ=
Subject key identifier:   09:59:6B:7C:89:A5:57:68:2A:77:25:BE:94:3A:ED:F9:F8:93:E7:11
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01F5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CVlrfImlV2gqdyW-lDrt-fiT5xE.roa
Signing time:             Mon 01 May 2023 01:35:38 +0000
ROA not before:           Mon 01 May 2023 01:35:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        14.10.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 09:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=09596B7C89A557682A7725BE943AEDF9F893E711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:cf:ff:5d:f3:bd:8f:db:91:8f:a7:dc:89:
                    32:34:6e:b6:03:39:dd:8c:85:b7:ea:3a:3a:7e:47:
                    8b:fb:56:07:47:ff:78:c1:74:15:bf:47:9a:c9:67:
                    03:a6:63:12:0b:87:36:a1:35:46:12:d1:c9:ea:ef:
                    64:c0:11:80:f6:58:53:c6:7f:46:66:e1:fe:c6:70:
                    66:03:96:ac:27:47:48:5d:7f:89:43:4c:1c:d0:93:
                    67:ec:56:b4:dc:3b:82:1f:71:01:80:fe:99:68:5c:
                    46:7f:9c:e6:1f:c4:43:77:8b:a6:3b:50:95:b1:3a:
                    37:18:74:09:2d:b5:06:c9:bd:df:03:d7:ca:74:84:
                    ce:fd:8e:97:78:c2:9e:e4:0f:ce:be:8d:67:7a:aa:
                    a5:3e:d7:c0:d1:08:44:47:64:c4:4e:9e:7b:f9:d5:
                    0e:85:7f:75:52:aa:08:0c:6d:0b:f6:42:10:18:6f:
                    c4:44:ca:17:80:3f:03:f7:9c:ad:11:4d:49:1b:6f:
                    9b:e5:52:30:fd:c9:6d:29:de:17:28:11:f4:e2:73:
                    d9:af:77:0f:b3:0e:51:8d:0f:c4:28:3a:a9:37:89:
                    20:4e:71:01:b7:9e:5a:a8:70:b9:49:a2:4c:cb:8b:
                    77:56:2f:4e:38:dc:0d:2f:aa:f7:3e:a9:35:4c:ad:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:6B:7C:89:A5:57:68:2A:77:25:BE:94:3A:ED:F9:F8:93:E7:11
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CVlrfImlV2gqdyW-lDrt-fiT5xE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.10.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:7f:92:1b:02:a7:18:1f:61:f9:8e:b1:fd:66:47:b3:dd:
         fa:49:01:1f:b1:cb:90:5c:4e:b2:01:a2:61:2c:0b:4c:bc:38:
         41:1e:8b:d3:b2:37:dd:2f:ee:a6:d9:8f:c4:1f:d3:7f:c9:8e:
         81:bb:3b:bd:45:53:fd:6c:a4:00:38:e3:3d:da:fd:74:43:07:
         be:ce:a2:c7:f3:4a:94:5f:ca:e2:3f:42:25:e3:c7:70:5f:f5:
         67:23:26:36:72:fb:59:c2:7c:bf:1e:4b:97:20:81:2c:94:0d:
         dd:43:e7:0e:41:d0:16:75:37:f2:ed:4c:b2:6e:e4:d1:ac:dc:
         3a:be:e2:19:c1:47:d4:6d:b8:de:cc:19:71:9e:d4:fa:55:1e:
         f4:4b:aa:76:69:43:4f:7b:7d:6a:3c:e9:39:99:28:2e:15:b6:
         97:f1:07:84:06:d1:f9:e2:1f:4d:b6:f8:bc:d5:19:2e:55:18:
         ce:67:16:f9:cb:6e:df:24:0b:b7:3f:9c:0e:53:09:66:df:06:
         6b:3f:90:0f:92:a1:c2:8a:32:1d:b5:aa:00:04:8d:fc:00:86:
         0e:e9:39:ef:9d:44:81:5e:ee:a1:48:6f:96:1a:c0:05:43:5b:
         3d:87:52:87:66:24:ca:1d:b3:71:d3:42:7b:00:db:47:fd:6a:
         51:d2:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 11:49:34 2024 by rpki-client on console-fra.rpki-client.org