Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30405/_xwm6IYVZLwWEJ_MdSmXvmeIjho.roa
File:                     _xwm6IYVZLwWEJ_MdSmXvmeIjho.roa (raw, json)
Hash identifier:          NaeAMfvnOkvCnsSZzwYDva2cVEtTaq+Le0JFvLpd1yM=
Subject key identifier:   FF:1C:26:E8:86:15:64:BC:16:10:9F:CC:75:29:97:BE:67:88:8E:1A
Certificate issuer:       /CN=2A80ACC85AD675948A730937A0E57ABB571C057C
Certificate serial:       0F
Authority key identifier: 2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/_xwm6IYVZLwWEJ_MdSmXvmeIjho.roa
Signing time:             Wed 28 Jun 2023 06:27:38 +0000
ROA not before:           Wed 28 Jun 2023 06:27:38 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     146981
IP address blocks:        2400:8820::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A80ACC85AD675948A730937A0E57ABB571C057C
        Validity
            Not Before: Jun 28 06:27:38 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=FF1C26E8861564BC16109FCC752997BE67888E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:0c:20:b7:aa:83:d1:30:49:4b:f9:d3:28:
                    b6:b3:be:de:dc:6d:4e:d8:85:d2:ec:fa:68:86:74:
                    97:2f:8d:db:d3:d2:25:85:7d:90:ba:83:f7:73:ce:
                    b1:8c:60:59:a5:dc:53:54:a6:9f:46:70:85:b2:c0:
                    b1:0c:e2:22:e0:37:63:aa:28:e6:50:16:f9:14:bd:
                    67:bc:1c:c0:93:5b:9f:05:b8:c3:60:32:f2:bd:b8:
                    cd:d5:65:9b:9a:86:64:48:06:b4:7f:ff:9b:be:6a:
                    67:9c:e6:16:2a:7e:81:3c:df:19:55:0f:46:cc:eb:
                    c9:83:99:c1:c0:7f:fb:44:e3:e6:21:ea:f1:e5:bf:
                    81:85:c2:9e:51:5c:0e:b2:80:9e:c7:a3:35:ed:e4:
                    4c:0e:56:90:5b:78:43:5a:43:17:aa:96:8b:8e:d2:
                    24:a2:4e:ec:d3:35:c8:ad:c5:07:4d:88:bf:dd:f4:
                    9b:4e:75:f4:5f:b1:c9:64:d5:2e:98:d7:17:be:79:
                    27:6b:5b:be:9e:b5:03:2e:6b:0f:fd:da:84:35:2f:
                    b6:51:27:0c:c7:9c:78:f3:0a:05:c9:dd:32:57:92:
                    2b:64:2b:ac:6f:6f:98:ec:54:af:c3:5f:43:b6:46:
                    c3:56:0a:ab:76:dc:a4:26:bc:fe:41:4b:33:a3:d7:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:26:E8:86:15:64:BC:16:10:9F:CC:75:29:97:BE:67:88:8E:1A
            X509v3 Authority Key Identifier:
                keyid:2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/_xwm6IYVZLwWEJ_MdSmXvmeIjho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8820::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:8d:e7:ca:3f:b1:d7:67:c1:85:4f:14:d7:e3:0d:43:ee:bd:
         e8:64:e2:e4:b6:b9:77:04:c1:13:cb:1a:2c:a5:2d:47:58:cb:
         39:80:01:50:16:48:6a:f9:dc:9e:e7:90:0b:3b:90:51:53:50:
         79:22:20:a7:59:c8:b7:34:2c:06:3b:0a:f6:7f:8d:76:cf:7e:
         69:f1:dc:6f:7f:c1:c2:11:70:7c:a2:6a:74:28:be:0e:6b:1f:
         c5:dd:9e:1d:b4:99:dd:27:95:a9:45:c9:95:4a:5f:99:98:2c:
         f4:40:6c:fa:0b:c7:b4:65:d2:bc:09:ce:0f:3e:d8:df:a6:8d:
         14:81:a1:69:68:48:0c:29:57:68:e8:4c:e6:93:ec:27:d5:46:
         aa:d6:0e:c1:95:3f:42:dd:1f:99:fb:cf:f1:6a:3a:6b:ef:f1:
         ec:0a:7d:53:a3:69:89:67:e0:e2:9e:33:39:5d:48:80:7b:c4:
         4d:2e:68:67:ca:32:1a:18:70:66:48:a4:75:37:c0:a3:d7:a6:
         42:0c:20:b0:6d:17:70:8d:fd:f0:f1:93:24:54:a9:55:47:d5:
         3f:19:fb:0e:d1:08:b0:a2:af:43:a1:e1:42:6e:04:d9:83:b5:
         1f:a8:c3:d4:5a:15:ee:f8:89:cc:22:bc:b3:9f:c8:bc:6c:b1:
         2a:4e:ae:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTgw
QUNDODVBRDY3NTk0OEE3MzA5MzdBMEU1N0FCQjU3MUMwNTdDMB4XDTIzMDYyODA2
MjczOFoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoRkYxQzI2RTg4NjE1NjRC
QzE2MTA5RkNDNzUyOTk3QkU2Nzg4OEUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMklDCC3qoPRMElL+dMotrO+3txtTtiF0uz6aIZ0ly+N29PSJYV9
kLqD93POsYxgWaXcU1Smn0ZwhbLAsQziIuA3Y6oo5lAW+RS9Z7wcwJNbnwW4w2Ay
8r24zdVlm5qGZEgGtH//m75qZ5zmFip+gTzfGVUPRszryYOZwcB/+0Tj5iHq8eW/
gYXCnlFcDrKAnsejNe3kTA5WkFt4Q1pDF6qWi47SJKJO7NM1yK3FB02Iv930m051
9F+xyWTVLpjXF755J2tbvp61Ay5rD/3ahDUvtlEnDMecePMKBcndMleSK2QrrG9v
mOxUr8NfQ7ZGw1YKq3bcpCa8/kFLM6PXEf8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBT/HCbohhVkvBYQn8x1KZe+Z4iOGjAfBgNVHSMEGDAWgBQqgKzIWtZ1lIpzCTeg
5Xq7VxwFfDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MDUvS29Dc3lGcldkWlNLY3drM29PVjZ1MWNjQlh3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS29Dc3lGcldkWlNLY3drM29PVjZ1
MWNjQlh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDA1L194d202SVlWWkx3V0VKX01kU21Ydm1lSWpoby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAIggMA0GCSqGSIb3DQEBCwUAA4IBAQDEjefKP7HXZ8GFTxTX4w1D
7r3oZOLktrl3BMETyxospS1HWMs5gAFQFkhq+dye55ALO5BRU1B5IiCnWci3NCwG
Owr2f412z35p8dxvf8HCEXB8omp0KL4Oax/F3Z4dtJndJ5WpRcmVSl+ZmCz0QGz6
C8e0ZdK8Cc4PPtjfpo0UgaFpaEgMKVdo6Ezmk+wn1Uaq1g7BlT9C3R+Z+8/xajpr
7/HsCn1To2mJZ+DinjM5XUiAe8RNLmhnyjIaGHBmSKR1N8Cj16ZCDCCwbRdwjf3w
8ZMkVKlVR9U/GfsO0Qiwoq9DoeFCbgTZg7UfqMPUWhXu+InMIryzn8i8bLEqTq7X
-----END CERTIFICATE-----
Generated at Fri May 31 04:12:40 2024 by rpki-client on console-fra.rpki-client.org