Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/AsvJVqm3A2uMc6bdhdOOcZzLjDk.roa
File:                     AsvJVqm3A2uMc6bdhdOOcZzLjDk.roa (raw, json)
Hash identifier:          njMLNsii6KrLMH0m79hB07AHkywYsKMpqifmvfscoyg=
Subject key identifier:   02:CB:C9:56:A9:B7:03:6B:8C:73:A6:DD:85:D3:8E:71:9C:CB:8C:39
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0161
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AsvJVqm3A2uMc6bdhdOOcZzLjDk.roa
Signing time:             Fri 07 Jul 2023 04:10:33 +0000
ROA not before:           Fri 07 Jul 2023 04:10:33 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.135.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:33 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=02CBC956A9B7036B8C73A6DD85D38E719CCB8C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:29:b6:0a:cc:a5:1d:d8:a2:cd:f2:4c:56:
                    11:1b:20:4b:f2:98:4f:5a:95:6d:88:24:38:b6:d5:
                    f6:57:2c:e3:3c:4a:2e:d4:c2:54:9f:02:90:d4:e5:
                    4d:96:39:56:29:e2:5c:95:7a:49:e8:97:b0:45:f9:
                    cd:0a:db:d2:07:8e:d8:e0:7e:66:71:1e:ee:2c:58:
                    c1:dd:46:03:bb:43:7f:91:da:5b:57:b7:3c:9e:8b:
                    37:c0:ae:3f:38:ae:60:8f:4a:39:2a:05:c0:bf:7d:
                    5a:d7:22:78:20:f3:e6:19:f2:a8:88:31:df:88:b8:
                    f7:42:fa:62:7f:be:ae:02:44:16:ba:6d:41:a4:3c:
                    35:36:70:1b:30:ef:b9:a6:bf:50:48:f8:0c:b2:45:
                    cf:05:c8:3b:b3:00:a7:2a:07:f6:00:02:1b:e5:92:
                    ea:8f:fb:b1:66:05:86:fb:fa:31:45:32:27:72:b6:
                    84:6f:62:b1:74:92:83:ea:79:03:1c:32:0f:14:cc:
                    00:28:c3:8c:da:e3:b1:31:f1:3d:a0:b9:68:52:62:
                    b6:5a:7a:da:cd:d1:c0:e7:64:d9:30:96:b8:34:33:
                    25:e4:76:e0:9c:a6:6e:71:ab:83:18:64:f9:78:94:
                    f1:0f:0e:47:ca:90:23:83:be:dd:2a:06:f5:64:bb:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:C9:56:A9:B7:03:6B:8C:73:A6:DD:85:D3:8E:71:9C:CB:8C:39
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AsvJVqm3A2uMc6bdhdOOcZzLjDk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:e4:e0:85:08:de:a5:80:a9:06:4d:bf:79:f3:08:4d:e8:82:
         c7:42:af:ab:ad:fc:1d:ce:bb:e2:37:41:a6:4a:cc:82:0d:6e:
         5f:e1:b7:e5:4c:cd:9e:8d:54:b1:b7:99:61:0e:c3:24:15:9a:
         f7:5c:11:1f:b4:ea:aa:36:64:47:8c:c5:c6:99:18:1d:31:8b:
         94:c9:9b:be:da:d2:0d:18:ec:c4:2d:e8:e2:96:8a:f7:82:1d:
         5e:b4:37:87:4f:3a:ee:67:8d:38:26:33:cd:a0:5d:31:80:53:
         f9:2f:b8:58:68:fc:53:4f:dd:e2:cc:09:fc:2b:7d:99:29:5b:
         e7:57:23:a0:9a:eb:6c:d6:e0:7d:4f:b5:39:ff:11:d6:15:d5:
         6b:b1:ff:71:af:ce:0c:2f:44:3c:03:b2:7c:a2:94:02:41:98:
         c0:de:84:2c:44:01:07:80:a0:ff:19:e1:a5:f6:75:78:98:a5:
         6a:0e:36:65:f4:73:32:80:ee:e6:6b:f9:d8:ba:12:16:bf:c2:
         24:08:30:c6:c1:e8:30:75:0e:07:d3:3e:ff:fd:84:f9:b9:e9:
         9f:fb:7a:11:f3:5c:b2:63:18:4e:80:bd:05:5e:e8:da:04:eb:
         95:ed:9d:ef:c8:44:d8:1a:bb:8e:04:fb:c0:3d:7b:3c:44:39:
         a4:b0:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org