Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8Z7QAVYpWi8hw_2mNHjEQHzM7Fw.roa
File:                     8Z7QAVYpWi8hw_2mNHjEQHzM7Fw.roa (raw, json)
Hash identifier:          EL+nrfXLLrtSXSOWbQHGKd24SxSTSTCNz01bJagkXRE=
Subject key identifier:   F1:9E:D0:01:56:29:5A:2F:21:C3:FD:A6:34:78:C4:40:7C:CC:EC:5C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0118
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8Z7QAVYpWi8hw_2mNHjEQHzM7Fw.roa
Signing time:             Fri 07 Jul 2023 04:05:55 +0000
ROA not before:           Fri 07 Jul 2023 04:05:55 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.132.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:05:55 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F19ED00156295A2F21C3FDA63478C4407CCCEC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8c:c8:87:06:1b:31:05:6e:5f:68:f6:d3:98:
                    30:62:51:fe:ee:bb:c1:1c:3f:2e:67:7a:8d:03:bc:
                    2d:6b:cd:29:2c:71:13:82:9b:52:41:48:0d:dc:3f:
                    21:36:f4:80:46:9b:5e:65:ef:8d:f6:c2:e8:c0:e4:
                    d3:e3:e8:47:56:b0:6c:19:57:b2:1c:9d:97:c9:43:
                    36:81:ed:61:df:8b:8b:33:f0:e2:f4:20:59:0f:d7:
                    23:d4:29:ff:b1:8b:00:a0:c9:8a:6a:24:7f:1e:80:
                    53:5a:99:9d:89:f4:fb:24:8d:73:91:54:db:9e:4f:
                    1d:79:3e:95:2d:ec:f3:76:ab:f8:74:eb:d5:ba:d1:
                    e0:d9:e5:b4:e6:cf:87:48:f9:39:33:e0:91:96:af:
                    34:63:c0:0e:51:f6:0f:d6:a4:b3:a9:92:aa:d9:3d:
                    64:e8:fc:1e:db:e8:40:97:1c:91:a8:e9:02:67:62:
                    8d:2e:04:16:4d:b8:b2:b9:6e:ba:3d:ce:27:68:c2:
                    21:35:ae:c9:b2:df:6b:64:6c:af:2a:e7:88:38:b4:
                    8a:15:a9:25:ac:5a:73:8a:eb:ec:31:fc:ba:ba:81:
                    c2:1e:44:af:c6:6e:c4:5d:a5:a3:56:34:6b:ee:ee:
                    05:40:65:70:44:43:c4:72:8c:c8:ad:74:6d:1e:cd:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9E:D0:01:56:29:5A:2F:21:C3:FD:A6:34:78:C4:40:7C:CC:EC:5C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8Z7QAVYpWi8hw_2mNHjEQHzM7Fw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:84:68:c3:c9:9a:d0:7d:21:f3:33:d2:2a:75:42:01:3f:c9:
         db:41:4f:74:b4:9c:1b:66:c7:c3:03:a4:4e:e4:91:75:bb:8d:
         b1:52:f8:42:41:54:63:2f:25:22:fa:13:78:64:4d:ac:44:e7:
         a2:49:3e:82:03:bb:0d:d2:60:60:ce:cf:af:1d:9c:bd:41:70:
         94:cc:85:f6:57:5e:1b:b4:e7:50:08:fd:1f:1c:38:56:44:df:
         ec:65:54:ac:2c:e1:df:ff:d6:d8:45:f3:d5:7f:05:6d:a6:f5:
         37:28:65:ca:1a:d7:40:e7:bc:e9:30:61:9d:24:d1:72:d7:a3:
         de:98:f2:1a:81:52:05:fa:a4:52:c7:83:23:5e:82:7c:87:90:
         03:20:b6:9e:14:c5:5c:d4:1f:f6:7b:f2:52:e8:ae:92:af:9f:
         bf:15:06:ec:23:1c:3b:cb:4e:ea:fe:b8:d0:f3:f7:f2:91:9d:
         73:08:17:62:92:9c:91:d0:90:47:b7:9f:30:c9:91:9f:b0:3e:
         8f:a7:ab:d7:f5:3d:9a:fd:ef:68:7f:25:93:b2:fb:07:38:28:
         5b:4a:77:1c:54:19:19:f1:3a:e2:26:24:5d:b1:f1:de:0d:f3:
         5b:33:c0:1c:fc:bf:52:b3:2c:68:56:23:26:f1:9c:c7:b0:b7:
         35:bb:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org