Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30065/gMX8p8veb87U4WzHbKoAuziCaMc.roa
File:                     gMX8p8veb87U4WzHbKoAuziCaMc.roa (raw, json)
Hash identifier:          0vLTjpMCuq8dwUW8X3QO81CsH+JplfHYXP/Ys9v96DU=
Subject key identifier:   80:C5:FC:A7:CB:DE:6F:CE:D4:E1:6C:C7:6C:AA:00:BB:38:82:68:C7
Certificate issuer:       /CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Certificate serial:       03
Authority key identifier: 5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/gMX8p8veb87U4WzHbKoAuziCaMc.roa
Signing time:             Wed 04 Oct 2023 03:08:41 +0000
ROA not before:           Wed 04 Oct 2023 03:08:41 +0000
ROA not after:            Wed 02 Oct 2024 05:56:19 +0000
asID:                     4685
IP address blocks:        2405:6580::/29 maxlen: 30

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 05:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
        Validity
            Not Before: Oct  4 03:08:41 2023 GMT
            Not After : Oct  2 05:56:19 2024 GMT
        Subject: CN=80C5FCA7CBDE6FCED4E16CC76CAA00BB388268C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:28:06:85:b4:60:39:79:20:be:4a:82:17:
                    63:35:c7:30:ed:74:d2:fe:6a:64:1c:28:01:2a:49:
                    85:f8:2d:1e:c1:3d:36:5f:1d:41:29:a1:79:54:05:
                    1e:34:6a:1e:cc:7e:53:c4:27:bc:1b:05:40:6b:c0:
                    04:3c:96:51:ca:80:68:64:c5:62:9a:85:e2:59:75:
                    04:e9:85:60:01:6a:36:03:90:17:0b:2b:07:b3:21:
                    d8:a9:0c:05:6f:4b:e2:72:3c:2a:69:45:02:dc:cb:
                    d3:d2:81:b0:fa:ec:75:aa:71:cf:32:25:f5:9c:54:
                    90:94:73:f1:49:60:00:fe:5c:61:cf:2f:d8:4c:10:
                    9e:0c:48:d0:20:93:3b:c9:9e:b0:2b:fe:63:94:62:
                    2d:d6:b2:f6:e7:0c:c1:d3:13:f0:e8:08:bc:d2:ba:
                    33:da:9d:d3:39:a7:df:f1:93:86:0a:ce:de:51:96:
                    1e:05:7c:cf:3c:d6:65:4d:9b:c5:28:f9:98:d6:c9:
                    21:ba:7a:17:c2:af:18:71:c2:59:90:e4:fd:2c:03:
                    71:75:ed:58:34:6d:c6:70:47:4d:bf:de:cc:c3:d2:
                    6f:3d:02:30:b1:94:f9:52:7c:2e:c2:38:35:68:e5:
                    fa:72:5d:c7:2f:60:fd:a6:6c:10:b3:61:27:7f:4d:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C5:FC:A7:CB:DE:6F:CE:D4:E1:6C:C7:6C:AA:00:BB:38:82:68:C7
            X509v3 Authority Key Identifier:
                keyid:5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/gMX8p8veb87U4WzHbKoAuziCaMc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:6580::/29

    Signature Algorithm: sha256WithRSAEncryption
         be:b0:e4:7a:fa:73:43:7a:fd:58:d9:0c:ef:63:eb:f9:f9:84:
         09:d6:d1:ef:03:00:9a:d2:d6:26:20:db:bf:17:bd:d8:ce:29:
         02:21:57:89:a3:50:c7:d0:03:cf:f9:8e:86:aa:99:d5:47:5c:
         75:71:83:86:17:6d:cd:13:98:19:ec:af:24:2d:b0:f1:5e:eb:
         83:12:fe:f1:16:f2:3b:c1:95:ee:d5:5d:4d:b8:ce:d4:a4:33:
         01:de:f7:17:2d:1a:06:ef:ce:d8:d5:99:7b:e4:2e:d5:39:58:
         3e:13:4d:e4:cd:5e:0c:fa:fa:67:da:7b:c7:68:61:e6:2d:18:
         37:0c:bb:50:b8:48:63:70:31:5c:93:86:42:63:fe:f4:1f:45:
         0f:4c:58:ef:02:ed:23:80:22:62:03:5f:ff:f7:5a:ff:6f:f1:
         4b:54:86:0f:7b:66:a9:e1:f0:e4:d4:ad:18:bc:79:65:f2:60:
         3f:39:98:34:b8:84:00:25:88:b3:d9:c4:66:b4:0c:d5:66:0d:
         63:c5:96:f4:1a:a3:9e:66:fd:46:b0:f3:6e:f6:dc:90:7f:37:
         06:0a:7c:80:93:07:eb:1c:52:52:08:7a:89:a8:9d:de:1e:b0:
         f5:bd:e5:34:05:b6:cc:16:34:30:45:86:fd:f3:0c:77:22:e7:
         11:5a:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 07:44:10 2024 by rpki-client on console-fra.rpki-client.org