Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/-5-s7cpisHQjb-woI5w5FDWB3XM.roa
File:                     -5-s7cpisHQjb-woI5w5FDWB3XM.roa (raw, json)
Hash identifier:          Ro8EgrnVITIRvhW2vXiphPrNCRmqzonoOlO45LPwK+8=
Subject key identifier:   FB:9F:AC:ED:CA:62:B0:74:23:6F:EC:28:23:9C:39:14:35:81:DD:73
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       13
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/-5-s7cpisHQjb-woI5w5FDWB3XM.roa
Signing time:             Wed 27 Sep 2023 04:29:45 +0000
ROA not before:           Wed 27 Sep 2023 04:29:45 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     55376
IP address blocks:        27.118.0.0/20 maxlen: 32

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Sep 27 04:29:45 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=FB9FACEDCA62B074236FEC28239C39143581DD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:d6:5b:3c:c8:e7:84:90:e5:20:d1:90:98:
                    b9:47:2f:00:8d:dc:b2:72:22:e3:01:a3:93:3a:a6:
                    62:0d:7a:62:34:70:ff:11:50:09:96:33:24:44:d9:
                    6e:b8:3a:e5:d9:d0:b4:5d:8e:f9:7b:33:6a:2e:c3:
                    65:b7:62:4e:f9:0d:4d:23:2f:08:82:c6:ad:8a:f5:
                    26:02:bc:b2:71:0b:a1:b4:bd:7b:c3:e7:d9:33:eb:
                    bc:c8:7a:1d:b7:0d:04:08:55:1f:c8:4b:2b:02:eb:
                    83:07:5f:7d:22:d9:83:60:ff:15:a2:9f:4c:33:3f:
                    8b:d2:6b:ad:82:05:b2:bf:01:4a:64:23:a3:9e:5d:
                    d2:bb:b4:e5:a7:32:25:40:a0:2f:38:e7:9c:bb:3e:
                    92:6f:97:34:30:7f:76:18:b1:35:ff:06:0a:3e:05:
                    30:63:fa:42:86:50:2e:96:4d:a5:23:9f:0c:57:ad:
                    5e:d1:b4:24:7c:29:50:93:ce:bf:3f:0d:da:83:36:
                    0c:dc:c4:72:e2:a0:47:1a:e0:e5:f8:5c:d0:81:de:
                    52:41:d0:10:9b:22:77:ac:9c:8e:93:e7:06:07:29:
                    d5:64:a5:5d:e3:c5:b6:b6:1d:f0:6b:06:e3:e7:9e:
                    eb:ac:49:bf:09:d1:99:bd:dc:30:a7:a3:0d:ff:2e:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:AC:ED:CA:62:B0:74:23:6F:EC:28:23:9C:39:14:35:81:DD:73
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/-5-s7cpisHQjb-woI5w5FDWB3XM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.118.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:38:bd:23:7b:51:37:37:50:73:41:2b:08:a9:0a:74:ce:a5:
         49:0c:82:ce:95:34:d4:7f:38:ec:d7:a3:a3:23:15:6c:cd:4d:
         82:71:56:aa:90:c7:14:88:0f:77:d9:6f:a3:ea:8a:a9:f1:00:
         71:57:7f:2c:c0:fb:a7:4b:8b:0f:fe:4d:1a:9b:28:86:cc:e1:
         1a:a6:c6:cb:a9:1b:a0:31:5f:c2:ea:c3:82:5b:67:48:1c:99:
         e8:8d:52:e6:3f:bb:1f:91:cc:ba:07:38:2c:16:fd:e4:5a:cb:
         40:3a:2b:33:c2:08:29:f6:3b:17:3e:08:31:80:44:d6:d7:95:
         ee:a4:cb:8c:68:2a:71:03:e9:11:2d:62:b6:0c:1a:12:de:46:
         a0:1f:6d:06:ad:eb:16:f0:4e:90:34:71:c1:e9:1a:8f:26:3d:
         9d:42:9e:4a:70:b1:97:27:96:77:bc:d7:37:cf:27:14:c4:ee:
         e3:1b:88:91:fd:9b:98:43:e0:6d:f4:a7:1a:23:64:48:2d:bf:
         98:30:27:88:6d:4d:0a:6d:08:6e:9e:de:f6:61:86:c6:95:ee:
         c6:d4:3a:9c:f0:8b:44:70:75:bf:ac:46:f2:19:85:7d:91:6c:
         1d:f3:9b:f3:d5:29:59:86:b4:c2:f2:c7:24:71:ad:24:0b:01:
         7c:ff:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org