Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa
File:                     cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa (raw, json)
Hash identifier:          c3+amCYv0/Y+jLJiuNFPjrXU/695ms9Kn9gjIQI4DGU=
Subject key identifier:   70:1F:8E:1B:65:47:A8:14:43:45:1E:91:B4:81:92:C4:37:84:2B:C1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0255
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa
Signing time:             Sun 01 Oct 2023 01:29:14 +0000
ROA not before:           Sun 01 Oct 2023 01:29:14 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        27.85.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:14 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=701F8E1B6547A81443451E91B48192C437842BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:55:ae:b6:53:fa:cd:de:c3:20:38:7a:54:
                    18:4c:71:5f:f3:1b:f6:b9:6e:f1:2f:57:b1:06:e3:
                    43:fa:37:0f:5b:58:d7:34:79:54:8e:58:9b:29:5f:
                    9a:b3:61:8d:98:e4:65:c8:58:9a:58:a3:f6:f8:0d:
                    a2:11:08:47:3b:ae:7f:a9:5a:ba:90:fe:88:65:4b:
                    9a:c6:9a:b8:25:da:41:b2:7e:a0:44:20:44:61:6a:
                    31:0e:1a:fb:a7:98:8c:46:f6:62:39:43:7f:60:3d:
                    3e:61:d6:d6:93:fe:03:c6:28:fc:4d:ca:2e:73:49:
                    08:23:ea:38:aa:4f:43:60:07:65:93:36:ab:0f:d9:
                    11:86:58:07:89:9a:71:25:b6:87:4d:a8:57:a9:a0:
                    fe:b3:31:a2:21:46:9a:31:f3:21:5c:62:d1:bf:bb:
                    e0:1e:ca:69:70:5d:a6:7d:10:ca:21:89:f1:63:90:
                    f5:27:2a:cc:c3:5a:cc:42:c9:f7:b5:cc:33:8e:ab:
                    bc:03:2d:99:90:88:3e:13:d5:e5:df:01:f7:e6:7f:
                    68:a9:1d:cb:38:b2:3d:a7:04:1c:19:39:80:84:aa:
                    27:aa:76:3f:f8:69:7a:7e:40:77:84:83:77:d5:99:
                    6e:61:bb:0e:33:33:fa:41:b6:f0:f4:78:ad:8f:2a:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1F:8E:1B:65:47:A8:14:43:45:1E:91:B4:81:92:C4:37:84:2B:C1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:05:36:d6:a5:27:a6:88:90:0c:21:f9:81:e3:83:23:f7:
         8b:b3:d9:9a:4a:a1:35:23:18:5a:09:ad:6b:c0:c9:ae:c3:fa:
         93:1b:44:1c:e8:28:8e:b2:d7:4e:db:68:77:87:3d:aa:0d:29:
         be:60:fb:6b:77:72:12:2e:58:a7:31:40:2a:be:51:a4:16:e6:
         ca:b8:4f:03:e1:39:eb:a7:2c:3a:02:25:97:fa:bc:b1:d1:37:
         53:4b:a3:0d:7c:20:56:bc:29:c7:02:53:99:cf:6b:05:59:48:
         39:2c:4f:81:73:8e:0d:ed:99:51:bf:99:96:14:31:d2:21:49:
         3e:7f:0f:38:4e:1e:a4:cb:06:9e:39:61:a6:90:80:14:d9:95:
         ba:05:3e:3e:ed:93:1e:86:e1:a1:f4:6d:3f:2c:e3:55:92:5f:
         6e:f4:eb:bf:3a:be:b2:00:37:f6:4b:95:d2:77:a3:e5:d6:f9:
         97:ea:28:c2:3b:01:f8:f9:8e:9f:09:13:19:5c:f3:81:6d:a3:
         1d:5a:d9:fe:85:d6:ab:ea:7d:ad:db:a5:cf:22:d4:1c:b8:d0:
         f0:f2:99:d8:26:89:50:4a:fb:de:7a:df:92:b3:bd:e5:a6:92:
         be:78:71:16:7c:86:8d:39:d6:3c:0c:15:fb:8a:be:f3:03:3f:
         8a:e3:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:42 2024 by rpki-client on console-fra.rpki-client.org