Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/kBr57X8yJFYHPLPRBWbAEgZ-WNg.roa
File:                     kBr57X8yJFYHPLPRBWbAEgZ-WNg.roa (raw, json)
Hash identifier:          ScTI1vwbomk+3SWr3n0JhnBPVaXADlbJGwoySt1pNwE=
Subject key identifier:   90:1A:F9:ED:7F:32:24:56:07:3C:B3:D1:05:66:C0:12:06:7E:58:D8
Certificate issuer:       /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial:       07
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/kBr57X8yJFYHPLPRBWbAEgZ-WNg.roa
Signing time:             Thu 02 May 2024 16:54:52 +0000
ROA not before:           Thu 02 May 2024 16:54:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     151381
IP address blocks:        157.15.254.0/23 maxlen: 25

Validation:               Failed, certificate revoked on Sat 25 May 2024 16:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Validity
            Not Before: May  2 16:54:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=901AF9ED7F322456073CB3D10566C012067E58D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:69:34:53:4a:1b:86:3b:a0:af:1c:da:cb:
                    cf:31:a8:7f:d4:e5:53:95:8b:83:0e:57:7e:59:16:
                    c3:8d:a6:b3:30:8c:97:36:80:64:d2:73:50:03:2d:
                    2a:40:97:1d:42:d4:cb:0c:e2:9f:e1:5c:90:60:40:
                    75:2a:d9:36:99:bf:77:46:24:4f:81:f9:60:f3:7d:
                    23:1c:ef:bd:4c:4d:b2:61:34:d5:0b:16:3f:dd:36:
                    3d:1c:a6:e7:f6:9f:cf:c7:c4:54:d1:e1:56:da:6a:
                    31:78:35:9e:c0:f5:bc:cd:5a:11:8a:8f:51:3a:23:
                    18:7c:f8:29:e3:49:54:8e:bd:b4:8e:ad:cc:a6:10:
                    13:ec:1a:b0:be:4d:2f:e5:29:b5:62:b4:7c:02:5e:
                    25:2e:f3:44:f6:3a:91:49:fd:66:fc:90:07:c2:0a:
                    bf:fc:20:42:25:57:0b:2d:de:53:e7:b7:86:a4:0a:
                    85:0c:d6:e3:a5:78:20:e1:65:7c:0b:7b:13:f6:43:
                    4e:87:42:27:f2:ae:f9:45:42:c9:63:e4:b4:13:b1:
                    a8:75:a2:d5:66:a1:f2:10:3f:fe:a5:2c:48:35:a6:
                    7d:e7:bc:26:3d:ef:47:61:c8:e9:bd:74:ba:e1:74:
                    cd:7e:5b:04:45:80:fe:3f:8a:9e:90:cb:da:ae:72:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:F9:ED:7F:32:24:56:07:3C:B3:D1:05:66:C0:12:06:7E:58:D8
            X509v3 Authority Key Identifier:
                keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/kBr57X8yJFYHPLPRBWbAEgZ-WNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:0b:7c:b7:7e:8a:61:d9:a5:76:06:9c:8c:39:68:ea:45:88:
         ae:8f:03:ce:ee:90:35:47:45:83:20:96:37:c3:1d:7e:3c:95:
         10:12:40:bf:ae:18:cb:e2:75:0b:8b:67:63:6b:4b:13:72:09:
         ef:ad:6e:3b:ba:26:b2:3f:b0:71:d2:95:9a:88:5b:2d:74:ea:
         34:0a:7a:be:e5:b2:42:97:47:d6:19:35:24:9a:39:10:fc:6f:
         3c:1f:bc:60:fb:37:ce:0e:e2:59:5c:1b:53:36:eb:26:4b:74:
         34:49:74:11:ad:94:a5:89:7a:55:52:47:5d:1f:43:9f:f8:c6:
         89:5f:69:85:56:f0:d6:54:e7:1b:d0:f6:f5:56:30:90:13:45:
         0f:d3:6c:4a:b6:67:f9:e7:99:53:de:91:d7:78:40:4c:e3:64:
         29:93:64:41:d2:5a:1b:cc:7d:d7:be:0b:19:1d:93:df:60:f8:
         91:d7:1c:af:72:fc:aa:ea:55:6e:82:5d:05:be:10:93:d6:99:
         95:8e:d7:f4:53:5f:fe:9b:aa:a3:f4:de:d1:87:f2:6a:12:93:
         b3:c9:b2:e7:bb:bf:e3:d1:7b:0a:00:51:fc:77:00:81:a8:5c:
         70:fa:4d:f0:e5:f8:f6:4c:68:7f:9b:c3:75:7e:ef:90:1a:db:
         1e:a4:44:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org