Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhPAyfwD2A48hHEN7SoCcYaZY3M.roa
File:                     yhPAyfwD2A48hHEN7SoCcYaZY3M.roa (raw, json)
Hash identifier:          LnXU96EaNrWqdy4CHN6p0YpvBkU+S8hkK5hnN0tZNiY=
Subject key identifier:   CA:13:C0:C9:FC:03:D8:0E:3C:84:71:0D:ED:2A:02:71:86:99:63:73
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0113
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhPAyfwD2A48hHEN7SoCcYaZY3M.roa
Signing time:             Fri 07 Jul 2023 04:05:53 +0000
ROA not before:           Fri 07 Jul 2023 04:05:53 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.120.128.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:05:53 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=CA13C0C9FC03D80E3C84710DED2A027186996373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:ff:73:79:41:c2:78:1a:12:ba:ce:c8:c9:
                    65:24:ff:e2:2e:5d:e5:15:57:f1:80:2e:21:66:cf:
                    c2:71:27:a8:63:f0:90:b6:3a:d2:5d:15:c6:c8:2c:
                    5d:3e:ff:88:09:97:36:a1:d1:8a:38:70:be:8a:f0:
                    61:df:02:96:2d:48:88:bf:61:6b:64:85:01:f2:b0:
                    1f:62:b2:2a:63:bf:cb:62:ef:67:6a:1c:1c:19:8a:
                    5e:ff:f8:46:8a:f3:c5:d6:c4:93:5a:6c:18:87:56:
                    97:36:5a:cc:21:65:54:f9:62:c2:0e:c6:b4:4f:25:
                    2a:31:75:67:29:ed:72:4f:bc:fe:49:5a:99:9a:cc:
                    cd:66:1e:40:fd:ba:3c:4d:db:de:fe:6a:73:1e:37:
                    85:a6:6c:5d:d5:06:23:d1:ed:50:6d:61:ad:30:fb:
                    de:ab:e7:92:50:c0:b5:4f:f8:24:d1:50:7c:e7:c5:
                    8b:ec:b4:87:96:4c:c3:c4:2d:3d:0b:5a:ba:28:27:
                    27:22:c9:4d:0e:40:72:03:1f:4d:7c:cc:88:c0:77:
                    c4:c3:44:56:22:bd:54:80:3b:87:a9:55:41:7a:55:
                    73:2e:e8:9f:79:4e:6c:a1:77:f1:53:e6:2a:56:7e:
                    77:54:f7:c3:31:b5:e7:e2:d9:60:8a:1d:43:6e:eb:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:13:C0:C9:FC:03:D8:0E:3C:84:71:0D:ED:2A:02:71:86:99:63:73
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhPAyfwD2A48hHEN7SoCcYaZY3M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:7e:f9:c0:93:92:2e:a7:9d:34:94:89:f3:b9:13:7b:30:
         19:2c:5a:ca:a3:d6:d4:43:bb:d1:82:95:be:7c:74:7f:bf:80:
         4a:5b:6f:fa:1d:39:71:55:bc:08:bf:61:10:d7:19:22:97:e4:
         2d:28:ce:94:e0:00:e2:5d:13:30:35:84:22:53:a0:05:bc:29:
         66:3a:0b:a5:4c:63:46:58:17:23:11:1e:37:33:c9:f5:6d:4f:
         5c:d5:5f:6c:65:32:26:75:63:3f:b1:5e:0c:68:f4:7a:d0:be:
         b5:fa:da:13:2d:62:9a:e1:e3:33:a4:70:57:94:a7:03:d3:87:
         d4:b8:14:05:95:ac:df:c1:b3:8d:b8:11:5a:4e:69:83:da:02:
         5d:f7:0f:36:ba:29:2d:ec:f7:4a:05:e8:20:d8:d3:61:27:9f:
         70:2c:ff:83:4c:86:e5:aa:32:41:4c:b4:ad:69:a8:ed:a1:ee:
         dd:52:87:00:b2:10:dd:08:86:bb:cc:c2:4c:8b:79:b6:68:c7:
         38:fd:61:0c:18:12:42:12:0b:70:9f:30:db:15:ab:f8:f9:73:
         97:c1:f6:f3:57:19:12:45:37:df:2e:8d:61:a0:32:b9:20:54:
         e4:0f:97:ad:37:10:2a:9f:f6:4a:c8:18:38:59:99:29:eb:41:
         48:3f:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org