Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_4Q6lUCrP6_7ukohHOP3sY-hC7Y.roa
File:                     _4Q6lUCrP6_7ukohHOP3sY-hC7Y.roa (raw, json)
Hash identifier:          bnGnOOEtYN2uu9j9Y7XeuWPO8uKsrnrV5GB6+T8uNmM=
Subject key identifier:   FF:84:3A:95:40:AB:3F:AF:FB:BA:4A:21:1C:E3:F7:B1:8F:A1:0B:B6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0247
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_4Q6lUCrP6_7ukohHOP3sY-hC7Y.roa
Signing time:             Tue 01 Aug 2023 01:28:42 +0000
ROA not before:           Tue 01 Aug 2023 01:28:42 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        14.12.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 09:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug  1 01:28:42 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=FF843A9540AB3FAFFBBA4A211CE3F7B18FA10BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:77:67:15:64:d5:9d:10:38:2f:06:57:de:
                    5e:49:91:28:b4:8b:fa:32:3d:13:9d:e8:81:52:d9:
                    7b:0e:ff:17:2b:13:3f:27:86:6c:1a:a6:bc:21:a8:
                    f8:07:18:e7:98:2b:65:dc:e1:54:0f:5b:43:f7:43:
                    cc:d1:d0:ae:79:42:f4:3f:9b:63:44:95:65:31:ec:
                    67:95:f6:4c:f0:ea:1c:85:4d:a6:89:06:ab:5b:72:
                    35:8a:bf:15:29:d5:a3:22:1e:9f:67:64:ed:55:8f:
                    53:6b:4c:c3:5c:eb:9c:5f:3f:72:f7:a2:87:a1:36:
                    34:a7:d1:6c:16:bb:5f:36:d9:af:be:10:b1:96:20:
                    ba:f9:17:fb:97:31:93:bc:9f:ed:d0:79:74:e4:97:
                    3a:9e:b9:cf:da:37:b5:ce:50:db:7e:f7:7e:da:a4:
                    61:c3:f7:84:64:d6:55:5d:6e:aa:ad:1a:ee:70:c8:
                    e1:7b:d4:1e:00:30:2b:d0:8f:9d:88:ce:43:68:22:
                    8c:ff:95:76:41:59:ca:d7:8c:23:9f:93:8d:52:85:
                    c6:02:e4:73:75:8f:00:6b:2c:74:bd:3a:8b:ea:67:
                    4c:e3:5e:be:84:78:0c:94:f0:ea:e0:44:0d:dd:a5:
                    32:cf:c7:7e:5e:a6:27:a4:f5:df:67:bf:50:c6:e5:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:3A:95:40:AB:3F:AF:FB:BA:4A:21:1C:E3:F7:B1:8F:A1:0B:B6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_4Q6lUCrP6_7ukohHOP3sY-hC7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:35:f3:b0:5e:bd:db:9b:67:28:c1:55:78:79:0e:0f:4c:
         07:49:bc:da:ed:35:67:13:6b:e0:bc:d5:20:be:05:70:ab:21:
         96:82:eb:4f:1f:c8:e8:d4:c5:87:3d:01:a4:b3:e8:de:3d:49:
         e2:84:97:92:d2:8b:cf:e9:6b:c0:81:d5:ee:36:d8:01:72:ca:
         51:b3:17:c7:9d:32:8e:4c:17:2d:ad:d9:05:1f:c6:21:62:11:
         b8:24:cc:64:bf:d9:59:83:da:16:68:65:e7:af:64:e1:80:8c:
         7b:5a:db:15:a7:43:f3:33:8b:90:4b:ab:18:70:92:0b:2b:fb:
         7c:00:33:21:ff:dd:0b:1e:9f:3d:d0:91:a5:2c:de:68:e1:47:
         4a:2c:03:85:62:09:4d:1d:8a:d8:0b:a1:f3:85:3a:e8:a7:ff:
         f6:2c:29:7b:48:d9:13:21:20:f3:e9:a8:be:4e:77:d5:a6:65:
         1b:14:91:0a:3a:99:74:1d:2a:17:ac:c1:f0:ca:59:fd:f9:47:
         91:e8:ad:2e:1b:35:6f:7e:75:ca:29:ba:9a:62:14:a5:2b:f1:
         0e:29:41:5c:3c:81:f1:50:42:50:15:75:b9:5d:f6:a2:46:19:
         99:9a:d1:7c:8b:3b:dc:ca:b0:e7:0c:35:9f:04:6d:fd:6b:be:
         a5:d2:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org