Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vQ5eHxCJBusab8YMv1ymfHJDg5k.roa
File:                     vQ5eHxCJBusab8YMv1ymfHJDg5k.roa (raw, json)
Hash identifier:          Cc8osAe+L2IT/jOPf9AWsrbF/22CoL7dGyC2xUxIx0A=
Subject key identifier:   BD:0E:5E:1F:10:89:06:EB:1A:6F:C6:0C:BF:5C:A6:7C:72:43:83:99
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0378
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vQ5eHxCJBusab8YMv1ymfHJDg5k.roa
Signing time:             Sat 31 Aug 2024 01:29:43 +0000
ROA not before:           Sat 31 Aug 2024 01:29:43 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.236.128.0/19 maxlen: 19
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:43 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=BD0E5E1F108906EB1A6FC60CBF5CA67C72438399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:60:fb:4f:49:74:a6:07:00:35:b0:f1:7b:
                    7e:e6:c9:ec:25:14:ad:de:52:42:8d:94:ef:af:2f:
                    b2:26:84:1a:e8:2b:f5:19:ce:42:31:55:b1:ed:71:
                    ca:f5:54:0a:ad:bb:fd:df:95:5f:d1:19:df:83:5a:
                    ec:88:6c:af:71:de:12:20:f4:80:73:b4:70:db:49:
                    6d:00:25:a2:2e:d9:14:ba:34:49:86:21:c3:ec:7f:
                    17:60:88:d2:bf:61:c7:cf:d5:10:a0:cc:3f:76:a5:
                    98:c9:02:38:21:92:d8:bb:a2:55:7e:39:5b:dd:84:
                    66:4b:f0:41:d7:12:a9:3c:05:4b:b0:b2:07:e1:29:
                    4d:ee:ad:88:c7:c3:1c:3a:a2:21:18:42:35:2f:23:
                    47:91:fd:04:d7:9e:48:23:ca:40:e3:04:a7:50:a2:
                    bd:bc:ba:f4:d4:f0:a2:49:72:31:35:db:2f:1c:5d:
                    bb:82:82:f1:8f:f0:ce:3c:9c:17:3c:51:4b:c1:4a:
                    ca:c3:ee:26:85:c8:33:c7:1e:66:05:8f:02:da:0a:
                    63:48:ee:19:d6:34:b8:25:22:58:3f:d7:c0:33:c0:
                    68:56:92:d0:22:d6:81:48:af:30:49:93:8a:34:0e:
                    6b:e5:99:ff:62:ce:f8:fe:62:d1:c1:ab:0d:e0:c8:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:5E:1F:10:89:06:EB:1A:6F:C6:0C:BF:5C:A6:7C:72:43:83:99
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vQ5eHxCJBusab8YMv1ymfHJDg5k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:44:88:d5:da:95:77:8d:1a:47:8e:9b:a3:30:77:42:5b:
         5b:e1:70:49:17:7a:b1:72:97:40:4e:5e:56:61:22:21:e9:ef:
         a8:7a:88:c4:2e:32:3f:64:7d:24:d6:25:68:3a:ea:66:ac:24:
         5c:e5:0f:0d:77:84:c9:b8:49:1c:65:30:72:71:89:f5:81:12:
         2b:46:d3:ee:a5:58:a9:d1:76:52:8b:d7:bb:d6:0e:88:e6:ec:
         95:7c:f2:3a:23:9a:58:4c:26:7d:ce:a7:bb:ae:2f:ba:fc:58:
         fd:2e:24:7d:a9:4d:3b:17:ed:e7:b2:fe:4d:6e:62:5f:e1:3c:
         6f:d9:35:40:f1:9c:d6:4a:45:71:66:91:5b:51:b4:51:59:83:
         ca:80:a3:76:4f:99:18:c3:92:b5:cf:61:5e:12:6a:d0:d2:86:
         96:60:dc:f4:87:78:1a:c5:6b:5f:ca:d2:8c:52:62:57:67:d7:
         3e:2b:54:31:e9:65:8f:fb:86:25:dc:b3:18:15:2c:ed:48:45:
         0e:a7:0b:88:c0:a9:2b:5a:87:96:c9:5a:5f:9e:5f:e1:6b:5e:
         9c:07:a4:cb:2a:39:e5:6c:08:17:aa:dd:fb:dc:f3:a6:d9:f2:
         6f:cb:a6:e1:a6:3d:52:ff:ee:b7:7c:59:64:21:64:fa:89:8a:
         5c:53:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:48 2025 by rpki-client