Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kantjx6GTQTVpBizzkNy9Ni58GY.roa
File:                     kantjx6GTQTVpBizzkNy9Ni58GY.roa (raw, json)
Hash identifier:          n5G+irnzTKSB86MhlI3MWaBWy0aCZUyZMN621wlZNaA=
Subject key identifier:   91:A9:ED:8F:1E:86:4D:04:D5:A4:18:B3:CE:43:72:F4:D8:B9:F0:66
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0144
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kantjx6GTQTVpBizzkNy9Ni58GY.roa
Signing time:             Fri 07 Jul 2023 04:08:22 +0000
ROA not before:           Fri 07 Jul 2023 04:08:22 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.135.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:22 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=91A9ED8F1E864D04D5A418B3CE4372F4D8B9F066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:86:0b:5b:9a:28:e7:5b:0b:23:64:a9:19:
                    0a:9a:9c:83:bb:d2:a2:47:a1:e8:55:3a:2a:6a:03:
                    75:86:6f:42:fb:22:26:62:8c:16:c0:dc:04:79:88:
                    f0:1c:21:74:3e:71:ce:c7:eb:8e:f4:a4:bd:48:e3:
                    5d:66:f0:7d:95:81:07:ef:f2:f4:47:e6:71:ec:3a:
                    a3:81:48:9c:ac:71:bc:88:73:b5:1d:76:49:4f:2d:
                    b3:68:fb:a1:48:9e:7e:62:7b:ac:7a:f6:08:7b:94:
                    2d:93:ee:17:33:95:fe:6c:e9:fe:57:3a:24:cb:dc:
                    ba:37:03:ea:f0:53:4d:da:d5:62:3c:db:8a:31:45:
                    c4:85:a1:9a:85:a6:6b:7b:f7:e9:b1:29:b7:ba:9a:
                    95:cd:b2:92:7c:ea:68:f8:67:1a:bc:11:14:c6:42:
                    4b:2b:8f:73:d0:f0:ce:65:53:3a:83:ad:d9:c8:2a:
                    2b:b4:81:15:d5:d4:89:28:cc:df:f5:dd:e8:03:74:
                    c6:bd:97:63:5e:d9:84:10:2b:8c:61:30:3e:43:92:
                    73:12:27:2a:b4:ff:ec:65:25:66:ec:5e:f9:9b:e4:
                    7d:f6:14:36:b4:d2:0b:3e:f5:d2:03:b4:d9:f0:ed:
                    7b:1f:da:1f:a7:41:22:61:1a:20:b7:18:34:9f:7c:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A9:ED:8F:1E:86:4D:04:D5:A4:18:B3:CE:43:72:F4:D8:B9:F0:66
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kantjx6GTQTVpBizzkNy9Ni58GY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:ef:97:2e:6a:f6:f0:9e:da:bd:2f:db:35:59:3f:8c:21:
         0a:75:cd:0e:a2:e0:f0:c7:af:b3:a8:83:37:3c:de:49:d5:16:
         b3:de:e7:d4:55:eb:27:c2:7e:53:07:40:a9:d3:de:d3:9e:53:
         2c:71:35:5d:46:1b:b8:df:b4:e9:80:46:69:bd:8b:92:79:0a:
         1b:3e:86:04:2e:30:02:de:ef:4f:21:df:af:67:56:2f:18:d6:
         46:62:d0:9a:dd:7b:57:46:5c:24:5e:cf:2b:d6:44:ec:af:15:
         97:4e:d1:bf:2f:ef:89:26:83:45:04:9d:15:d2:b5:36:10:05:
         7e:b5:7b:45:68:b4:33:60:4a:00:29:19:98:55:2e:94:aa:b5:
         90:ce:f1:a5:d8:76:68:3d:b1:e1:42:3d:c2:e4:d7:77:bd:db:
         12:08:ca:22:2f:40:95:29:01:b1:00:0d:20:56:84:42:39:bf:
         dc:94:e5:d7:18:bc:10:3d:cf:01:05:d6:4c:2a:ca:0d:bc:39:
         ff:3a:5a:25:40:77:55:b6:97:c7:79:d7:d9:b2:0a:34:8e:da:
         de:61:b2:84:5b:93:05:b8:01:36:96:a2:3c:38:70:83:8d:6e:
         e8:54:e5:d1:0b:18:92:3c:a0:42:53:8c:38:0a:c8:a4:d9:ec:
         30:e2:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org