Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/2/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa
File:                     3134302e3233352e3132312e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          KlqA5sER2Ihjv57zNahGHoTR9OtmicxdT2x+uCVC18A=
Subject key identifier:   31:9B:FB:13:F8:C7:0C:A8:D4:82:56:F0:68:73:EF:75:C4:C9:BF:7E
Certificate issuer:       /CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
Certificate serial:       0C898D282CE7BEA56F3C0D0628BD22E7EA77A414
Authority key identifier: 3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/2/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa
Signing time:             Mon 07 Oct 2024 06:43:11 +0000
ROA not before:           Mon 07 Oct 2024 06:38:11 +0000
ROA not after:            Mon 06 Oct 2025 06:43:11 +0000
asID:                     945
IP address blocks:        140.235.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 02:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:8d:28:2c:e7:be:a5:6f:3c:0d:06:28:bd:22:e7:ea:77:a4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
        Validity
            Not Before: Oct  7 06:38:11 2024 GMT
            Not After : Oct  6 06:43:11 2025 GMT
        Subject: CN=319BFB13F8C70CA8D48256F06873EF75C4C9BF7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:6c:6d:e7:d3:00:3c:17:77:4f:6d:cc:65:
                    fb:37:ab:a2:1e:11:97:10:f5:a0:8d:a6:88:e2:6c:
                    f5:0f:7c:cb:32:ff:4b:5d:00:a8:27:0f:ee:e5:ed:
                    fe:04:c6:0e:12:a8:da:f3:a9:47:93:7d:45:b4:5a:
                    69:53:53:82:18:bd:d7:71:36:86:1f:af:f6:26:f9:
                    6d:4e:9a:a8:82:ce:06:f9:b4:9e:cf:d2:0f:5e:d6:
                    03:cc:57:ad:56:10:88:17:17:bc:b4:66:6b:8b:69:
                    81:54:b0:32:96:26:f1:a9:ba:26:67:82:ab:40:80:
                    5c:3d:8b:0c:01:9d:a9:f9:0c:32:92:e6:b6:e3:11:
                    1d:7b:e5:6c:70:4e:cd:42:71:d4:59:4a:e3:24:e5:
                    dc:f1:fc:0c:2d:bc:3d:2e:88:cf:bb:f7:0a:f0:7e:
                    c4:4b:6f:b8:b5:e1:fb:ae:e4:45:5b:86:6d:33:fe:
                    46:f2:3e:19:3f:91:36:8c:52:4b:9d:24:58:9d:c0:
                    37:40:a0:34:14:90:e2:7d:72:24:dd:8f:e8:cb:21:
                    82:bb:39:d0:0a:1b:21:80:b3:c9:ad:bd:09:f5:71:
                    fa:34:bd:15:a8:8f:dc:62:22:ec:ca:76:a8:04:15:
                    6e:f6:36:ab:f2:11:95:91:4b:fc:52:39:1e:ed:b2:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9B:FB:13:F8:C7:0C:A8:D4:82:56:F0:68:73:EF:75:C4:C9:BF:7E
            X509v3 Authority Key Identifier:
                keyid:3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/3A50253BA3B3EF711381A90CB56A6B4B4EE5DF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ea:fe:e8:fa:ce:c7:20:39:3d:be:d2:8b:f7:81:f1:79:e9:
         c4:1d:40:1c:f0:49:db:99:3c:d5:22:f8:cf:f9:14:a8:c9:e6:
         c7:68:1e:cc:1c:99:a3:71:55:98:d4:a7:9b:45:57:8e:55:86:
         cf:96:de:4c:17:92:e8:9a:59:af:1b:b3:c1:66:c4:ef:95:8a:
         14:33:38:44:0d:fb:c1:d0:f4:c9:f5:dc:57:2f:ef:bf:04:7f:
         bb:e2:d8:9a:15:c3:dd:fa:64:e7:0d:46:b5:b0:f3:7a:30:2d:
         fd:af:02:69:da:1b:c1:88:0a:40:2b:51:fe:fe:d6:23:91:fe:
         6d:9b:fd:17:87:8a:8a:6f:a8:a9:b7:46:32:3c:3b:47:fb:11:
         32:04:db:c8:b2:7c:05:ea:65:b7:39:18:65:31:c5:dc:64:5e:
         c6:af:bc:81:c9:a4:b7:d4:b6:f2:9a:1e:c8:db:9e:48:48:31:
         a9:64:96:80:82:8d:8c:5f:28:67:38:91:25:b8:91:25:bb:1c:
         0d:b0:ca:12:e6:8a:6f:bc:9e:57:6c:4e:2b:0e:b5:01:e3:a8:
         7f:18:28:94:a7:9d:24:e1:96:83:18:bc:5f:75:bd:94:b1:78:
         00:ec:a4:a4:f4:ca:cc:e0:c3:b0:20:f4:95:b8:55:93:3a:7d:
         8a:e2:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----