Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GXBMoCOjhOk0JMHbXHgeaERXeu8.roa
File:                     GXBMoCOjhOk0JMHbXHgeaERXeu8.roa (raw, json)
Hash identifier:          Mc+VHIgqTiKOTNw0Axm94IHjJSrjaLJb1pvOiHmRWf4=
Subject key identifier:   19:70:4C:A0:23:A3:84:E9:34:24:C1:DB:5C:78:1E:68:44:57:7A:EF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0146
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GXBMoCOjhOk0JMHbXHgeaERXeu8.roa
Signing time:             Fri 07 Jul 2023 04:08:23 +0000
ROA not before:           Fri 07 Jul 2023 04:08:23 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.133.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:23 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=19704CA023A384E93424C1DB5C781E6844577AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:ed:00:6d:9e:fe:8a:98:e9:f2:d1:70:3e:
                    20:2a:d7:a9:48:75:91:7c:e9:3f:a0:90:82:25:e9:
                    79:16:77:42:e9:64:70:b2:fd:8b:b7:36:86:08:b1:
                    01:77:af:09:e3:fb:39:90:ed:55:76:05:b6:73:32:
                    30:0e:0a:07:a6:e0:88:02:5e:fe:fb:62:1e:15:52:
                    45:05:29:b1:47:fc:f7:87:fe:e1:c3:3a:f2:c9:7d:
                    58:59:68:97:4b:a0:e7:38:95:9c:c7:f9:b0:18:77:
                    c0:9e:6c:2c:49:15:b2:aa:13:26:48:35:9a:1b:cb:
                    64:85:af:87:91:f0:a0:71:41:35:9d:ef:83:03:cd:
                    0a:1e:5e:2c:f4:e8:3a:6a:d9:c4:88:1b:99:2e:fa:
                    24:ca:03:e9:a8:41:84:67:ce:fc:b1:bf:65:bf:80:
                    51:1a:ef:7c:ee:b8:8b:c1:1c:7b:fe:12:97:d3:64:
                    53:11:cb:92:be:58:aa:af:11:f0:a2:d0:43:d2:8d:
                    16:12:44:9d:a4:43:b7:e6:93:77:54:7f:0b:1d:30:
                    82:29:b3:08:91:e8:b2:a1:27:44:c9:79:9a:5e:d3:
                    39:b4:56:ab:0b:47:2b:9c:26:8f:b7:99:fd:d2:03:
                    63:3a:f3:33:4b:64:55:4d:26:32:52:20:3a:f1:f9:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:70:4C:A0:23:A3:84:E9:34:24:C1:DB:5C:78:1E:68:44:57:7A:EF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GXBMoCOjhOk0JMHbXHgeaERXeu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:6b:af:68:cb:a9:5f:e0:6e:f4:f1:18:00:8c:d2:28:36:
         28:f5:fa:19:73:e7:70:32:c7:8f:35:3f:06:f4:80:3e:0f:0f:
         bc:fe:2e:65:be:0e:99:e9:2a:7a:90:9c:0f:55:1f:e4:99:44:
         f4:01:2b:62:4b:82:2c:1c:02:50:27:3d:c9:e2:24:36:85:71:
         c3:53:36:b8:b5:69:32:65:d0:ab:7d:df:e5:67:82:db:6f:68:
         48:b4:01:4c:6b:34:b7:eb:0f:d1:e5:5a:46:08:56:62:e6:e2:
         7c:8f:67:ef:0c:d9:ef:9c:f0:f6:fc:08:be:ac:2e:d2:83:94:
         86:4c:e1:14:98:17:fb:5e:e8:36:67:2e:b4:30:8d:21:38:a7:
         af:51:e1:37:45:65:1d:0c:0d:c3:a5:1a:96:a6:ed:b4:2e:8c:
         64:0c:ac:16:3b:90:f9:70:14:5e:0a:92:4d:67:ca:fb:e1:19:
         99:9f:5f:21:4c:83:4b:39:80:cc:a8:ff:5e:ea:68:ee:8a:06:
         bf:55:ef:f6:ba:c9:fe:94:58:60:c3:ca:c8:13:34:92:ce:38:
         8e:c1:95:3d:8b:7a:b5:7d:6b:a4:8e:9b:fc:a1:b9:ed:b2:a0:
         3d:16:07:7c:f8:fc:ae:e8:d1:7c:b9:0c:8c:fa:84:6f:dd:81:
         58:69:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org