Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qCq0qtT824vNg_ImAi-96cC7Nw4.roa
File:                     qCq0qtT824vNg_ImAi-96cC7Nw4.roa (raw, json)
Hash identifier:          FVjIxn97ilGWIPo0D4w1GmnUCTrE3yzTXx0E1U/TrZY=
Subject key identifier:   A8:2A:B4:AA:D4:FC:DB:8B:CD:83:F2:26:02:2F:BD:E9:C0:BB:37:0E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01A8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qCq0qtT824vNg_ImAi-96cC7Nw4.roa
Signing time:             Mon 01 May 2023 01:30:41 +0000
ROA not before:           Mon 01 May 2023 01:30:41 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.208.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 01:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:41 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=A82AB4AAD4FCDB8BCD83F226022FBDE9C0BB370E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:a1:31:19:db:3f:73:44:af:86:35:11:f2:
                    44:93:52:54:24:b4:af:2a:a5:de:d5:64:bd:65:10:
                    ac:2b:cc:66:5b:13:59:e0:81:ec:50:9c:02:af:7a:
                    04:fa:90:5d:78:2b:6f:f1:f5:8f:64:de:24:26:77:
                    f9:51:47:49:77:5e:a4:2f:77:b6:e9:6f:b1:33:9b:
                    49:5f:af:a4:37:80:61:48:00:a1:79:6f:c2:a9:ae:
                    ba:c1:59:55:07:6a:98:7e:bd:86:00:ed:52:8a:b0:
                    aa:c1:59:01:cf:97:a1:ee:a0:c0:c3:ce:64:e4:45:
                    32:53:22:8b:8d:60:05:66:9f:2e:bf:2a:2b:89:f0:
                    ac:9f:02:15:93:dd:60:1f:a4:6c:48:df:2a:44:66:
                    8f:7c:e6:07:7c:a1:d4:13:01:69:81:db:fd:8c:23:
                    0e:a0:69:5e:6f:18:8b:e7:5d:36:a5:3e:b5:c6:16:
                    d6:84:54:38:54:07:dc:00:1d:24:f7:b7:c9:fd:3e:
                    cf:f7:45:05:e0:1a:bf:a6:17:e6:b3:80:26:ba:b7:
                    79:a0:00:aa:3b:ff:ea:63:c9:c9:26:e2:7b:a3:bb:
                    4a:3b:2b:c2:28:61:7b:28:ad:ae:bf:59:5e:37:7c:
                    40:d7:a6:5d:d1:78:aa:ee:58:91:2d:d7:34:58:9f:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2A:B4:AA:D4:FC:DB:8B:CD:83:F2:26:02:2F:BD:E9:C0:BB:37:0E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qCq0qtT824vNg_ImAi-96cC7Nw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:31:71:f7:5d:ca:d2:3b:96:7c:24:7e:d6:2b:69:fc:f0:
         64:b9:6d:fa:0a:c8:25:c0:9e:b3:bc:af:78:51:4e:eb:27:83:
         f3:e9:34:c3:98:e8:b3:12:a7:f0:11:e3:95:31:a0:b1:ba:d6:
         d3:8f:31:9b:87:20:53:8d:fd:9f:10:a9:c3:00:ab:74:71:ba:
         f4:8d:07:48:41:1a:0b:00:c7:41:b7:2d:22:b6:06:3c:21:a7:
         ca:ce:80:66:0a:0b:18:b1:77:71:a3:7d:c6:9b:da:9d:79:34:
         56:09:81:72:08:aa:3e:b1:03:d1:dd:d3:86:f1:1b:dc:4a:1b:
         1c:98:a8:69:2a:52:30:e0:51:e5:3d:ba:31:25:02:bb:1b:c5:
         cc:fb:59:54:6c:d3:9e:53:4f:49:dc:67:e2:d5:07:b5:ca:d5:
         ca:36:61:6a:65:1f:6f:96:13:e6:16:5a:a0:c0:80:9c:14:fa:
         55:ee:35:9f:d3:1e:bb:41:bd:9c:1c:f8:b8:0c:dc:3a:08:26:
         0e:c2:a4:ff:5a:f4:c2:20:9f:06:3d:4b:55:69:5f:b1:ee:99:
         26:39:aa:83:34:51:84:2d:a0:5c:41:ac:5c:48:48:18:cf:a2:
         5d:a6:65:09:a5:0d:a7:91:b9:99:ff:53:ca:57:67:53:f2:50:
         5a:25:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 02:49:22 2024 by rpki-client on console-ams.rpki-client.org