Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32382d3438203d3e20393435.roa
File:                     323630313a316430303a3a2f32382d3438203d3e20393435.roa (raw, json)
Hash identifier:          ye1Cl58I2Ln6slKnHUj68OUNvA5Rbm/7s7Wb8lI8IMM=
Subject key identifier:   1F:96:BD:6A:C0:53:62:F1:FB:A4:34:3D:5E:02:3B:3F:51:49:23:A3
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       55040C51F9DDA171E7C777585E7A60F8DAA12CF5
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32382d3438203d3e20393435.roa
Signing time:             Thu 19 Sep 2024 10:05:57 +0000
ROA not before:           Thu 19 Sep 2024 10:00:57 +0000
ROA not after:            Thu 18 Sep 2025 10:05:57 +0000
asID:                     945
IP address blocks:        2601:1d00::/28 maxlen: 48

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 02:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:04:0c:51:f9:dd:a1:71:e7:c7:77:58:5e:7a:60:f8:da:a1:2c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Sep 19 10:00:57 2024 GMT
            Not After : Sep 18 10:05:57 2025 GMT
        Subject: CN=1F96BD6AC05362F1FBA4343D5E023B3F514923A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:8a:56:38:26:39:08:20:30:f7:fa:3e:ce:
                    4d:d9:0a:2b:48:78:be:37:55:56:b3:4e:03:de:eb:
                    76:1f:8b:23:b5:e1:57:dc:5b:90:9b:e4:a3:c3:24:
                    51:a2:57:fc:7b:a8:76:59:17:b3:c5:da:6e:10:43:
                    26:23:fb:89:6b:99:37:54:a8:78:b1:a6:82:dc:b5:
                    1a:a3:8f:5a:63:fa:79:03:02:16:82:1b:f9:99:9d:
                    28:bc:00:70:7f:9b:ad:91:56:62:18:92:87:88:26:
                    9b:18:f4:d1:60:20:81:07:e1:60:d2:ee:c4:9f:33:
                    eb:68:a3:79:b4:c0:73:e2:79:c6:dc:61:d7:b6:fd:
                    b5:1f:e5:15:23:34:15:3c:73:ac:af:0e:fe:36:eb:
                    03:8e:f9:70:9a:de:98:41:3a:41:79:ab:21:69:46:
                    38:cb:ea:59:4b:d2:f8:a9:9d:18:41:3b:b7:88:f3:
                    f0:47:22:b6:dd:3a:e9:55:6e:68:f4:57:6f:05:30:
                    97:78:80:ec:58:24:c1:58:1e:a4:61:05:b5:fe:54:
                    85:fd:77:cc:42:ff:ae:28:36:86:44:ee:c2:4d:9e:
                    00:6c:27:54:13:1f:ea:93:b5:aa:ff:6c:55:23:fa:
                    f5:9e:24:89:56:92:40:4d:ea:b6:6a:c6:a7:c0:d2:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:96:BD:6A:C0:53:62:F1:FB:A4:34:3D:5E:02:3B:3F:51:49:23:A3
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/28

    Signature Algorithm: sha256WithRSAEncryption
         16:56:21:70:f7:36:6b:df:2d:9a:0b:b6:3b:c3:2a:48:2d:fd:
         fd:af:6b:9a:52:09:dd:23:60:95:dd:fa:36:fc:48:be:6f:49:
         e4:ea:99:a2:10:c3:00:38:13:37:45:dc:b9:a7:6c:0b:34:71:
         a0:c6:c4:ba:a7:d1:79:4b:7d:9d:44:16:4c:12:da:80:df:c6:
         df:cf:8e:6b:89:cc:42:c5:86:04:e9:ec:02:2b:d4:26:33:3f:
         58:be:d1:d8:58:3b:7f:89:b6:8f:9e:24:06:15:f7:ef:14:a9:
         94:24:21:f6:38:10:56:60:70:1c:18:ef:af:d6:2d:97:f7:31:
         31:cd:38:d4:48:e6:f4:53:49:cc:85:ac:49:cb:33:6e:8d:dd:
         c0:56:e1:07:bf:20:7f:74:15:58:f1:41:96:2c:27:d1:8f:b1:
         28:83:e6:b3:7f:d6:11:2f:8c:23:e8:0e:aa:48:3d:01:e7:e6:
         e3:90:2d:d5:52:95:47:b6:47:75:f6:e4:4d:ab:16:37:f8:65:
         bf:8a:d8:2a:45:71:ac:e0:b1:82:1c:fc:29:8b:9d:8d:4d:dc:
         5e:e7:9c:8c:d0:5f:c4:55:eb:5f:d4:11:ce:59:37:42:96:da:
         0e:ab:90:17:a2:ac:19:70:af:bc:25:c6:58:56:c8:c2:bb:18:
         c4:ee:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----