Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/4p6U27ri6XNcetusZzliL_vFjzs.roa
File:                     4p6U27ri6XNcetusZzliL_vFjzs.roa (raw, json)
Hash identifier:          pNXebfHSvqZvgeY4fFYMPQzBetw7IidDxr9W++9vCzE=
Subject key identifier:   E2:9E:94:DB:BA:E2:E9:73:5C:7A:DB:AC:67:39:62:2F:FB:C5:8F:3B
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       3D
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/4p6U27ri6XNcetusZzliL_vFjzs.roa
Signing time:             Mon 25 Mar 2024 03:18:30 +0000
ROA not before:           Mon 25 Mar 2024 03:18:30 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        27.34.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 05:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 25 03:18:30 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E29E94DBBAE2E9735C7ADBAC6739622FFBC58F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:66:a6:8a:ad:ea:3f:d7:dd:97:05:fe:33:
                    e3:ff:6a:72:83:13:87:06:11:3d:ed:0b:c9:48:89:
                    2e:f7:2a:8e:df:d8:58:42:cc:19:04:2f:bf:3b:1d:
                    68:2b:5a:2e:f1:0b:92:dd:08:a9:e6:42:4d:dd:84:
                    fb:6c:93:ef:fd:20:73:26:38:56:45:f5:bd:c6:9f:
                    b8:ee:9d:60:73:01:d5:10:24:e4:5f:48:d1:2f:49:
                    a0:2a:1b:0d:b9:db:3a:49:f6:a6:5e:07:fe:97:32:
                    e8:2b:51:ba:33:94:53:13:25:b2:f8:7c:35:c5:dc:
                    c0:49:2d:91:69:b5:c0:7e:7b:14:48:67:ed:35:d6:
                    07:bd:7f:70:31:f6:90:f4:0d:07:68:e5:a8:34:f6:
                    a7:63:5e:98:01:7e:45:07:95:e4:46:33:6a:ae:58:
                    20:31:4a:77:e9:0d:cc:04:a8:d2:9d:56:28:24:0a:
                    70:61:51:10:34:a1:bb:82:f2:ce:7b:0c:75:44:f5:
                    c4:bf:19:b6:a6:fc:ce:ed:0e:8d:29:14:a8:fe:1d:
                    9f:8b:c4:d6:c0:a8:b8:fe:af:60:5a:3e:6c:cc:27:
                    1a:56:62:9d:8d:b6:70:5b:46:69:dc:59:3a:69:0b:
                    4e:5d:ab:83:17:d7:48:d5:4c:e4:a3:4c:d1:64:eb:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:94:DB:BA:E2:E9:73:5C:7A:DB:AC:67:39:62:2F:FB:C5:8F:3B
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/4p6U27ri6XNcetusZzliL_vFjzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:b3:7e:76:60:d4:b0:1d:a5:b5:e0:4a:a7:35:be:8e:f1:
         b5:ba:23:fb:12:e9:57:14:8c:9b:91:c2:bc:26:93:91:9a:6f:
         42:79:1e:ca:de:9c:7f:3f:bf:0b:8d:6a:fc:e3:21:64:e8:bb:
         3b:0e:8d:0f:64:b3:1f:1e:27:e4:23:f5:a1:d5:0c:dd:79:46:
         92:fe:aa:2c:c9:0f:7f:89:30:b8:66:8c:c2:3b:f3:c0:5c:bc:
         0b:37:47:70:01:1a:ce:ab:61:da:96:00:85:03:f3:66:f9:b1:
         58:ad:4e:e6:4f:d9:de:56:71:0f:60:91:7c:2c:d3:a5:0f:97:
         87:26:c5:e2:38:75:e5:4e:79:9e:c3:d1:d9:78:6d:08:0d:f4:
         3a:49:77:f2:bf:0f:a5:33:5e:41:a0:58:0f:55:e6:62:22:16:
         5f:d4:b8:a4:28:bf:a2:03:13:20:c2:59:94:43:40:9e:5b:b0:
         43:07:b7:fe:67:9d:d9:39:8b:31:cf:7b:08:3c:6f:76:aa:9c:
         84:14:bb:3d:d3:64:52:22:c2:e7:c3:91:a5:70:db:42:2e:26:
         08:4f:d9:c6:46:ef:81:15:01:1f:f1:24:f7:9b:05:8d:e2:35:
         ae:df:be:7a:4f:56:13:88:ef:96:99:f8:28:ff:cc:58:d8:06:
         da:b7:e9:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 25 06:11:28 2024 by rpki-client on console-ams.rpki-client.org