Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/X6TgQOBxd-c-mp3R0X1iliqXPJ4.roa
File:                     X6TgQOBxd-c-mp3R0X1iliqXPJ4.roa (raw, json)
Hash identifier:          fUbL1iWR6EtQJ4vfxvev+S8EPpokeHrg1NTlDevW7JY=
Subject key identifier:   5F:A4:E0:40:E0:71:77:E7:3E:9A:9D:D1:D1:7D:62:96:2A:97:3C:9E
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       C4
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/X6TgQOBxd-c-mp3R0X1iliqXPJ4.roa
Signing time:             Sat 01 Jul 2023 01:31:22 +0000
ROA not before:           Sat 01 Jul 2023 01:31:22 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        27.134.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:22 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5FA4E040E07177E73E9A9DD1D17D62962A973C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:f9:9d:33:2a:d2:76:7a:7e:16:01:fd:03:
                    df:9b:6d:37:3b:dd:0c:df:fd:d4:e4:b9:6d:22:12:
                    f5:18:da:73:02:fa:72:b4:11:05:31:80:fb:09:9d:
                    14:e9:67:04:2b:e2:a8:91:9f:c4:6f:f0:7f:f3:76:
                    4c:b8:89:3d:8f:a5:ff:4e:03:76:5d:dd:9b:f4:bd:
                    82:b7:44:b2:c1:99:d7:ff:20:bd:bd:73:e7:e5:f6:
                    81:9e:62:75:09:2a:19:f5:72:fc:a4:db:e8:d4:97:
                    12:52:a1:f4:bd:86:3d:22:75:e5:ef:1f:2c:5e:1e:
                    eb:d7:ee:36:ca:e4:ca:36:db:78:59:e7:dd:9f:b7:
                    e7:b2:f1:e0:88:3a:b5:23:df:b7:bb:09:00:ea:e7:
                    5e:f6:be:52:21:30:bb:ee:21:1e:73:07:89:80:c4:
                    c3:25:7c:6a:c3:d4:90:df:10:e7:af:8f:43:34:20:
                    9d:67:80:0b:45:44:14:20:bb:39:3f:80:73:af:95:
                    90:35:ec:95:32:f0:0f:75:e7:20:33:52:44:13:18:
                    07:c6:d6:73:79:92:46:1b:80:1c:fa:ef:b1:88:a1:
                    b4:6d:d7:7b:8c:13:91:ea:7a:59:46:fe:4a:41:94:
                    bb:b8:93:6e:5e:90:cf:4b:6a:b0:5d:84:a4:72:e1:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:E0:40:E0:71:77:E7:3E:9A:9D:D1:D1:7D:62:96:2A:97:3C:9E
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/X6TgQOBxd-c-mp3R0X1iliqXPJ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:1f:ae:51:bd:cf:ab:e4:4d:1b:61:b4:bc:d3:f3:a9:22:
         73:f9:bb:41:0b:35:bb:ed:1d:2d:59:06:20:a8:5e:73:56:7f:
         1a:cf:5c:b5:79:f8:cb:50:06:97:e8:96:a3:ba:e1:72:18:ce:
         a6:21:65:3c:e5:45:34:5b:c3:15:9b:19:b5:1d:2f:27:0b:a8:
         64:ce:13:16:08:26:d0:46:0f:84:7e:c1:ed:22:32:64:46:72:
         5e:04:6e:35:64:47:dd:ea:54:38:bd:6a:96:ea:ac:b1:86:20:
         50:27:ea:bb:d0:17:85:14:46:38:9d:eb:70:18:df:c6:c7:c5:
         98:00:0d:8a:cb:3c:9e:c1:15:fc:50:3d:f2:84:4f:8b:e5:62:
         b6:a3:6e:75:06:25:25:af:cc:9c:2b:e5:fd:1f:dd:3c:b9:b4:
         c2:ed:b1:9c:d0:a1:17:0a:73:04:36:1e:59:a3:e2:31:89:85:
         10:16:79:ba:60:04:52:99:06:06:0d:d2:66:7e:c8:e6:54:5b:
         2e:4e:51:36:2d:6b:82:71:5a:54:00:94:a6:20:40:ef:ec:b8:
         2c:bb:37:7f:0d:18:d6:41:f6:17:03:8f:b3:9b:5c:fc:09:8f:
         7d:61:5e:df:1b:ec:f7:70:d6:a6:19:ad:44:aa:ba:2f:cd:3b:
         0a:f0:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org