Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/AUZwLY37cN5T9lmTcfWp5eYd_v0.roa
File:                     AUZwLY37cN5T9lmTcfWp5eYd_v0.roa (raw, json)
Hash identifier:          BA0KlbkJVT2LReJKq7KzkxM6IOtJodLNefqHh9twDbs=
Subject key identifier:   01:46:70:2D:8D:FB:70:DE:53:F6:59:93:71:F5:A9:E5:E6:1D:FE:FD
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       B3
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/AUZwLY37cN5T9lmTcfWp5eYd_v0.roa
Signing time:             Sat 01 Jul 2023 01:31:14 +0000
ROA not before:           Sat 01 Jul 2023 01:31:14 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        27.133.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:14 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=0146702D8DFB70DE53F6599371F5A9E5E61DFEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:85:85:b4:f5:45:6d:48:25:20:6f:5e:11:
                    c0:1d:18:33:84:c6:28:44:3b:02:fd:4e:ba:90:f4:
                    93:27:af:5a:09:49:da:d2:8e:f5:95:ba:92:49:68:
                    1a:4a:45:26:e5:5a:ed:65:2f:ae:fd:2f:dd:9c:a8:
                    fe:bb:24:72:19:69:ea:2e:65:4e:be:99:53:a8:e5:
                    82:40:f8:95:05:3f:dc:ad:2c:6e:45:7a:28:28:fe:
                    e8:93:a6:94:00:ba:d6:64:79:ae:72:6d:e2:1d:17:
                    56:5f:1f:4d:dd:62:2c:4e:7f:0f:33:b8:7d:fe:41:
                    e3:56:2d:98:00:c9:78:90:c0:d5:b9:35:a4:27:32:
                    c7:7a:d1:33:64:5b:57:9c:3c:96:88:9d:1a:9e:e6:
                    29:0e:ed:fa:97:7d:54:11:39:43:ab:07:c5:46:ff:
                    d7:18:c7:c8:46:85:96:32:5a:64:fd:f6:60:c2:b5:
                    68:7d:b0:a9:55:c6:ab:4c:17:f9:7a:a4:7a:6e:33:
                    0d:bc:76:b2:8d:c8:27:3c:73:d8:2f:4e:99:19:3d:
                    17:10:13:7e:b3:74:9b:bc:2c:1b:99:cd:ae:46:90:
                    d8:66:24:a5:ba:af:da:2d:05:65:0e:6a:d8:e3:80:
                    82:98:77:6f:85:01:9b:2f:36:c1:92:09:bc:42:4b:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:46:70:2D:8D:FB:70:DE:53:F6:59:93:71:F5:A9:E5:E6:1D:FE:FD
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/AUZwLY37cN5T9lmTcfWp5eYd_v0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:ff:e6:c6:cf:62:8d:03:16:c5:b6:0d:45:16:15:19:c9:
         72:27:67:75:05:bd:ab:9f:c5:c3:93:4f:ec:65:bb:17:a8:19:
         a6:b7:da:f8:b6:24:83:af:84:02:0c:e7:11:74:0d:14:e7:a1:
         20:9c:5c:2b:df:2a:a2:ab:26:7c:84:fd:fb:88:ed:a3:cb:56:
         67:ba:43:3c:f5:5d:42:5e:93:f9:28:68:18:2c:14:38:ea:fe:
         3e:22:ff:f3:71:34:3b:2a:dc:4e:cc:ec:45:6c:81:88:15:4a:
         7b:fd:4a:5b:0f:e7:e3:fc:17:4c:fe:82:7f:e6:fb:9b:eb:4d:
         95:f4:f8:ca:2c:14:f5:fb:50:7c:22:47:49:1f:98:46:25:8d:
         3d:2c:7a:50:59:c0:68:90:4f:1e:d5:b9:a6:04:27:43:81:30:
         b5:3a:3f:63:c9:ad:fb:b1:5b:e3:f6:17:9e:2f:be:66:01:95:
         30:14:59:cc:6c:77:e0:3b:a5:31:99:e0:67:25:70:94:c4:18:
         5e:25:86:38:94:af:c9:81:a5:32:91:41:71:90:0a:1d:26:da:
         1d:fc:11:ce:ea:c2:19:c5:af:96:9f:8b:49:56:ed:f2:49:0f:
         38:f7:44:90:78:f9:37:a5:22:a4:54:83:59:d2:48:8e:f7:ea:
         bc:bf:06:63
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yMzA3MDEw
MTMxMTRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDAxNDY3MDJEOERGQjcw
REU1M0Y2NTk5MzcxRjVBOUU1RTYxREZFRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzcYWFtPVFbUglIG9eEcAdGDOExihEOwL9TrqQ9JMnr1oJSdrS
jvWVupJJaBpKRSblWu1lL679L92cqP67JHIZaeouZU6+mVOo5YJA+JUFP9ytLG5F
eigo/uiTppQAutZkea5ybeIdF1ZfH03dYixOfw8zuH3+QeNWLZgAyXiQwNW5NaQn
Msd60TNkW1ecPJaInRqe5ikO7fqXfVQROUOrB8VG/9cYx8hGhZYyWmT99mDCtWh9
sKlVxqtMF/l6pHpuMw28drKNyCc8c9gvTpkZPRcQE36zdJu8LBuZza5GkNhmJKW6
r9otBWUOatjjgIKYd2+FAZsvNsGSCbxCS7O1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUAUZwLY37cN5T9lmTcfWp5eYd/v0wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L0FVWndMWTM3Y041VDlsbVRjZldwNWVZZF92MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAbhfcwDQYJKoZIhvcNAQELBQADggEBACqm/+bGz2KNAxbFtg1FFhUZyXIn
Z3UFvaufxcOTT+xluxeoGaa32vi2JIOvhAIM5xF0DRTnoSCcXCvfKqKrJnyE/fuI
7aPLVme6Qzz1XUJek/koaBgsFDjq/j4i//NxNDsq3E7M7EVsgYgVSnv9SlsP5+P8
F0z+gn/m+5vrTZX0+MosFPX7UHwiR0kfmEYljT0selBZwGiQTx7VuaYEJ0OBMLU6
P2PJrfuxW+P2F54vvmYBlTAUWcxsd+A7pTGZ4GclcJTEGF4lhjiUr8mBpTKRQXGQ
Ch0m2h38Ec7qwhnFr5afi0lW7fJJDzj3RJB4+TelIqRUg1nSSI736ry/BmM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org