Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa
File:                     3134302e3233352e3139362e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          dkgLk5pvspvjkzrzsUIkRrcLT6wq769ur3KcaER4gRY=
Subject key identifier:   54:4E:A6:DD:04:C9:F6:49:31:DC:C2:3B:47:58:3C:1B:36:6B:34:4C
Certificate issuer:       /CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
Certificate serial:       016312373D1B4397B73F8530ACC532E0B942F368
Authority key identifier: 5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa
Signing time:             Fri 04 Oct 2024 05:03:42 +0000
ROA not before:           Fri 04 Oct 2024 04:58:42 +0000
ROA not after:            Fri 03 Oct 2025 05:03:42 +0000
asID:                     945
IP address blocks:        140.235.196.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 02:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:12:37:3d:1b:43:97:b7:3f:85:30:ac:c5:32:e0:b9:42:f3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
        Validity
            Not Before: Oct  4 04:58:42 2024 GMT
            Not After : Oct  3 05:03:42 2025 GMT
        Subject: CN=544EA6DD04C9F64931DCC23B47583C1B366B344C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:e4:bd:67:6c:33:58:5e:a5:68:12:60:ed:
                    74:48:c3:9d:5a:d5:f8:3a:d5:6b:3f:89:41:32:2e:
                    5d:96:65:fc:ec:93:27:2a:a0:71:09:cd:fb:c4:d7:
                    fd:87:e8:68:14:d7:6e:54:c8:48:84:6b:26:f3:e1:
                    04:be:68:eb:33:20:9f:72:e6:90:32:69:87:e6:33:
                    9d:af:06:63:a1:e7:17:be:a3:75:97:b2:61:1a:a1:
                    61:7a:ce:d7:e8:a4:47:71:05:46:30:61:81:f5:b2:
                    72:9d:2f:88:9f:46:01:0a:1b:02:a6:ca:ab:0d:08:
                    8e:01:9b:67:bb:cc:71:6e:33:d2:99:83:08:dd:e1:
                    0f:32:69:48:49:ba:44:9a:82:ab:a1:dd:0c:8c:96:
                    84:c4:fa:87:b1:9f:e2:30:ec:4d:64:4b:ed:9e:1b:
                    7c:17:ce:83:25:fe:df:bb:32:2f:d9:74:b5:3e:60:
                    6f:33:04:14:89:aa:15:13:fa:d1:9a:5b:9d:86:6f:
                    23:3b:b9:ac:09:ab:03:32:8d:9c:fc:b2:ba:cf:fe:
                    f5:ee:ca:5c:11:25:1b:9e:a8:6c:30:a4:38:f2:a1:
                    91:d4:b9:44:f3:bd:76:d2:b5:f8:a6:ed:60:fa:71:
                    47:26:14:a6:69:b0:8a:12:0e:6d:1e:df:67:fb:f3:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:A6:DD:04:C9:F6:49:31:DC:C2:3B:47:58:3C:1B:36:6B:34:4C
            X509v3 Authority Key Identifier:
                keyid:5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:b1:4d:f5:ab:f4:91:3a:0a:f7:fe:5b:e2:9d:66:97:ea:
         ff:e5:e9:bd:50:d2:5e:f0:45:9f:61:fb:66:cc:26:ea:d3:0d:
         55:e2:b2:b6:ca:a5:0c:88:30:4f:fe:8c:89:42:44:e9:3f:e0:
         fc:bb:d0:86:90:58:97:be:60:49:2e:81:ad:e6:50:be:09:72:
         9f:07:1f:8a:9c:c9:92:b5:84:14:a8:4c:d3:62:25:e2:1a:82:
         79:ed:44:fc:c4:74:7e:33:cd:76:8e:69:fc:f5:3d:3a:7a:77:
         2e:8d:74:b9:13:d3:67:2a:5c:86:ba:0b:47:38:b4:c5:21:f4:
         d0:d9:f2:e2:a9:be:fc:26:3d:f4:1a:08:9d:68:68:d8:4d:fb:
         6e:61:3d:14:04:40:e6:67:bb:63:b7:19:49:b4:29:2f:4b:4b:
         8a:59:00:e5:aa:96:b7:21:e8:d8:32:0f:45:8a:b0:ff:1c:19:
         05:77:66:48:c4:8a:24:b6:a4:f6:b6:b5:1e:06:df:4f:65:64:
         9e:c2:9b:a2:80:d4:18:cc:b6:28:a2:69:42:bf:b8:db:81:ea:
         59:77:e7:68:d0:96:c1:27:c2:5b:04:f5:20:25:ac:2b:4f:b8:
         c2:72:49:5a:ec:8f:90:ad:9e:0d:7d:03:21:be:dc:a4:45:18:
         a6:f6:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----