Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nZabEmhmIkKqqAXHCtHk-K6pw5o.roa
File:                     nZabEmhmIkKqqAXHCtHk-K6pw5o.roa (raw, json)
Hash identifier:          aBmXRTjFWkQLso2Zci93m3Uz7KqzUz3g85XeccktP5E=
Subject key identifier:   9D:96:9B:12:68:66:22:42:AA:A8:05:C7:0A:D1:E4:F8:AE:A9:C3:9A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       024A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nZabEmhmIkKqqAXHCtHk-K6pw5o.roa
Signing time:             Tue 01 Aug 2023 01:28:43 +0000
ROA not before:           Tue 01 Aug 2023 01:28:43 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        14.9.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 09:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug  1 01:28:43 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=9D969B1268662242AAA805C70AD1E4F8AEA9C39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:00:b7:21:72:de:a5:57:82:97:3c:e9:f9:
                    80:bd:6b:18:f9:37:37:7d:de:f9:f5:e5:88:1a:33:
                    ba:a0:a4:1d:92:c5:e1:84:82:ad:87:d4:a0:ba:2c:
                    23:a0:df:b0:90:7f:44:ea:ef:17:6d:55:1d:f1:4e:
                    56:bc:28:5e:dc:d1:6a:37:50:32:0d:59:66:78:6d:
                    15:66:3e:47:81:56:54:c8:dd:f0:a2:ce:cb:2e:64:
                    4a:41:af:08:24:ef:de:d7:62:6d:72:9d:20:3a:37:
                    4d:68:e0:90:49:2a:db:e9:a2:06:67:76:8b:91:31:
                    d6:e7:8d:87:1a:ac:57:1c:2f:72:64:ec:0e:e7:6b:
                    3f:0d:ea:0d:77:44:03:58:95:bf:d9:4c:15:e1:af:
                    10:6b:a5:78:1e:5f:57:c7:14:61:bb:d6:17:0c:60:
                    be:76:56:63:b2:42:4b:b5:38:87:2d:fd:5b:46:bb:
                    17:2a:be:27:72:ac:ba:6f:54:92:59:48:aa:44:2e:
                    7e:44:9a:fd:f8:e3:19:65:44:6a:d0:c1:e4:87:2e:
                    4c:ec:9d:e1:3f:d1:3f:f9:16:30:9e:6e:58:8f:0a:
                    67:c4:a0:ff:2b:34:bb:2d:a3:f2:2c:bd:e0:c1:6b:
                    0d:57:1e:4b:ef:b9:bd:e6:5d:96:e1:17:84:1d:09:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:96:9B:12:68:66:22:42:AA:A8:05:C7:0A:D1:E4:F8:AE:A9:C3:9A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nZabEmhmIkKqqAXHCtHk-K6pw5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.9.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:a6:c4:ee:1b:88:57:c7:13:66:ad:b8:0f:63:7f:c2:a0:
         6f:14:3c:c0:97:dd:d6:67:a0:4f:39:93:1b:e9:c7:14:cc:40:
         3f:71:a9:26:9e:fd:4d:9a:ff:9e:84:0f:ec:6b:c6:bc:f4:59:
         b0:80:c2:40:71:35:35:8f:bf:02:dd:53:01:01:22:1a:64:3d:
         88:a5:29:06:82:41:fc:24:cc:69:68:44:7a:67:95:a6:12:53:
         b1:0e:91:95:15:83:81:99:e7:9b:33:21:6c:81:82:bb:77:c9:
         db:86:aa:53:09:35:e7:2a:df:d7:6d:40:aa:75:de:bb:2c:2d:
         25:05:b0:33:dc:be:22:6b:52:13:98:55:c1:42:b3:6e:17:b5:
         1b:54:49:56:16:ed:9f:19:eb:d6:10:82:78:ed:9d:92:b9:57:
         96:b2:08:9d:97:f9:3e:91:5e:3b:58:3f:ba:18:1f:b6:d9:52:
         6e:89:8b:07:2a:60:eb:15:f6:d2:10:a7:85:a0:c9:49:4e:7b:
         51:68:78:1c:9c:4d:94:92:9e:fa:2b:79:e6:c9:36:3f:b6:7d:
         16:a1:7f:b4:5b:05:e2:9e:a0:82:33:e6:89:b2:d8:a1:42:25:
         01:51:3c:28:0d:37:49:e3:9b:32:c7:be:62:f6:fc:2a:11:be:
         68:4b:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org