Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JykdAIrl9TbCM8B9Hl60S51urds.roa
File:                     JykdAIrl9TbCM8B9Hl60S51urds.roa (raw, json)
Hash identifier:          Fe7klO/uP74mY84F/4ncx/odyzxJ6emvK4qiEpFYElU=
Subject key identifier:   27:29:1D:00:8A:E5:F5:36:C2:33:C0:7D:1E:5E:B4:4B:9D:6E:AD:DB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01BA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JykdAIrl9TbCM8B9Hl60S51urds.roa
Signing time:             Mon 01 May 2023 01:32:08 +0000
ROA not before:           Mon 01 May 2023 01:32:08 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:08 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=27291D008AE5F536C233C07D1E5EB44B9D6EADDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:12:44:dd:76:41:34:f7:ef:f7:4e:2c:62:
                    df:fe:a5:d5:02:30:c1:20:71:a1:b4:9e:b5:85:09:
                    a0:7d:3b:b4:7a:54:b2:07:95:b8:01:5f:0e:c0:ea:
                    d1:79:11:20:97:d2:8f:17:c7:7f:38:64:40:80:d3:
                    e8:24:11:1b:43:3f:75:f0:e5:ec:bf:0f:c1:0f:6a:
                    66:c9:c8:a1:91:34:53:fc:fb:dd:89:a6:07:00:3a:
                    ab:da:3f:83:7a:71:20:01:b6:57:a6:ae:47:04:99:
                    f1:4c:ce:f5:de:79:7b:08:c7:39:29:61:57:1f:96:
                    b7:89:40:6c:d2:4e:ac:e7:cb:04:3b:d3:3a:21:81:
                    e1:ae:23:8a:a2:00:a0:d3:45:28:46:b5:56:61:48:
                    30:3c:cb:53:44:bc:22:dc:56:31:c3:46:90:9d:cd:
                    dc:ab:1a:42:cc:1f:77:9b:25:d8:78:71:74:18:c2:
                    73:de:5c:10:a5:40:df:bc:96:02:a5:79:8b:3f:b3:
                    8b:0c:14:d6:df:f3:4a:b8:3c:e0:f4:6f:b8:6b:f1:
                    bd:0b:fe:1b:cc:7f:87:0f:30:15:ae:7b:4d:82:c8:
                    88:9c:3d:a4:1c:22:f1:e2:a5:8f:df:3f:84:f2:42:
                    c2:20:fd:6e:3d:68:9c:dd:a0:e9:e7:50:eb:31:93:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:1D:00:8A:E5:F5:36:C2:33:C0:7D:1E:5E:B4:4B:9D:6E:AD:DB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JykdAIrl9TbCM8B9Hl60S51urds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:de:b9:ed:01:ac:a2:14:7a:a9:b5:7d:46:2c:31:12:d3:
         55:59:2d:cf:8b:86:90:30:34:3d:ee:5a:ef:27:86:24:d2:2a:
         97:1a:ed:7c:18:a4:05:e7:0b:2e:17:45:b0:47:82:2a:dd:46:
         8b:08:53:07:5d:b4:5b:04:00:e8:c2:58:50:ac:46:28:31:c5:
         90:0c:b5:a4:3c:fc:de:6b:36:61:4f:2d:68:42:8f:35:74:b8:
         9f:b0:a4:f8:cb:83:ad:d6:15:ce:2b:59:30:26:09:ea:18:b4:
         48:92:7d:4a:ee:f8:d4:54:43:47:03:fa:7e:e6:72:51:48:3b:
         c2:a1:73:6d:8e:59:d1:1d:cd:ec:82:90:50:15:11:a0:dc:06:
         48:ed:e2:c8:31:dc:c3:da:df:af:9b:bb:2a:d3:50:08:ec:5d:
         24:85:55:14:05:62:25:ce:2f:d6:22:d2:2f:03:36:c7:f0:f3:
         bf:70:e7:39:ab:27:8d:64:ad:b2:0c:4d:3b:c9:a7:eb:00:7d:
         c0:be:37:43:63:9b:38:7e:5f:1f:bf:cc:54:1c:87:bc:bd:21:
         ee:d4:cf:ab:1c:1c:a4:94:c9:09:54:b2:ce:aa:ef:32:47:ce:
         97:d6:dc:4c:c4:dd:1b:58:8d:bb:fc:8b:00:23:89:03:45:7a:
         18:12:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org