Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/jtAiMNoquujT1V2Rq-A1neESGJQ.roa
File:                     jtAiMNoquujT1V2Rq-A1neESGJQ.roa (raw, json)
Hash identifier:          kRafQF4i84L7CbFhr9dFWTZ2OB63kOwgKVre6FpYsMc=
Subject key identifier:   8E:D0:22:30:DA:2A:BA:E8:D3:D5:5D:91:AB:E0:35:9D:E1:12:18:94
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       B4
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/jtAiMNoquujT1V2Rq-A1neESGJQ.roa
Signing time:             Sat 01 Jul 2023 01:31:14 +0000
ROA not before:           Sat 01 Jul 2023 01:31:14 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        27.133.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:14 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8ED02230DA2ABAE8D3D55D91ABE0359DE1121894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:61:af:82:e3:99:24:ab:3b:5a:74:cc:f9:
                    15:54:08:ff:02:8d:9e:86:70:12:2a:cf:7d:cf:09:
                    f9:b3:a9:c0:58:0b:30:ea:60:b6:17:1a:79:7f:c1:
                    3f:7b:ab:60:58:b4:14:16:da:95:bc:19:1c:dc:c7:
                    62:49:db:ef:c2:82:65:4a:7f:ba:b3:f2:cb:fe:58:
                    aa:1d:e5:a1:48:24:84:06:c5:34:89:cc:5a:29:1c:
                    08:f0:cf:3b:1f:88:5a:46:2b:c6:05:07:a3:f0:15:
                    56:74:a6:a4:f5:e5:cf:e9:fe:b4:f8:0b:11:1f:ce:
                    c1:21:27:a9:a9:65:fc:02:e3:ba:04:e2:55:a9:40:
                    2c:98:82:ab:1b:b8:a2:78:4e:8a:a0:75:f7:c0:b9:
                    0f:f4:c2:31:bd:95:e1:0f:a7:96:d7:71:43:86:29:
                    87:3c:09:ae:2e:63:1f:a9:70:c0:b3:3e:9c:37:70:
                    d4:ce:e2:af:ef:43:7b:98:89:18:2a:9f:61:36:11:
                    7d:45:63:30:30:8c:37:45:d9:7b:6a:8a:a3:3d:17:
                    da:63:38:fc:ef:87:fb:f1:a3:a6:a4:5c:56:4d:ef:
                    e7:f4:59:35:a0:84:6b:74:51:e6:fa:58:36:ad:e3:
                    df:ab:ef:9a:a8:eb:31:53:69:2d:8d:ef:23:6f:ab:
                    10:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:22:30:DA:2A:BA:E8:D3:D5:5D:91:AB:E0:35:9D:E1:12:18:94
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/jtAiMNoquujT1V2Rq-A1neESGJQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:ea:57:59:21:8a:9f:be:a5:08:8c:f3:e5:d2:d4:06:23:
         73:64:a0:9d:e6:fd:3d:16:19:05:62:b3:be:4a:74:0e:13:9b:
         ef:66:5b:8e:80:3b:bf:35:74:ac:cb:ea:84:3b:2b:fa:38:28:
         a6:cb:31:57:c5:20:37:bd:92:73:06:55:73:30:41:4c:b4:e0:
         b0:b4:37:95:48:ee:6d:c5:f4:df:4e:81:94:60:63:e0:69:1e:
         da:98:70:47:37:ea:c9:a1:4d:2f:bf:4e:65:80:25:3d:aa:aa:
         0e:90:9c:9a:81:2b:f1:61:54:9f:c7:9e:45:22:05:41:77:df:
         7f:6d:43:1b:93:39:87:97:ed:e1:49:d8:79:67:3f:85:87:e0:
         34:7e:54:67:1c:2b:08:9c:c9:c5:8b:71:3b:17:11:8a:c0:7e:
         e4:1a:b6:29:74:46:49:f8:9a:ff:a6:83:2f:4d:ae:98:22:1b:
         ac:b1:95:cd:20:db:ee:ad:be:99:a1:98:76:d1:c9:54:17:e5:
         29:70:53:75:fe:8e:ff:6a:92:5a:59:b6:6b:e7:4e:38:37:d1:
         fe:4b:4b:bc:98:9b:d1:5c:4d:d6:30:73:f8:fe:af:2d:da:b9:
         5b:26:be:6e:cc:78:e2:54:bf:0e:3f:93:10:0e:55:3a:bd:56:
         e5:9a:77:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org