Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Nbiw12ChD4XjomumnQQKgwb9ARs.roa
File:                     Nbiw12ChD4XjomumnQQKgwb9ARs.roa (raw, json)
Hash identifier:          ua2WJqlFObPMV8e/NbvLgTQFZlylnSofffTdev9OQuQ=
Subject key identifier:   35:B8:B0:D7:60:A1:0F:85:E3:A2:6B:A6:9D:04:0A:83:06:FD:01:1B
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       8D
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Nbiw12ChD4XjomumnQQKgwb9ARs.roa
Signing time:             Sat 01 Jul 2023 01:28:34 +0000
ROA not before:           Sat 01 Jul 2023 01:28:34 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        27.127.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:34 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=35B8B0D760A10F85E3A26BA69D040A8306FD011B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:64:b5:2c:eb:bb:58:70:b1:e7:41:c2:07:
                    8d:bb:b5:9a:6a:0f:0c:fd:73:ee:41:eb:e6:69:a4:
                    32:27:97:35:95:16:86:76:de:8c:61:f8:c1:be:58:
                    85:ff:7f:04:45:cc:b4:ae:35:50:3c:34:17:55:e7:
                    8c:d5:42:ef:96:9e:07:dc:f2:e6:a3:24:e0:77:2a:
                    ee:63:f6:38:51:c7:81:b6:03:f3:9a:a7:83:7e:75:
                    bf:1a:5e:7f:d6:8a:9a:0e:c7:f7:d6:3e:7f:ed:e7:
                    eb:85:03:1c:a9:70:1a:90:9c:39:d3:f6:47:e1:32:
                    1d:9f:4a:0a:2e:77:54:a1:86:2e:5b:ac:46:03:98:
                    db:2a:28:6e:36:b0:ad:90:d2:18:1f:4a:f6:e8:78:
                    9a:27:99:3b:ae:fa:77:96:77:63:01:7e:34:82:ff:
                    fe:27:e8:00:ae:3e:1d:7e:c7:58:45:56:6b:85:79:
                    5c:ca:e3:34:7e:38:5b:68:d2:7b:bf:59:23:68:bf:
                    2c:9e:6b:9a:fe:57:3c:e3:51:42:61:75:5a:ee:27:
                    63:fc:6f:75:4d:dd:d7:b6:ee:b0:a2:4a:57:39:f1:
                    05:da:51:b0:6d:53:2a:0f:88:fe:99:4d:37:31:29:
                    37:bd:cb:5a:9b:67:73:9b:a5:f3:b4:6f:37:47:cf:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B8:B0:D7:60:A1:0F:85:E3:A2:6B:A6:9D:04:0A:83:06:FD:01:1B
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Nbiw12ChD4XjomumnQQKgwb9ARs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:52:62:4a:4a:2d:fb:be:79:c5:68:16:aa:98:43:a0:6b:
         41:bd:4b:7a:51:23:70:5c:38:27:ae:f9:8e:1d:2b:ae:87:a6:
         a7:d4:b2:9e:b6:c1:a8:58:63:57:ce:2f:e0:f5:04:a1:a3:7d:
         4b:52:8a:aa:dc:8c:95:11:69:cb:31:2f:99:a3:b1:62:75:b9:
         ae:3b:b1:26:d3:26:98:a4:c2:33:ee:11:e6:ce:63:be:fa:b2:
         36:6e:54:ea:0c:23:ce:67:08:d9:94:15:52:c7:f6:59:ab:15:
         e1:b3:e7:72:26:66:79:f9:fd:a4:c3:60:6b:02:7b:b1:96:bc:
         e0:d7:a8:be:c0:91:68:de:0d:1b:43:8e:7a:3c:4c:d1:c7:42:
         86:42:fe:19:01:1a:bf:23:f1:b6:d9:23:ee:97:35:88:9c:b1:
         76:51:4f:07:b7:41:65:aa:da:df:27:2d:fe:9e:2c:0c:5d:96:
         aa:6b:4b:bf:8e:10:f7:f3:9b:e5:8a:0c:70:cd:75:1a:11:59:
         1c:c1:05:20:cc:4f:20:d5:9f:31:d2:34:8e:d0:b8:35:ec:48:
         35:a8:13:b3:20:e3:d9:64:28:a5:91:20:a5:44:32:ad:5a:91:
         14:41:ef:01:a5:f0:c3:e9:e9:c1:2a:0f:d6:d5:ba:96:de:82:
         8e:16:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org