Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bpe8aKNNRtvxp6cqA3n-jCXh4g8.roa
File:                     bpe8aKNNRtvxp6cqA3n-jCXh4g8.roa (raw, json)
Hash identifier:          7j8eXk+Y+DNabS0WQzRQ0tw70W/xDj0qnhzWYcOazVg=
Subject key identifier:   6E:97:BC:68:A3:4D:46:DB:F1:A7:A7:2A:03:79:FE:8C:25:E1:E2:0F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0205
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bpe8aKNNRtvxp6cqA3n-jCXh4g8.roa
Signing time:             Mon 01 May 2023 01:35:46 +0000
ROA not before:           Mon 01 May 2023 01:35:46 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        182.250.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:46 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=6E97BC68A34D46DBF1A7A72A0379FE8C25E1E20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:90:0a:0b:17:bb:6d:b2:9d:cd:de:50:0d:
                    45:d7:c0:39:4e:4c:da:0e:c7:86:af:56:99:fe:a9:
                    df:0e:f8:0c:f0:6d:43:88:67:61:fd:43:e8:99:87:
                    3b:1e:ad:bf:ce:d8:da:79:04:c0:d0:a0:d9:72:c8:
                    b7:cd:9f:4f:5c:60:bd:f8:d4:2c:e8:6a:db:3c:73:
                    d8:44:81:da:d8:0b:e8:f8:eb:b1:12:58:80:2e:00:
                    da:38:8b:08:54:1a:a0:75:eb:11:ca:11:f2:e3:ef:
                    4b:f2:ad:22:1f:0c:00:b2:8d:75:b7:8b:0d:9a:f0:
                    98:f2:24:98:e3:f8:76:f6:b4:07:9c:e8:43:8d:a7:
                    64:3b:6f:90:83:b6:6b:73:6a:e2:ff:06:2d:d2:c4:
                    b8:7d:4a:a7:cf:70:70:43:be:eb:73:ba:26:2c:43:
                    42:df:eb:44:2e:96:be:cf:c3:b3:08:b1:4c:86:ed:
                    eb:61:7c:33:bf:ff:c6:6f:9c:8c:de:e3:a0:d7:87:
                    a9:41:ff:63:49:92:28:0b:06:5b:b4:b6:6a:bf:0b:
                    a7:88:40:61:2e:85:86:8c:05:fb:ac:dc:10:72:0e:
                    86:b6:aa:df:22:88:c3:db:05:ab:89:1f:95:7f:b0:
                    c8:60:15:70:ff:1c:39:2b:a4:c0:71:0f:9f:a3:03:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:BC:68:A3:4D:46:DB:F1:A7:A7:2A:03:79:FE:8C:25:E1:E2:0F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bpe8aKNNRtvxp6cqA3n-jCXh4g8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:b2:64:e8:3a:a7:00:09:6c:59:84:db:88:4a:56:8f:75:
         83:3b:73:98:68:0c:2c:b5:31:34:f7:f7:7e:c4:84:93:a8:15:
         f4:fb:18:04:80:a3:b0:f1:4e:b6:12:85:27:5a:fc:a5:7f:40:
         57:c5:c4:26:21:d1:50:0b:77:93:fd:0f:72:31:98:bd:37:96:
         da:10:54:9d:33:22:ee:a4:f0:d9:aa:7e:e9:52:ad:e4:ff:9d:
         b1:62:c6:07:80:8e:dd:7a:20:ad:11:32:4d:0b:21:e8:bb:db:
         f4:78:25:02:7d:63:c1:a2:5f:6d:6d:59:b2:d2:fa:37:01:43:
         e6:2e:1a:0f:1a:2c:48:eb:7f:26:6c:0d:ab:2a:79:1e:ed:ee:
         12:c7:07:41:b3:b0:d1:16:17:ad:6f:55:ca:42:4b:f7:5b:74:
         2c:76:0c:e7:17:16:3e:39:79:a4:92:c2:ed:89:84:71:f4:2e:
         68:13:ad:0d:8d:59:4c:c7:cd:95:d0:65:7a:8c:60:fe:d6:d0:
         16:8a:4d:62:7e:75:a0:4a:a8:0d:b0:fd:7e:2d:32:5f:55:37:
         c5:89:93:06:eb:6e:c5:75:59:04:eb:7c:37:4c:3b:62:7d:3f:
         3b:d8:33:0d:e7:9b:39:b2:a6:60:f8:3d:ed:48:36:7b:9c:6a:
         93:88:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org