Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Cr1a39ahasfeLwSSHK2-K_KlXVw.roa
File:                     Cr1a39ahasfeLwSSHK2-K_KlXVw.roa (raw, json)
Hash identifier:          LdYlRsKqEESe+efvosHwWNriDVeAZEMwy2kqa30+9OA=
Subject key identifier:   0A:BD:5A:DF:D6:A1:6A:C7:DE:2F:04:92:1C:AD:BE:2B:F2:A5:5D:5C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       039E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Cr1a39ahasfeLwSSHK2-K_KlXVw.roa
Signing time:             Sat 31 Aug 2024 01:34:41 +0000
ROA not before:           Sat 31 Aug 2024 01:34:41 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        175.135.0.0/16 maxlen: 16
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:34:41 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=0ABD5ADFD6A16AC7DE2F04921CADBE2BF2A55D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:05:02:4f:11:b5:2b:93:4d:f0:76:b8:18:
                    98:ec:00:ec:7c:9b:7b:e8:cc:c8:34:ca:09:fe:51:
                    47:4e:34:ba:19:dc:d9:8d:e5:66:56:0c:4a:23:de:
                    ca:7d:59:bf:b2:c2:ed:ed:d4:44:74:d2:7e:e0:5e:
                    83:01:b5:5d:04:ae:e0:4a:4d:bd:41:d1:df:36:73:
                    68:dc:f5:47:d1:bc:4d:7b:0c:67:18:21:02:59:90:
                    66:23:2a:4d:fe:aa:c2:0b:e7:c1:23:b3:9b:7d:ad:
                    21:c4:9c:a8:ab:90:7e:d2:18:a5:c9:e3:d1:77:25:
                    2c:b7:00:2a:12:eb:26:34:ec:f1:e5:3f:4a:98:f2:
                    12:08:4a:c0:96:0c:1f:b4:1b:ef:ab:70:80:73:d1:
                    2f:25:d8:d5:d9:9a:b0:3e:89:cb:e9:d7:8f:8a:22:
                    c9:6b:19:96:48:ad:04:a8:9e:d7:75:f1:93:c0:b6:
                    fb:5b:31:8e:99:a0:7e:5d:4f:ff:65:2c:04:d7:9a:
                    d4:4e:15:5f:92:8c:8f:db:76:70:c1:a1:e6:2d:5b:
                    31:9b:e4:e3:3a:db:cd:1c:7e:37:3d:5c:fa:ae:a0:
                    fb:e0:ce:ff:47:c7:c2:71:b0:d1:24:27:c6:98:76:
                    f1:bf:26:2f:a1:d8:11:6c:e8:b5:c3:69:3c:db:bd:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BD:5A:DF:D6:A1:6A:C7:DE:2F:04:92:1C:AD:BE:2B:F2:A5:5D:5C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Cr1a39ahasfeLwSSHK2-K_KlXVw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:0e:a9:b2:ac:ef:00:b1:e3:04:0a:00:59:9c:72:7e:75:
         90:97:3a:05:ab:c5:2f:62:41:be:84:f1:3a:c3:9c:3d:66:7b:
         74:83:32:6a:a3:e8:82:94:3d:e8:cd:84:8f:0c:de:f5:48:4b:
         d4:90:b8:a8:61:b9:37:7e:6b:d6:db:dc:b5:41:9e:5e:32:b2:
         9b:b0:46:02:bb:91:dd:a6:56:06:a5:f6:6e:24:36:63:b9:d5:
         95:ff:7a:00:c6:2d:22:8a:95:6d:6c:66:7d:d7:a5:5f:f0:9e:
         43:70:46:ad:61:78:40:9d:bf:1f:95:8a:6a:ac:64:9a:74:8c:
         47:7e:44:eb:ae:7a:47:99:e9:ea:54:f3:e5:86:e3:03:a9:7d:
         91:c8:e1:ad:c5:9a:f1:e3:42:9c:35:5b:19:da:d5:a8:04:69:
         45:9e:90:e7:27:2f:57:ee:a8:a2:8a:22:de:ef:de:ca:b3:c4:
         c3:17:36:b9:c4:68:28:c2:a6:d2:5e:98:49:7d:91:52:e4:62:
         04:1b:c5:cf:51:27:da:6a:68:4e:73:28:6d:bb:10:6f:46:74:
         d2:8c:a1:8f:77:ae:48:57:a0:d8:86:8f:b7:18:3d:7a:59:97:
         c6:2c:0a:c4:c4:d9:05:92:96:13:b9:56:cb:df:48:69:7b:e1:
         f0:b6:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:23 2025 by rpki-client