Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/whfILEQTgBUEF8kRdWQda_IvP-k.roa
File:                     whfILEQTgBUEF8kRdWQda_IvP-k.roa (raw, json)
Hash identifier:          hbLBnD3IOySQMOi/A0PtN4xB7TMqdgCr7JiEYpBEod4=
Subject key identifier:   C2:17:C8:2C:44:13:80:15:04:17:C9:11:75:64:1D:6B:F2:2F:3F:E9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0121
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/whfILEQTgBUEF8kRdWQda_IvP-k.roa
Signing time:             Fri 07 Jul 2023 04:05:59 +0000
ROA not before:           Fri 07 Jul 2023 04:05:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:05:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C217C82C441380150417C91175641D6BF22F3FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:85:d6:6b:38:07:65:a5:82:68:e4:85:6e:
                    b6:59:85:41:50:53:e7:1a:c4:3b:75:a1:a2:f0:43:
                    13:ca:ea:c1:dd:67:9d:95:2c:61:c1:c2:f1:74:49:
                    10:b0:d9:7b:ab:46:27:7a:c6:6d:74:69:17:56:49:
                    c3:dd:ca:16:0c:f0:e8:e1:f7:65:42:c1:05:36:50:
                    bb:53:af:7e:55:77:3d:9d:0d:ec:49:6f:9e:9b:cf:
                    2b:f0:b1:da:88:ed:99:11:ae:85:4f:12:62:b0:83:
                    c0:b1:8c:e0:7b:b3:9b:47:0e:66:7e:28:f3:9e:db:
                    08:ea:be:64:cf:3c:f4:08:7f:4e:8f:28:cb:88:a4:
                    e1:57:4a:01:97:b9:91:c4:be:65:c0:77:d7:85:9c:
                    90:6e:fe:70:ff:b6:96:54:5f:f6:f5:00:b2:71:9f:
                    a7:cd:34:22:7a:22:43:f0:44:4e:75:6a:37:ec:a7:
                    fd:da:06:4b:b1:b5:ab:52:34:ef:42:3e:c3:28:4a:
                    75:15:6e:74:af:93:14:a2:a1:81:07:53:30:f9:28:
                    28:fa:f3:46:76:5d:69:cb:09:bf:6f:e9:65:a9:86:
                    b1:b5:0b:f9:ee:8a:72:05:a8:25:fe:6b:41:e9:3c:
                    b7:d2:29:38:0c:cf:fb:e8:41:7d:c0:55:a4:88:c5:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:C8:2C:44:13:80:15:04:17:C9:11:75:64:1D:6B:F2:2F:3F:E9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/whfILEQTgBUEF8kRdWQda_IvP-k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:e9:5a:9e:6d:5b:ee:f8:60:a5:7b:9f:16:0c:c7:f0:80:
         1b:8f:86:09:c4:65:d6:b3:f5:23:97:02:79:bf:c9:e6:42:c0:
         4c:bc:f4:65:08:11:ba:62:e3:55:db:15:f8:3f:d9:7e:da:ae:
         06:c3:23:9e:52:c1:67:97:71:0d:9c:04:7d:1e:77:f3:45:24:
         24:20:e4:96:59:0d:fe:0d:7c:b6:38:56:e6:9a:e1:56:01:4a:
         12:b7:65:2a:7d:4b:30:27:a1:c8:83:2d:24:06:04:9b:f3:96:
         8c:e0:80:d2:1a:34:b2:06:f4:01:fa:4d:86:b7:94:89:50:46:
         ea:f3:a0:ab:ea:d9:5d:f5:53:cd:66:e6:36:eb:bd:f1:af:1d:
         5f:db:f7:b6:2e:af:ce:63:74:4e:50:7d:83:99:2f:70:3e:d0:
         7d:39:dc:79:8c:18:7e:1a:c5:fe:76:6e:3a:df:75:f0:96:07:
         88:42:d5:73:89:09:80:2f:50:c4:d4:e3:5b:66:60:54:ed:a9:
         d6:5a:a2:f2:3c:fc:ad:a6:13:d9:36:28:54:f8:c5:51:f7:be:
         2a:ef:e8:9a:b9:0f:e8:29:71:58:b7:07:c9:9e:bd:b8:05:95:
         e9:e5:da:8f:08:7f:29:4f:12:e1:98:08:13:57:10:70:13:ae:
         b8:98:bf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org