Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/P1oyWTwK9v6E2pVxFfxusU9jxaM.roa
File:                     P1oyWTwK9v6E2pVxFfxusU9jxaM.roa (raw, json)
Hash identifier:          AhfrNo09cHXwWPvVfULqpBp4GqDsaMoFnOzWm2CHRWU=
Subject key identifier:   3F:5A:32:59:3C:0A:F6:FE:84:DA:95:71:15:FC:6E:B1:4F:63:C5:A3
Certificate issuer:       /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial:       03
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/P1oyWTwK9v6E2pVxFfxusU9jxaM.roa
Signing time:             Tue 05 Mar 2024 15:49:18 +0000
ROA not before:           Tue 05 Mar 2024 15:49:18 +0000
ROA not after:            Wed 05 Mar 2025 15:42:28 +0000
asID:                     151382
IP address blocks:        157.15.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 09:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Validity
            Not Before: Mar  5 15:49:18 2024 GMT
            Not After : Mar  5 15:42:28 2025 GMT
        Subject: CN=3F5A32593C0AF6FE84DA957115FC6EB14F63C5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:73:0f:45:da:62:a6:e6:44:36:54:8f:45:
                    86:27:fb:74:4f:7a:f6:64:a0:ff:af:84:d7:eb:98:
                    a7:de:bf:49:6c:71:59:de:69:79:d3:6d:90:6c:1a:
                    27:79:23:58:ea:c9:e1:2f:b8:32:52:b2:5e:38:cd:
                    af:29:0a:8f:c8:7f:d5:75:96:72:1e:5a:de:82:09:
                    36:92:dc:b9:c5:2d:ad:1c:04:9b:42:f9:1d:2c:e5:
                    47:2e:dc:83:ff:f9:8b:29:f8:1e:fc:74:ec:b8:62:
                    57:52:76:2c:8a:94:ac:30:8c:3b:c8:7f:35:c2:3a:
                    99:4e:4d:2b:5c:00:c8:30:d6:d4:a0:4a:bc:00:1c:
                    0e:7d:0e:2b:14:d6:fd:60:6e:26:41:50:02:8c:82:
                    12:18:94:be:28:76:a6:5e:5c:e3:9a:19:76:70:9d:
                    74:37:40:9c:bc:99:ca:17:37:42:67:48:b7:b2:0c:
                    41:b0:fd:19:7c:4d:b1:09:45:b1:df:a6:8b:cf:44:
                    81:c6:cf:1c:fa:30:0c:9d:e6:8d:32:56:f8:6c:ea:
                    e1:0f:2c:b2:1c:51:9a:db:be:4b:f1:2b:04:be:84:
                    fc:17:ec:79:84:11:26:09:5a:f4:02:fa:e4:b2:47:
                    b3:12:f6:4a:9a:bc:eb:e2:cb:94:c1:5a:44:43:fb:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5A:32:59:3C:0A:F6:FE:84:DA:95:71:15:FC:6E:B1:4F:63:C5:A3
            X509v3 Authority Key Identifier:
                keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/P1oyWTwK9v6E2pVxFfxusU9jxaM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:bf:ed:76:08:fd:8b:67:14:c3:54:07:6b:b9:d6:d1:03:c6:
         15:98:1b:00:ca:57:7c:79:48:3a:b1:1c:e2:66:35:7a:35:ae:
         98:75:6c:5f:f1:3a:de:a6:0f:fd:90:5d:16:d8:99:b9:c7:d0:
         4f:de:3f:7c:4d:0a:f9:2e:f1:56:61:53:40:c4:72:0d:b3:aa:
         66:e3:6a:cd:1a:bf:70:3e:d4:d9:3a:8b:65:20:48:2d:61:0d:
         80:1b:16:5a:39:43:8d:f0:d5:f1:8c:11:c6:6f:be:51:89:2f:
         f2:2b:91:e5:c9:9a:d8:51:e4:06:7b:4d:5b:16:60:a9:f5:f3:
         71:98:f0:42:03:ef:d7:7c:fb:76:66:86:2c:79:e5:31:39:7e:
         ee:79:80:0f:c8:32:f2:83:ea:4c:80:73:06:0a:fb:04:fd:2c:
         bc:c9:77:67:89:f7:a8:08:c6:10:49:49:97:51:36:9c:2c:bd:
         07:af:24:4b:31:36:a0:78:2b:fd:9a:65:35:0b:25:c1:68:67:
         8e:b5:89:26:c8:19:47:67:b6:af:ba:49:8b:04:04:c4:4b:60:
         ba:8e:e9:13:66:60:63:56:37:9d:6c:02:26:65:a0:81:9f:f2:
         5d:71:2f:08:1e:1c:73:6f:d8:db:33:81:96:c3:c8:20:82:ff:
         3f:b3:00:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org