Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/W0ITiIh7N6PJuTAPZ2rxNWCb2jc.roa
File:                     W0ITiIh7N6PJuTAPZ2rxNWCb2jc.roa (raw, json)
Hash identifier:          6fdugRIwoSKTpJ5Zl220c0ZXF/pyc9pDI9gEuuhLyIw=
Subject key identifier:   5B:42:13:88:88:7B:37:A3:C9:B9:30:0F:67:6A:F1:35:60:9B:DA:37
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       015D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W0ITiIh7N6PJuTAPZ2rxNWCb2jc.roa
Signing time:             Fri 07 Jul 2023 04:10:32 +0000
ROA not before:           Fri 07 Jul 2023 04:10:32 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.133.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:32 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5B421388887B37A3C9B9300F676AF135609BDA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:5c:2b:0f:57:a3:4c:73:0d:79:42:bf:c7:
                    aa:10:02:5c:37:00:bc:82:3e:ee:7e:c7:68:80:11:
                    cc:e4:31:e4:23:83:a1:28:06:d2:d8:15:71:6a:62:
                    71:f6:32:f9:ae:6f:f0:f3:01:4c:b1:85:6f:ce:21:
                    02:c5:94:94:cf:b9:e5:f4:a7:01:10:55:48:c5:44:
                    3f:0d:1a:49:6d:0a:0b:a6:9a:9f:4c:53:5c:12:c6:
                    28:05:ef:83:8e:55:67:3d:3f:8a:9a:09:87:25:6e:
                    cc:48:25:2e:67:6c:47:8e:bc:e7:46:03:90:41:15:
                    40:39:83:86:dd:dc:da:b6:57:50:b4:fc:5e:04:9c:
                    ea:b3:07:87:58:a8:93:47:c7:24:67:7c:71:2d:86:
                    fa:c9:9b:35:ee:e4:0c:8a:c0:4e:3c:61:dd:71:5b:
                    00:3a:d8:e0:25:f8:a9:a4:01:8a:3c:45:c2:75:c7:
                    b4:0a:3c:68:35:10:5a:07:f1:33:b6:95:22:08:49:
                    54:89:e5:bb:5f:57:c2:21:9b:be:f4:94:80:2c:34:
                    6f:3c:87:fa:37:e8:c3:e1:14:82:1c:eb:22:8f:31:
                    60:32:57:9d:37:3e:f4:35:09:d5:1d:3c:9e:95:77:
                    56:45:df:16:ac:f0:0b:f9:b9:76:7d:e5:6b:16:80:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:42:13:88:88:7B:37:A3:C9:B9:30:0F:67:6A:F1:35:60:9B:DA:37
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W0ITiIh7N6PJuTAPZ2rxNWCb2jc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:71:50:19:f2:81:a6:36:37:0e:79:53:1f:84:ab:64:e6:72:
         ee:98:03:1b:6c:96:1f:c0:00:f0:dc:54:91:cd:1b:2c:ce:9d:
         63:af:37:cc:d9:b4:c1:f8:cb:27:5f:9b:a8:fe:3e:e6:e3:74:
         c9:7c:a6:f1:38:6d:ca:57:50:8c:9f:3a:56:e3:9d:b8:dd:1a:
         5c:3c:be:ec:5e:1a:17:0f:3b:79:d3:06:2f:7d:92:17:ec:2b:
         cb:7e:a6:a3:32:29:90:a8:f4:dc:bf:a8:30:f7:14:f5:a7:b9:
         f2:0e:51:2c:54:89:cc:00:e0:5a:7e:79:af:56:bc:53:b6:4d:
         4f:c9:d4:b5:b9:0d:9f:e0:cf:51:6a:07:e7:18:83:f1:48:f6:
         35:ec:72:94:d8:be:f3:16:ec:cd:9a:d3:9f:1d:13:35:4e:a1:
         fc:59:c3:2b:fe:dd:eb:ab:08:8d:9e:79:46:6a:c3:d8:9b:06:
         95:13:1d:a9:ff:87:8e:2b:e9:65:0e:14:91:8a:ca:a4:e9:86:
         1b:e4:93:3a:a2:0d:0b:4e:7f:1f:bb:e7:f6:83:1c:56:7d:1d:
         c1:f9:32:d9:b6:7c:ed:63:ad:5e:e5:a0:a8:75:cb:99:61:65:
         73:5b:6d:a0:ae:47:b1:3a:e3:fb:38:b4:a3:d0:a4:15:ec:51:
         b7:df:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org