Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gYZraDu3s1StRwLY9pxMhMDsPoY.roa
File:                     gYZraDu3s1StRwLY9pxMhMDsPoY.roa (raw, json)
Hash identifier:          sQ00l15RJwYH0ACiv4no7eEuwktxBV5EiWB5b4+k8V4=
Subject key identifier:   81:86:6B:68:3B:B7:B3:54:AD:47:02:D8:F6:9C:4C:84:C0:EC:3E:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0374
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gYZraDu3s1StRwLY9pxMhMDsPoY.roa
Signing time:             Sat 31 Aug 2024 01:29:42 +0000
ROA not before:           Sat 31 Aug 2024 01:29:42 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.196.0.0/16 maxlen: 16
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:42 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=81866B683BB7B354AD4702D8F69C4C84C0EC3E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:91:30:e3:7c:eb:93:9f:47:ce:81:9b:7d:
                    d8:ef:30:c1:7a:38:89:1e:78:50:d5:d0:6e:a6:01:
                    d5:35:9d:07:a8:1d:2f:49:e0:d4:62:2b:f3:fb:1a:
                    d9:6b:71:03:32:9b:9d:ed:84:99:ed:5a:30:4d:09:
                    b7:ac:1e:5a:a5:b6:be:5c:1b:34:b9:34:cf:f7:0d:
                    e5:b8:f1:77:ca:5f:44:d1:d8:9b:5f:a4:1e:77:01:
                    20:90:42:b3:73:6b:4b:76:3f:a9:c1:67:29:c3:e7:
                    1c:e9:d7:1f:f7:66:3d:a6:b1:69:37:50:e1:55:e4:
                    3b:cd:ca:98:4e:91:da:47:1b:13:33:4f:8e:c3:d4:
                    da:66:88:d7:c5:db:5a:5a:e1:ea:8a:f9:d3:65:19:
                    e4:90:e9:6b:f5:47:dd:ba:8d:90:6a:ba:fc:fe:7e:
                    9e:ed:33:cf:bf:66:6c:0c:4d:d3:17:05:cd:37:7a:
                    57:4b:10:bc:91:90:51:ff:fd:8e:0b:cb:94:66:9e:
                    31:41:e3:6e:88:29:16:a5:8f:0d:9b:7f:fa:8f:2a:
                    8b:d2:b2:60:c9:78:e2:83:3f:9e:f1:86:4c:79:be:
                    94:69:d8:cd:af:98:53:4a:79:00:0a:1e:a5:67:05:
                    7c:06:67:f8:91:a3:13:76:43:6b:cb:e4:08:dc:5d:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:6B:68:3B:B7:B3:54:AD:47:02:D8:F6:9C:4C:84:C0:EC:3E:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gYZraDu3s1StRwLY9pxMhMDsPoY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:98:f7:bd:3e:39:58:8b:5a:53:84:07:93:2a:f9:ed:b0:64:
         83:27:ba:e4:c4:86:e0:6e:be:7f:5b:72:06:c3:b4:67:e5:1d:
         23:5b:da:e5:36:67:20:60:77:f2:a7:20:a2:9d:15:9e:1c:1a:
         7f:77:07:f4:bf:fc:4d:98:cd:be:63:cc:52:d4:5f:34:95:79:
         dc:3a:ff:6b:c4:44:31:65:b4:74:44:72:84:5a:b6:c4:78:c1:
         b8:e0:31:1b:a1:9a:38:77:49:59:0a:1f:f2:8d:c3:78:2a:cf:
         ce:03:83:95:fc:98:ba:7d:d8:a4:63:fc:c3:de:a8:cc:de:aa:
         35:1d:06:4e:6a:c1:95:73:ee:7e:4c:f8:c4:18:2d:77:c6:63:
         32:ea:e7:f3:4a:59:18:90:5f:ae:4c:18:2a:29:80:e6:2d:7b:
         6d:c1:f2:66:f3:c9:52:48:74:a0:25:16:72:59:74:52:cf:3e:
         b5:ea:a3:e2:8d:b8:07:7e:d6:a1:7a:eb:30:1b:56:88:dc:c8:
         e4:3c:47:38:92:51:0d:c5:68:61:c2:87:69:03:06:f4:dc:56:
         ae:64:5f:1e:4b:3d:6a:82:bf:79:dc:96:14:10:a8:25:0d:b7:
         81:b8:df:e8:1c:9d:39:b7:95:cf:a6:05:fe:c5:25:e6:d2:e3:
         ae:f6:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:19 2025 by rpki-client