Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LAYSDsgBoRVd3wUq_upmCTiBTEQ.roa
File:                     LAYSDsgBoRVd3wUq_upmCTiBTEQ.roa (raw, json)
Hash identifier:          /viNMr/wtV5vZ1yP+1t7NE14KscJCjtrp0ieV1cZghc=
Subject key identifier:   2C:06:12:0E:C8:01:A1:15:5D:DF:05:2A:FE:EA:66:09:38:81:4C:44
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01BB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LAYSDsgBoRVd3wUq_upmCTiBTEQ.roa
Signing time:             Mon 01 May 2023 01:32:09 +0000
ROA not before:           Mon 01 May 2023 01:32:09 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:09 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=2C06120EC801A1155DDF052AFEEA660938814C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:0b:2a:44:50:62:b2:f5:f7:6b:07:6d:b3:
                    b2:cb:64:f1:a9:51:e9:22:a3:bb:38:f5:28:b7:aa:
                    b3:3f:ff:35:f6:c9:76:74:95:b1:06:fc:eb:00:1a:
                    9a:dd:4f:f0:0c:42:7c:65:94:5a:41:40:6a:c0:1c:
                    a0:22:6a:a3:d3:6a:7d:86:a4:cd:e3:06:c1:a2:05:
                    23:ce:31:82:18:2b:fe:ec:52:4a:2b:98:3e:c0:f2:
                    6a:5e:9c:f5:f2:95:1e:81:1c:7a:c6:82:53:7a:6b:
                    5a:82:dd:42:65:65:bf:b2:72:26:c4:b4:4c:4f:ca:
                    21:f5:a9:92:90:cc:77:54:29:26:c5:98:69:56:2c:
                    3e:2b:0a:86:60:32:cc:4b:e4:54:65:08:e9:81:48:
                    25:4f:3f:cf:a8:9c:a9:aa:fd:82:0b:8a:af:12:fb:
                    66:f7:aa:5e:2c:5e:13:1a:36:e8:eb:3a:4e:b3:0d:
                    ff:60:ac:94:ab:4e:ca:7a:b4:34:a6:69:2a:82:3a:
                    c3:c6:b3:98:c5:79:b7:3f:4b:ca:0e:6e:8c:14:f5:
                    4d:a8:01:fc:af:a9:ee:71:4f:94:25:d7:04:54:66:
                    e5:fc:99:ae:d9:bc:d9:e6:43:1b:12:49:69:a5:0b:
                    fb:db:3f:7e:35:82:0d:ee:4b:21:ee:3c:39:05:18:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:06:12:0E:C8:01:A1:15:5D:DF:05:2A:FE:EA:66:09:38:81:4C:44
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LAYSDsgBoRVd3wUq_upmCTiBTEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:00:1a:6e:4f:e5:b4:c0:43:e1:81:0d:a4:cf:42:55:2a:
         a5:7f:4f:2f:8a:40:91:93:16:33:1b:cd:dd:17:5f:73:12:59:
         ec:2c:14:cf:db:6d:33:58:f3:8a:f4:f5:59:a2:98:78:1e:65:
         23:88:93:a4:70:18:eb:e9:7f:e6:59:44:c7:74:a6:73:23:40:
         17:d1:ef:92:ad:bf:6f:a8:27:7c:46:1d:22:04:d3:96:52:a8:
         35:95:14:14:bc:0f:07:de:03:6e:20:b5:7b:b6:3b:c0:0d:ef:
         b1:ad:6e:df:64:2f:b9:42:f0:76:e8:59:37:75:1c:58:f6:24:
         cf:86:81:27:29:54:a4:7d:76:1a:18:76:1a:0d:09:83:c1:38:
         6d:62:d2:4b:51:af:c2:6a:f4:8b:aa:89:c1:19:85:60:b9:12:
         a6:13:96:cd:fa:45:7e:df:c8:ff:1d:52:d4:8e:0a:2d:a2:38:
         d3:58:3e:63:38:9b:48:d2:cf:7c:56:df:4c:b5:5e:35:3d:0d:
         b2:78:a4:b3:ce:17:69:1a:0d:67:0e:b1:ec:f5:46:e7:ba:14:
         3f:4a:51:25:21:ef:60:30:36:1f:69:e1:43:ce:50:bc:21:d4:
         de:63:5a:8b:67:a9:9c:be:7f:b2:49:db:18:0f:eb:6e:5b:fe:
         31:b3:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org