Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GikGq5ab-wRwYk0726AbJbxgT94.roa
File:                     GikGq5ab-wRwYk0726AbJbxgT94.roa (raw, json)
Hash identifier:          zVK/6JINwLwF4UBpM85/cxPyjZLScqe31qN4vqI1uzY=
Subject key identifier:   1A:29:06:AB:96:9B:FB:04:70:62:4D:3B:DB:A0:1B:25:BC:60:4F:DE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0131
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GikGq5ab-wRwYk0726AbJbxgT94.roa
Signing time:             Fri 28 Oct 2022 02:20:51 +0000
ROA not before:           Fri 28 Oct 2022 02:20:51 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        211.5.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 02:20:51 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=1A2906AB969BFB0470624D3BDBA01B25BC604FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:de:33:04:fa:bc:dc:aa:62:b8:93:cd:11:
                    b9:fc:e0:b6:f4:2d:02:0e:b9:75:63:ea:90:77:32:
                    36:02:50:3b:57:c8:4c:64:b6:55:29:cf:11:21:ee:
                    ff:04:43:f8:98:1d:42:83:fa:15:d7:f7:1a:8d:41:
                    e0:a5:32:f1:54:e9:d2:09:9e:62:c3:04:2d:54:5a:
                    09:6e:90:ea:a2:d0:2c:c6:a4:83:93:a9:31:5d:32:
                    ca:93:c4:2b:be:de:c0:b5:87:4d:a7:01:4d:eb:0e:
                    33:3f:4c:ca:0c:bd:e9:d5:44:60:62:7c:a9:31:41:
                    f6:e4:e8:00:b0:b8:eb:8d:08:d3:c0:4b:7a:0b:3f:
                    3a:db:ec:ff:ea:90:26:07:48:11:d8:e5:13:ce:0f:
                    62:78:21:53:df:98:76:15:bf:93:86:8d:0c:e8:25:
                    62:86:01:e0:fb:33:e6:0e:4e:c7:0f:f2:d4:ab:d9:
                    7a:44:80:df:56:4d:e2:08:15:ce:20:ea:57:a1:a2:
                    35:ae:c7:67:89:90:b5:8a:ef:12:db:42:df:2a:c6:
                    3d:13:a4:a0:40:4d:30:a9:f5:84:c9:27:4b:86:55:
                    e1:47:2c:16:3e:f8:d7:d7:12:3b:61:38:2f:81:8c:
                    6e:f0:31:7c:53:90:e6:b8:45:4d:ed:5d:01:2c:55:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:29:06:AB:96:9B:FB:04:70:62:4D:3B:DB:A0:1B:25:BC:60:4F:DE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GikGq5ab-wRwYk0726AbJbxgT94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:80:d8:ca:36:98:72:8a:be:f3:59:88:36:fa:2a:2c:ed:
         89:3e:e3:a7:5e:75:5a:31:29:0f:43:06:25:89:15:ea:21:66:
         37:bf:bb:2a:b0:68:ac:cf:5b:11:01:e6:cc:4a:b9:02:44:f6:
         7e:e8:22:66:2b:e6:f6:f3:0c:d1:b4:ff:59:15:51:3c:14:55:
         7b:b0:9d:af:5f:0e:cd:c5:a0:65:9d:58:10:59:aa:2b:fc:17:
         11:9d:c0:28:6d:69:9f:87:cb:33:a2:fc:a4:9d:92:11:8a:a6:
         75:33:c0:ec:21:8a:9e:40:70:92:71:20:4b:0c:be:f4:10:59:
         46:2c:df:82:c0:1b:ed:ed:fc:7d:c4:16:cd:bf:2e:a2:34:68:
         79:1c:bb:33:66:62:6e:44:9e:30:2d:f8:f2:cd:f0:2f:dd:4d:
         ca:55:be:63:36:3c:fe:02:86:fb:01:5f:69:d5:50:a7:5e:78:
         a2:28:31:ed:4a:5d:7c:f6:08:b4:5f:d0:2c:fc:ab:78:cc:0d:
         57:83:f5:97:75:69:44:57:07:5d:7f:f4:3e:7a:52:ba:8d:45:
         10:f3:2f:0e:5e:bc:a9:1a:86:32:28:49:55:c3:ff:3b:b5:95:
         f6:3c:5a:66:4a:68:10:32:7a:21:bc:38:90:52:54:46:3e:6c:
         55:58:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 02:10:40 2023 by rpki-client on console-fra.rpki-client.org