Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f34382d3438203d3e20393435.roa
File:                     323630313a316430303a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          h12VOKD3zwECrV8H/12V8jOR1yllCRzPKYVwIb89bJk=
Subject key identifier:   79:F8:66:59:90:4B:9C:00:DA:F5:5A:87:88:44:82:44:36:E8:AC:CF
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       03B21527B121959F394E735A2FF94B6C77CF0135
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f34382d3438203d3e20393435.roa
Signing time:             Wed 23 Oct 2024 01:31:08 +0000
ROA not before:           Wed 23 Oct 2024 01:26:08 +0000
ROA not after:            Wed 22 Oct 2025 01:31:08 +0000
asID:                     945
IP address blocks:        2601:1d00::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 14:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b2:15:27:b1:21:95:9f:39:4e:73:5a:2f:f9:4b:6c:77:cf:01:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Oct 23 01:26:08 2024 GMT
            Not After : Oct 22 01:31:08 2025 GMT
        Subject: CN=79F86659904B9C00DAF55A878844824436E8ACCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:6e:b3:36:32:9f:07:13:97:9e:2e:8b:cd:
                    8d:4d:2b:70:d5:6c:32:69:23:8b:39:34:4e:2e:2b:
                    75:98:a7:fb:46:ca:98:79:78:9a:b5:40:79:6a:35:
                    25:e1:51:8a:f2:b2:7b:93:19:7a:64:7f:e2:10:d2:
                    6f:37:34:75:1f:61:c1:72:4e:32:76:a6:1e:c5:10:
                    c1:66:7e:b7:68:1d:86:b0:77:33:fb:ca:ea:72:55:
                    ca:d2:8d:d1:7c:b4:36:1e:20:a0:73:26:38:52:43:
                    c0:d2:ae:4e:eb:9c:8a:ea:45:8f:28:4d:5d:84:2d:
                    7b:8e:55:f6:d7:17:84:b9:8c:41:c5:ae:ab:a0:a3:
                    2f:7c:ed:bb:18:1d:b1:bb:c6:28:94:24:6e:a9:37:
                    a4:92:18:50:9c:49:53:64:bc:95:c7:ef:a0:c8:91:
                    78:05:78:40:7b:6e:f8:36:22:9a:47:fb:e6:24:ec:
                    66:28:d6:62:13:55:63:b7:e3:2a:cd:9f:cf:8c:4a:
                    5d:ed:f1:62:e3:30:9c:fa:12:ee:23:2c:e9:19:3a:
                    b8:6c:b5:07:3b:ae:24:e4:a3:ce:45:d2:b9:4b:b0:
                    28:ca:a3:e3:0c:6d:a2:ac:0d:7d:8d:55:a4:f4:88:
                    e3:cb:94:2a:d3:9d:49:8d:d0:ae:aa:06:46:c1:1e:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F8:66:59:90:4B:9C:00:DA:F5:5A:87:88:44:82:44:36:E8:AC:CF
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:3a:47:48:94:2a:f2:5c:6f:02:24:eb:e8:0a:52:07:85:1d:
         0a:98:b4:9c:59:d8:4a:e3:df:14:1e:f0:21:68:b9:e6:6e:5f:
         7b:69:33:fa:57:5f:d9:49:a7:55:83:55:2a:2a:a4:2e:b7:73:
         64:cf:99:32:84:f1:a0:3f:01:67:f7:a7:69:3f:10:66:1c:d5:
         ca:f9:1b:77:29:51:12:37:29:da:fa:94:20:ec:2f:20:e8:e7:
         f4:63:92:37:c2:c0:73:70:58:92:9b:79:7f:8d:78:be:f3:cb:
         b4:27:eb:4d:8a:66:79:de:76:79:6d:12:b5:e8:a2:3e:ff:e0:
         d1:40:db:39:15:d5:a6:95:5a:4c:e2:e6:bd:8a:99:a6:ae:41:
         98:2b:f7:d9:9f:e1:be:32:4b:0d:1b:ff:04:0e:f1:a7:5b:b6:
         69:3a:2e:5e:2f:d5:91:5e:d8:e4:f7:f9:8a:e5:4d:1f:c3:e1:
         01:ec:50:90:27:58:73:f5:d6:72:e3:ee:44:27:0e:e2:ba:2a:
         f3:85:68:a2:19:e7:72:ad:39:fd:f1:90:14:c1:3f:94:34:ec:
         51:23:d8:c7:d4:5d:af:b0:ea:56:19:45:54:1d:97:dd:dc:98:
         7d:ec:b7:7e:e5:8e:1e:ec:8d:2d:00:ee:64:b7:fb:a6:e0:20:
         64:2a:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----