Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/L-Zyxp4w-EQUbpRP1E881NlyRbw.roa
File:                     L-Zyxp4w-EQUbpRP1E881NlyRbw.roa (raw, json)
Hash identifier:          wzkcGadMwuHiQY2iv3rOe4g2XzSvnzR2UKx7Eojyk+E=
Subject key identifier:   2F:E6:72:C6:9E:30:F8:44:14:6E:94:4F:D4:4F:3C:D4:D9:72:45:BC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0249
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/L-Zyxp4w-EQUbpRP1E881NlyRbw.roa
Signing time:             Tue 01 Aug 2023 01:28:43 +0000
ROA not before:           Tue 01 Aug 2023 01:28:43 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        14.9.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 09:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug  1 01:28:43 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=2FE672C69E30F844146E944FD44F3CD4D97245BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:32:24:30:ab:57:f5:a9:9f:4c:cb:53:ca:77:
                    ee:3c:87:6d:33:1e:40:1a:2d:42:1a:ca:f9:f3:3a:
                    0f:53:fa:49:63:fb:64:93:8a:69:ef:df:05:d6:e5:
                    90:ac:52:d0:c9:09:c8:5b:a5:d1:22:68:5c:5e:4f:
                    cf:b2:bf:c3:01:50:57:26:a7:86:18:56:9b:97:96:
                    00:20:ad:ac:02:b5:ba:9e:3a:56:54:3f:6b:12:1e:
                    83:60:d6:bc:3e:00:e5:09:a9:b5:c3:db:11:c6:c1:
                    23:e7:61:bf:2f:c5:69:1a:08:f4:f2:4a:47:78:7b:
                    71:1f:79:20:88:b9:ae:79:05:2b:cf:38:d8:ea:12:
                    7f:e3:3d:08:55:52:6b:b2:7f:95:1e:eb:ad:c3:5b:
                    5b:e9:55:0f:6d:39:d0:84:cc:fb:97:5a:64:7b:b1:
                    3d:66:16:e6:18:0a:e1:eb:50:51:60:3c:fd:e4:e3:
                    59:6d:a1:7b:9f:59:fd:75:a2:87:f4:75:a8:6e:46:
                    b2:66:d7:9f:9e:40:4e:ba:81:b8:ac:47:c7:4d:f1:
                    70:0e:62:10:a6:ea:c6:d0:f9:90:05:60:0a:e0:7a:
                    7b:16:d3:5e:da:97:1b:1b:0f:d7:eb:8f:57:9e:71:
                    0c:61:6a:59:3c:3c:54:bf:8c:42:8b:b2:cf:0a:29:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:72:C6:9E:30:F8:44:14:6E:94:4F:D4:4F:3C:D4:D9:72:45:BC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/L-Zyxp4w-EQUbpRP1E881NlyRbw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.9.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:8f:9d:be:4a:1d:2d:b7:6d:ee:38:cb:89:11:94:62:3a:
         24:eb:05:a4:24:21:73:99:43:56:e6:ca:64:4d:59:91:15:55:
         4b:7a:80:b8:5b:5a:63:ab:43:63:61:b4:b9:55:12:71:97:85:
         3d:02:92:7c:e3:b5:75:48:f8:2a:b9:5a:f4:49:c8:d7:76:79:
         e8:c8:cc:90:f2:64:e3:4b:2e:a4:23:c1:04:28:f9:f6:3f:df:
         9c:6c:01:05:d2:c3:1f:5d:3c:37:f7:b2:c0:00:41:43:cc:8f:
         2f:06:3c:10:c9:67:39:27:07:48:d7:c1:62:cc:ad:34:fb:19:
         1e:85:68:1f:27:a7:12:14:84:49:64:fc:cb:14:d7:1f:5b:93:
         9b:85:90:77:92:0b:4c:18:6e:42:af:a8:86:da:23:73:25:03:
         5c:b9:84:17:d2:73:61:be:f0:36:63:e1:2d:8f:28:1c:68:13:
         d3:c9:0a:e7:e3:7e:d4:38:fc:38:5f:eb:6a:53:c8:8c:d2:e4:
         81:58:5a:a1:46:3b:d3:0f:78:b2:8b:b5:0e:c1:48:89:37:00:
         d5:1b:a4:28:1d:51:75:15:ec:fe:17:2b:6f:2b:3d:12:85:64:
         5c:93:60:5f:35:8c:27:99:00:d3:a5:52:93:b2:8a:c0:31:53:
         a3:fb:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org