Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/ZLjc3y5SpU3lT7T3PkL9-Q6FlKg.roa
File:                     ZLjc3y5SpU3lT7T3PkL9-Q6FlKg.roa (raw, json)
Hash identifier:          0LwoV9ejH0URSYFruXvEfk9KaB0fMQYm3TQt7aW1qiw=
Subject key identifier:   64:B8:DC:DF:2E:52:A5:4D:E5:4F:B4:F7:3E:42:FD:F9:0E:85:94:A8
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       D5
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ZLjc3y5SpU3lT7T3PkL9-Q6FlKg.roa
Signing time:             Sun 01 Oct 2023 01:28:49 +0000
ROA not before:           Sun 01 Oct 2023 01:28:49 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     8220
IP address blocks:        27.110.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 09:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:28:49 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=64B8DCDF2E52A54DE54FB4F73E42FDF90E8594A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:c7:4e:28:84:b2:38:d3:ee:21:1c:c1:5f:
                    6c:38:7a:89:61:44:17:72:25:fd:29:80:a8:9c:29:
                    c7:38:8e:1c:ec:3d:4e:6a:89:ed:21:e6:bd:ae:7a:
                    87:9a:12:00:bb:83:c9:52:ef:2d:b3:33:73:60:03:
                    d0:7d:57:ef:46:28:8c:dc:31:d8:f8:47:08:70:2f:
                    75:7b:58:f3:09:a6:6f:43:48:69:04:9c:03:a3:8a:
                    bd:8d:aa:86:8a:14:86:79:aa:59:c9:02:10:48:41:
                    f0:8b:15:70:3a:d6:77:4f:67:08:8f:f3:0f:e1:97:
                    33:38:df:75:0c:1f:6d:51:2f:79:8c:16:41:c1:42:
                    0e:9a:9d:d6:a5:26:b4:7a:11:b9:af:69:82:b8:6b:
                    cb:96:d6:39:23:b1:4a:c9:1d:a6:73:f8:7d:f3:a0:
                    99:ab:02:e5:52:28:d9:f0:8d:b5:19:95:21:50:4f:
                    b4:be:67:7b:39:fa:a9:bf:24:8a:0c:ab:3f:13:af:
                    10:19:df:9a:19:d0:04:f2:59:71:64:bf:d4:cf:06:
                    55:e8:cc:b6:76:e4:ac:34:f7:51:99:49:07:18:d3:
                    4b:c0:0d:1d:74:b5:94:66:81:9a:d3:51:da:bf:d8:
                    b0:f5:5d:4b:10:27:b4:f1:64:73:c0:09:88:7a:3c:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:DC:DF:2E:52:A5:4D:E5:4F:B4:F7:3E:42:FD:F9:0E:85:94:A8
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ZLjc3y5SpU3lT7T3PkL9-Q6FlKg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:d8:71:4b:39:76:bc:b5:de:bf:8e:99:5f:b6:7c:0b:20:
         a0:e6:ec:32:6f:51:77:17:2a:b8:7e:87:eb:e5:9a:b5:5a:00:
         a2:98:4d:72:bc:3a:f0:25:10:81:9a:c1:79:34:0c:6d:4f:1d:
         87:fc:9b:dd:8f:41:db:93:94:e7:5f:c3:da:3d:60:fa:b1:af:
         e9:ed:c3:a2:49:f3:6d:47:11:5a:f0:cc:fb:f1:c5:aa:98:70:
         73:3c:17:91:63:a5:93:86:5a:5d:eb:02:28:7c:2a:98:3c:1b:
         38:45:25:93:52:18:a8:9d:51:86:18:19:04:15:9f:33:00:a8:
         e8:a3:a6:ec:a4:34:f5:79:d2:b5:0a:18:ff:24:ac:5c:b5:81:
         39:80:e2:78:30:a8:ff:b0:a4:29:52:58:d1:d0:94:69:c8:74:
         ad:10:b4:28:6c:79:ae:ce:6b:c8:d7:d9:70:82:d2:88:9f:ce:
         1c:80:67:08:3b:ec:60:bc:f5:cf:7d:d8:45:94:94:d2:06:ae:
         9e:8a:4d:72:de:5f:21:f9:eb:cb:73:71:8b:35:7e:62:0a:2f:
         b0:f2:20:a9:99:f5:56:f1:ba:dd:d5:b5:f1:b0:c6:9d:1a:a2:
         ac:4e:d1:71:c4:0a:fe:22:04:be:ce:20:40:ac:f9:de:26:d0:
         30:4f:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org