Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/J95GV7HbkyNmK_Ovn6lLUdRFn-4.roa
File:                     J95GV7HbkyNmK_Ovn6lLUdRFn-4.roa (raw, json)
Hash identifier:          e52R9wnPsDo4ATCvIDjysNBW2+hmTBqp8AcrXzoNQr0=
Subject key identifier:   27:DE:46:57:B1:DB:93:23:66:2B:F3:AF:9F:A9:4B:51:D4:45:9F:EE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0201
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/J95GV7HbkyNmK_Ovn6lLUdRFn-4.roa
Signing time:             Mon 01 May 2023 01:35:44 +0000
ROA not before:           Mon 01 May 2023 01:35:44 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:44 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=27DE4657B1DB9323662BF3AF9FA94B51D4459FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:2d:5f:bc:da:df:99:37:f7:69:24:0c:55:
                    0c:da:87:99:dc:c3:b0:e8:6c:f8:ce:93:ff:b8:3c:
                    31:99:f8:fc:60:cd:23:d1:74:d6:93:3c:ca:b0:c3:
                    4f:2e:36:ed:fb:d2:24:10:df:92:46:96:fd:33:36:
                    00:69:b2:52:38:21:b6:0a:6b:a7:12:52:37:a2:48:
                    7a:e3:56:e0:5a:81:77:90:7b:1e:aa:5d:a8:77:34:
                    ac:88:72:87:fe:d3:27:0e:0a:54:c0:01:b2:4a:ba:
                    85:a5:f2:9e:da:02:d4:71:17:60:95:53:0a:74:42:
                    b5:a3:a9:4d:2b:1f:ec:e1:5a:3c:79:2c:b7:cd:a1:
                    06:ff:7c:3c:b6:12:5b:1e:32:32:76:a9:37:d0:82:
                    72:90:9f:0c:1f:c4:90:7c:46:2b:88:4c:34:0f:ee:
                    ac:9d:fe:e8:8b:b5:01:b5:80:0d:72:ed:04:67:37:
                    3b:d2:f6:f6:7b:d1:ac:c6:a2:16:c1:a8:ed:dd:b7:
                    de:be:20:63:da:6b:b6:99:49:23:8e:4a:f4:7b:8b:
                    5c:4f:7b:6c:40:17:b8:28:d0:4d:44:7c:46:49:75:
                    a4:f2:50:53:84:e3:23:2b:a9:44:c2:f7:14:33:e5:
                    b7:00:11:d4:7d:2e:c8:63:62:7b:0f:2f:d4:ce:3a:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DE:46:57:B1:DB:93:23:66:2B:F3:AF:9F:A9:4B:51:D4:45:9F:EE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/J95GV7HbkyNmK_Ovn6lLUdRFn-4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:de:39:8c:a4:81:1a:92:07:71:67:ef:c4:48:bf:d7:4f:bd:
         78:2b:9b:04:fb:4d:ff:51:1f:0e:ee:51:24:c7:c9:a5:7e:7d:
         30:ad:08:b5:c6:0c:06:2d:fe:96:52:90:b8:0e:8e:9e:9e:e2:
         57:c4:81:ee:de:bf:04:4c:7e:7e:5d:64:6a:49:04:80:43:60:
         e7:04:6c:45:9a:33:29:55:30:d4:72:99:ac:a2:ed:18:91:14:
         d3:1c:5a:ab:64:38:5e:00:04:b6:46:0c:b0:32:72:ed:34:31:
         cf:d7:ba:d4:11:21:90:5a:12:93:2e:c5:94:0e:fb:3c:c0:c8:
         3d:14:51:61:de:00:ab:c7:f2:ef:73:b6:71:19:af:d0:68:6f:
         88:54:d3:7e:3b:89:04:dd:bc:ad:ad:13:c2:9a:45:a0:d8:32:
         d9:54:34:43:cf:2f:a5:5b:bc:42:c4:fb:4f:7d:f5:07:d0:d8:
         c4:e2:28:1c:99:32:89:14:77:cc:7b:72:88:3d:67:b2:d0:24:
         8c:a8:cd:f0:3a:25:36:27:2f:a5:41:ee:5e:d2:58:78:d3:a1:
         0f:b2:0e:f3:8a:d5:a8:3d:f5:5d:e1:93:39:e1:c7:ab:7f:4d:
         61:99:db:65:5c:82:ce:ef:c1:c9:b7:55:26:9d:cf:06:2a:33:
         6f:c5:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org