Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/n6VAmhufnS4dTRIOiYtLvuj8uUc.roa
File:                     n6VAmhufnS4dTRIOiYtLvuj8uUc.roa (raw, json)
Hash identifier:          otmgUvzchvQ0ZKH+eoq/s5o9HVkCjCUrObbWT6J7aAQ=
Subject key identifier:   9F:A5:40:9A:1B:9F:9D:2E:1D:4D:12:0E:89:8B:4B:BE:E8:FC:B9:47
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       BA
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/n6VAmhufnS4dTRIOiYtLvuj8uUc.roa
Signing time:             Sat 01 Jul 2023 01:31:16 +0000
ROA not before:           Sat 01 Jul 2023 01:31:16 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        27.133.252.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:16 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=9FA5409A1B9F9D2E1D4D120E898B4BBEE8FCB947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:10:65:77:b5:6c:d6:f5:8c:f8:ce:15:f3:
                    97:79:1e:3e:67:e7:0c:26:55:8e:ab:82:84:6e:3b:
                    4e:2f:e2:41:ff:19:d3:83:e3:eb:32:3c:4e:a7:fe:
                    08:65:ff:b1:3d:8b:2c:09:c3:94:e9:8b:c0:2e:bc:
                    25:f0:a3:ff:2a:3b:d0:82:48:93:58:ca:4e:aa:fe:
                    fa:5c:46:2f:bf:66:de:86:87:ca:0e:ae:1a:2c:0d:
                    ab:33:bd:d5:d7:17:62:99:f3:ca:9e:68:c2:87:a2:
                    50:e8:f7:f2:5f:9a:1d:f9:57:98:b0:e3:b8:ae:3e:
                    84:eb:fd:16:4b:76:29:7c:aa:f3:f8:50:e8:34:3a:
                    dc:83:1b:fd:d4:ba:6b:2e:d3:46:ef:c5:bf:c3:1e:
                    08:fa:02:c3:7f:b7:ce:21:b0:28:f2:bc:9a:74:f4:
                    bb:f7:76:75:7c:3e:6a:a9:a3:84:6e:53:f6:0f:88:
                    81:43:61:55:90:80:aa:99:7a:8a:91:00:6c:2e:de:
                    67:72:41:fa:b8:8a:e4:e5:ac:b7:e7:37:2f:94:99:
                    90:cf:34:c9:4a:0a:21:f2:48:87:d6:e3:c3:63:bf:
                    e5:cc:ca:5f:be:a9:86:f8:ae:74:0e:f0:ca:4e:41:
                    8a:9c:e7:2d:cf:b0:3c:20:68:84:df:cc:67:b4:7f:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A5:40:9A:1B:9F:9D:2E:1D:4D:12:0E:89:8B:4B:BE:E8:FC:B9:47
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/n6VAmhufnS4dTRIOiYtLvuj8uUc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:b4:92:a7:0c:69:eb:53:96:ae:6b:20:4b:8b:46:b6:a5:fe:
         fb:6a:ec:67:1a:87:52:c1:7a:0f:7b:bc:c5:8e:9b:93:c0:8e:
         22:12:95:7f:75:fd:b1:60:2f:87:8e:78:d8:2e:17:70:5f:4a:
         a3:83:da:7c:eb:f0:32:be:e8:24:21:89:6c:49:3c:89:5d:95:
         20:16:31:fb:f4:92:a6:d9:01:e3:5a:68:d3:c7:91:3a:bc:cf:
         ab:f6:62:8d:b4:8a:f3:44:9e:32:61:e8:90:bb:63:64:72:cf:
         06:ae:c4:6f:95:fb:13:f6:c0:6a:37:bf:75:72:18:22:cd:b4:
         b6:59:51:5b:42:34:04:66:14:63:b3:03:30:ef:0d:cd:86:9c:
         3b:cd:1c:2c:b2:41:aa:9f:82:9e:0a:66:28:17:97:71:a8:17:
         58:14:07:98:d6:d1:28:a3:e6:e0:f8:5d:22:bb:20:4a:f0:f0:
         9a:9b:03:00:7e:21:ab:3a:16:ea:23:da:45:7b:9e:92:19:04:
         b6:db:93:8e:9b:2a:b9:24:ab:4f:ca:32:4c:6f:cd:57:ec:cb:
         b0:77:c8:a6:15:eb:bd:09:ce:54:b2:65:3c:67:bf:e1:79:8c:
         0a:37:41:ab:83:ee:b5:f2:c5:66:95:0b:30:a7:cd:24:f0:e9:
         06:93:a6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org