Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/aXGi248ftRZzwQdy6ae7WA5LDoI.roa
File:                     aXGi248ftRZzwQdy6ae7WA5LDoI.roa (raw, json)
Hash identifier:          Zek4C7jyuQAhjNhPSbNDIoggqMozHuuk89vbKCI1uNo=
Subject key identifier:   69:71:A2:DB:8F:1F:B5:16:73:C1:07:72:E9:A7:BB:58:0E:4B:0E:82
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0117
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aXGi248ftRZzwQdy6ae7WA5LDoI.roa
Signing time:             Fri 07 Jul 2023 04:05:55 +0000
ROA not before:           Fri 07 Jul 2023 04:05:55 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.132.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:05:55 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6971A2DB8F1FB51673C10772E9A7BB580E4B0E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fc:6b:34:2a:7e:77:24:82:53:18:a5:0b:85:
                    67:db:25:d7:38:6a:4f:71:e5:c8:ca:ca:9b:4e:e9:
                    7c:d7:c2:c9:ef:99:d7:76:f6:62:07:46:e2:61:5d:
                    36:57:18:f6:ea:ff:58:20:71:89:93:8a:d9:d2:bf:
                    d1:15:22:4c:01:fb:f4:4f:09:6f:ee:d8:ac:38:ca:
                    76:20:88:4d:78:02:6d:6a:2d:e7:98:14:ff:79:40:
                    f3:d5:4d:7e:5c:07:39:10:d3:3e:21:89:1e:69:fd:
                    95:67:3e:9e:7c:64:37:55:02:1f:e5:6e:d0:f5:09:
                    34:fc:a0:55:39:00:60:c4:96:3f:ce:9a:35:c7:90:
                    80:57:ae:18:86:2e:fe:22:2f:9c:f5:75:dc:87:cd:
                    ba:8d:f4:53:db:41:d2:e9:e1:43:32:58:60:88:ee:
                    03:46:ce:57:3f:a5:77:19:54:08:cb:53:b8:d2:84:
                    8c:25:fa:ac:26:2f:ed:35:ed:d5:71:30:e6:d9:47:
                    26:aa:a6:62:cf:54:3a:74:28:84:20:1f:64:35:6c:
                    78:b3:41:ff:7d:c7:3d:5e:ec:e9:ed:1b:31:11:a7:
                    6c:8c:3d:23:6e:91:e5:dc:2b:dc:07:fe:97:32:67:
                    8b:46:34:5e:3d:c0:91:ac:17:1b:10:29:bd:35:79:
                    e0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:71:A2:DB:8F:1F:B5:16:73:C1:07:72:E9:A7:BB:58:0E:4B:0E:82
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aXGi248ftRZzwQdy6ae7WA5LDoI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:86:2b:15:17:f7:0a:7d:23:ef:9b:f1:b2:0f:53:6c:2a:80:
         a6:21:54:fa:9c:bf:30:20:50:9b:6d:67:35:9a:da:3b:23:83:
         ed:84:67:06:f1:19:39:1c:5b:57:cd:56:87:9f:d8:bf:4f:f4:
         db:49:6e:8f:94:18:40:77:7b:2c:be:4a:43:f9:33:ee:bd:6f:
         39:85:b3:85:5c:99:e9:1a:f5:c6:f4:78:02:0f:3e:46:5d:da:
         5d:14:d8:79:e2:d8:55:c2:20:6e:26:84:6b:9a:60:8d:2b:8b:
         da:03:54:a1:65:1c:4c:52:bb:b5:5d:46:b3:10:28:c7:dd:3d:
         c2:9f:84:19:b8:04:02:a3:b9:d9:b9:48:3e:15:9b:8d:0a:84:
         93:71:52:76:95:d6:75:03:b4:cf:7e:09:a6:af:42:b0:0a:db:
         71:45:b3:30:27:5d:ac:a8:84:64:26:a1:8f:f0:ee:9f:80:4f:
         38:3a:48:21:fb:43:b5:5c:4e:56:c8:2c:e8:23:d7:ea:e9:e4:
         2b:ec:f9:a1:80:ac:01:22:4a:56:5a:2d:75:38:9f:b3:ce:20:
         ae:da:e9:08:59:1e:62:2b:0f:aa:a6:a2:80:4b:c1:fd:63:36:
         9d:89:45:7a:e4:73:d1:01:77:43:bc:b0:c6:82:12:b8:f9:2c:
         75:2c:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org