Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_w8vO8VACVC8C0aHhjWFTIxa1E0.roa
File:                     _w8vO8VACVC8C0aHhjWFTIxa1E0.roa (raw, json)
Hash identifier:          /wm6yfjFjlBp6GJcPSl22t4s/9NIMaQxKRvbWxQpPcw=
Subject key identifier:   FF:0F:2F:3B:C5:40:09:50:BC:0B:46:87:86:35:85:4C:8C:5A:D4:4D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       021C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_w8vO8VACVC8C0aHhjWFTIxa1E0.roa
Signing time:             Mon 01 May 2023 01:37:52 +0000
ROA not before:           Mon 01 May 2023 01:37:52 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        119.107.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:52 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=FF0F2F3BC5400950BC0B46878635854C8C5AD44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:50:c2:e4:4c:74:d4:f4:8a:b1:77:c7:83:
                    5f:62:5b:74:e5:b9:24:77:18:fa:8c:50:b6:fe:7d:
                    34:72:04:ba:40:ac:07:15:de:2c:5e:68:43:b6:27:
                    d3:54:44:ca:45:2f:26:ec:33:9f:e0:3b:10:78:ed:
                    fe:50:7b:ae:6e:7b:00:6e:29:23:9e:d4:51:26:9d:
                    5b:e7:c0:18:d1:f0:13:46:3e:91:12:3a:31:59:2a:
                    be:9b:30:85:4b:ef:d7:20:ab:f8:c3:75:64:b7:58:
                    b6:05:98:c1:3b:57:3e:79:42:16:e2:11:7b:b3:b7:
                    e4:f9:e4:a7:13:7b:fd:b6:8f:c0:29:80:48:90:3a:
                    65:24:8e:67:73:37:d7:5f:a9:08:ef:b2:83:d3:c7:
                    58:3f:cb:d1:7a:e2:28:f3:77:57:d4:6c:b2:09:07:
                    bb:e3:71:7f:1c:08:ae:17:8b:c0:77:e7:ed:96:1f:
                    df:60:0d:08:9b:4b:35:4c:cc:9f:b5:ac:32:25:6d:
                    1b:5b:91:1b:0c:8d:8a:cd:4a:43:49:ab:91:df:90:
                    e7:3a:1c:f0:06:fe:95:1b:a7:01:a8:70:fc:cb:1c:
                    d3:1f:e1:85:3a:63:81:e0:d9:8a:39:40:2c:23:85:
                    db:84:2b:31:06:7b:9e:c8:09:4f:4e:49:f6:97:09:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0F:2F:3B:C5:40:09:50:BC:0B:46:87:86:35:85:4C:8C:5A:D4:4D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_w8vO8VACVC8C0aHhjWFTIxa1E0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.107.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:10:97:26:74:8b:81:b4:54:3f:e5:ba:8e:cd:11:ee:29:
         cc:a3:ab:c3:3a:0f:be:78:3a:5c:57:95:ba:65:2a:90:3b:7e:
         7a:49:43:b2:0c:58:12:25:37:9a:33:f1:89:04:c6:e8:de:ee:
         3e:62:79:7b:50:b3:20:05:54:f1:e8:b0:fa:37:93:1f:81:6d:
         07:66:5d:71:cb:b8:f8:86:c3:2b:32:7b:7b:ff:c0:62:a4:fc:
         58:c2:7f:56:9c:d5:6e:de:38:4e:5f:d5:2b:c0:b1:78:9c:85:
         f1:a4:61:99:20:8d:a1:b6:54:5e:80:f5:c5:2e:df:00:49:81:
         0d:db:e3:16:d5:56:d3:d2:4c:df:d4:b3:db:b9:38:79:44:18:
         4c:c5:5d:2e:8d:f9:bb:65:00:6c:ab:5e:54:51:12:b2:56:bd:
         f1:c6:b0:ce:db:20:14:1e:66:cf:04:b5:f2:83:6b:95:3a:74:
         e6:e7:b3:9e:ce:8d:22:82:94:16:f6:2c:ab:fb:38:dd:03:1d:
         f1:36:da:2c:4a:b7:e7:aa:cc:5d:03:99:6a:ba:6c:17:b3:77:
         3a:25:ce:3f:b0:f9:53:7e:a1:55:4b:8b:a4:73:d7:fe:87:f8:
         0b:cc:0a:bb:7e:2a:9d:cd:02:fa:69:17:7f:3a:1d:cb:f0:43:
         a5:1f:7a:c8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM3NTJaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZGMEYyRjNCQzU0MDA5
NTBCQzBCNDY4Nzg2MzU4NTRDOEM1QUQ0NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDSFDC5Ex01PSKsXfHg19iW3TluSR3GPqMULb+fTRyBLpArAcV
3ixeaEO2J9NURMpFLybsM5/gOxB47f5Qe65uewBuKSOe1FEmnVvnwBjR8BNGPpES
OjFZKr6bMIVL79cgq/jDdWS3WLYFmME7Vz55QhbiEXuzt+T55KcTe/22j8ApgEiQ
OmUkjmdzN9dfqQjvsoPTx1g/y9F64ijzd1fUbLIJB7vjcX8cCK4Xi8B35+2WH99g
DQibSzVMzJ+1rDIlbRtbkRsMjYrNSkNJq5HfkOc6HPAG/pUbpwGocPzLHNMf4YU6
Y4Hg2Yo5QCwjhduEKzEGe57ICU9OSfaXCVivAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/w8vO8VACVC8C0aHhjWFTIxa1E0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL193OHZPOFZBQ1ZDOEMwYUhoaldGVEl4YTFFMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAd3awAwDQYJKoZIhvcNAQELBQADggEBABTOEJcmdIuBtFQ/5bqOzRHuKcyj
q8M6D754OlxXlbplKpA7fnpJQ7IMWBIlN5oz8YkExuje7j5ieXtQsyAFVPHosPo3
kx+BbQdmXXHLuPiGwysye3v/wGKk/FjCf1ac1W7eOE5f1SvAsXichfGkYZkgjaG2
VF6A9cUu3wBJgQ3b4xbVVtPSTN/Us9u5OHlEGEzFXS6N+btlAGyrXlRRErJWvfHG
sM7bIBQeZs8EtfKDa5U6dObns57OjSKClBb2LKv7ON0DHfE22ixKt+eqzF0DmWq6
bBezdzolzj+w+VN+oVVLi6Rz1/6H+AvMCrt+Kp3NAvppF386HcvwQ6Ufesg=
-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org