Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaAwnXbgp49B_YqbkpD6rftV0hw.roa
File:                     PaAwnXbgp49B_YqbkpD6rftV0hw.roa (raw, json)
Hash identifier:          Yj++REGU8uNuluOAkto8ez0zgDPnTOhTe85liYv5UY4=
Subject key identifier:   3D:A0:30:9D:76:E0:A7:8F:41:FD:8A:9B:92:90:FA:AD:FB:55:D2:1C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       052E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaAwnXbgp49B_YqbkpD6rftV0hw.roa
Signing time:             Thu 27 Jul 2023 16:54:13 +0000
ROA not before:           Thu 27 Jul 2023 16:54:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=3DA0309D76E0A78F41FD8A9B9290FAADFB55D21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:0b:f5:d3:31:d7:12:dc:08:6f:3f:f1:9e:
                    2d:1e:ee:d9:9d:21:aa:c8:3e:62:c8:d0:9f:dd:5e:
                    c5:04:a3:06:1e:0a:68:53:8c:e7:8b:ec:57:dd:24:
                    5a:f3:36:b9:6d:26:f8:23:78:4b:1c:d1:10:dd:a7:
                    69:ab:6f:fe:ce:6e:f3:6f:7a:ba:09:04:d3:f5:10:
                    57:3a:20:e6:70:e1:72:14:06:b6:1f:01:e0:3d:42:
                    05:7c:17:b0:58:07:76:32:ff:3d:9c:14:bb:64:10:
                    20:43:2b:7a:57:37:cc:82:94:9e:cf:82:30:f1:7e:
                    fe:88:09:d7:b4:a1:1d:8c:b0:f7:51:fb:f3:61:4b:
                    f1:f0:eb:42:70:24:f5:dc:52:a9:8c:28:d8:67:82:
                    37:43:a3:c3:5e:93:c7:da:56:c4:a2:0f:f0:0f:36:
                    55:ca:17:6a:b6:43:c2:18:62:75:a9:14:4d:d8:90:
                    b0:26:be:0f:fa:01:73:ff:02:99:ae:15:20:39:d6:
                    66:fc:15:e4:89:09:7c:81:54:19:02:3b:28:33:9b:
                    3f:8c:3b:47:f4:37:15:4e:42:51:71:0f:5c:67:4c:
                    c8:35:9d:5f:97:f4:d9:aa:95:c5:02:9d:d3:34:a9:
                    b5:13:f4:0d:b4:77:9a:54:39:9c:f7:8b:fd:b1:00:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A0:30:9D:76:E0:A7:8F:41:FD:8A:9B:92:90:FA:AD:FB:55:D2:1C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaAwnXbgp49B_YqbkpD6rftV0hw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:62:e0:ce:a1:83:2f:e9:1a:04:4f:7a:8a:dc:ef:35:b4:33:
         8f:fd:67:33:40:71:9c:94:cd:1d:ee:be:8c:ae:43:da:dd:13:
         c6:b2:61:c5:de:e3:60:2a:d7:59:78:a0:96:15:60:b3:91:10:
         df:1f:2b:cc:c7:5d:f4:ba:4f:43:5c:52:bc:16:0a:7d:a0:3a:
         43:b8:ed:d7:ba:37:bc:01:d3:25:aa:d1:6a:cf:01:49:e9:49:
         3e:d3:77:e5:be:e8:ed:2b:55:09:6e:bd:df:f3:10:fa:00:a9:
         6f:3d:eb:fc:bb:54:f9:ae:5f:d1:db:47:41:11:f8:75:46:72:
         ca:81:aa:68:13:f8:eb:c0:1d:e7:ab:fa:d4:76:02:e1:63:1e:
         fa:be:e5:b9:77:c2:0d:d8:1a:41:21:14:4f:87:e2:a6:e2:35:
         d1:b4:60:b9:12:a6:39:1a:05:ab:08:45:23:1c:26:13:f9:12:
         70:fa:1c:06:71:c6:95:9d:36:48:87:ca:6d:ef:ef:fb:c0:36:
         75:2b:9b:71:e1:d1:53:e1:2c:9d:51:a8:eb:e2:2e:aa:fb:39:
         0b:27:d0:aa:58:c5:62:05:5f:ae:59:e4:70:19:01:c9:d3:a4:
         05:d3:85:4e:32:e1:f6:d5:e8:c4:b2:e6:dd:cc:5e:b7:a6:da:
         07:3f:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:20 2024 by rpki-client on console-fra.rpki-client.org