Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ovllSPUVKRV9U2PL7OtXuZxSfXw.roa
File:                     ovllSPUVKRV9U2PL7OtXuZxSfXw.roa (raw, json)
Hash identifier:          4fr0ANuPaG3vGUfkNJSu+Am/N+wn1HhHC52GTDr85SU=
Subject key identifier:   A2:F9:65:48:F5:15:29:15:7D:53:63:CB:EC:EB:57:B9:9C:52:7D:7C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0453
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ovllSPUVKRV9U2PL7OtXuZxSfXw.roa
Signing time:             Thu 27 Jul 2023 16:43:15 +0000
ROA not before:           Thu 27 Jul 2023 16:43:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=A2F96548F51529157D5363CBECEB57B99C527D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:93:6b:fe:b4:11:34:7e:22:c1:f3:1a:a9:
                    01:7e:97:41:5b:99:81:2c:fa:60:d5:d1:c5:1e:d8:
                    9c:68:c2:4d:67:49:d3:66:31:4b:9f:8b:cf:20:f5:
                    9e:41:33:9c:3a:f2:88:1f:00:b4:f7:f8:df:74:4b:
                    85:cd:4b:7b:aa:e9:86:87:3c:21:83:e0:fc:64:da:
                    05:55:39:f3:69:39:2d:bd:d5:3f:ab:de:31:6f:d3:
                    e5:91:02:ac:c1:aa:42:d3:91:a7:df:7a:ab:04:5e:
                    f0:70:f2:94:f9:5b:1b:29:85:21:2a:06:4a:b6:d9:
                    44:6f:3b:4f:db:57:e0:b8:12:8f:1b:e4:16:44:b2:
                    fb:79:1b:80:8c:3b:c1:03:bf:ef:58:a1:f4:e7:f9:
                    7d:25:92:b4:2c:6e:6a:ae:7b:17:60:13:50:ef:eb:
                    1d:22:00:cf:72:f5:52:93:f5:c8:d3:08:44:fc:b2:
                    eb:ce:c5:cf:a1:6b:0d:36:89:ca:db:a1:19:0f:0f:
                    43:d4:ec:46:12:8d:71:62:c3:a0:82:e7:b7:59:55:
                    f8:53:0f:bd:14:3d:d9:2f:ce:13:e0:61:70:99:28:
                    32:8a:f7:1b:de:49:5e:8d:b7:57:3d:5f:ac:6e:dc:
                    49:5d:e0:ce:47:67:9d:8c:fa:80:51:9a:29:c2:8e:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F9:65:48:F5:15:29:15:7D:53:63:CB:EC:EB:57:B9:9C:52:7D:7C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ovllSPUVKRV9U2PL7OtXuZxSfXw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:1a:f2:d8:04:d4:11:9a:19:44:2e:35:85:85:0d:e9:f7:5e:
         33:f4:5f:93:17:5c:36:fe:ba:b6:2f:b5:fa:39:34:75:5b:32:
         ca:8a:44:7a:af:4b:c3:55:5b:09:de:a6:9d:48:c3:d4:98:0d:
         cb:5a:9f:a5:78:0f:c7:0d:3c:c8:8b:97:38:fc:d9:c4:ad:01:
         62:dc:b4:79:ca:6f:d0:4b:63:b3:9e:fc:76:94:12:bf:71:65:
         d6:96:d0:6c:c6:7a:21:8a:a0:e0:d9:5f:02:80:a1:97:da:30:
         d0:f6:35:e0:60:42:e0:99:54:64:b4:a9:a5:92:44:8e:e7:27:
         48:9b:34:85:0c:51:50:9a:fc:27:15:4e:e2:16:2d:6c:f7:11:
         58:1a:da:89:4c:82:29:48:98:56:1d:cb:1e:9b:a9:03:9c:a6:
         dd:3b:77:d8:c8:8a:06:5a:91:77:04:42:f4:e6:ec:e1:f1:ec:
         46:98:78:3b:a8:29:75:1d:46:61:d9:22:60:37:b1:d2:3b:0a:
         88:40:72:2b:96:9f:e7:43:9b:ef:5c:f7:33:ea:1a:ae:1f:06:
         24:10:9e:1e:2c:0c:6f:6b:d5:8c:5c:0d:05:35:c6:bc:28:62:
         45:4f:33:fc:a6:d9:ef:ed:ee:dd:94:6d:10:1e:d8:81:6f:9b:
         0c:4a:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org