Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Oz3kuW6UobcnzT6qkBEaPlbqxyQ.roa
File:                     Oz3kuW6UobcnzT6qkBEaPlbqxyQ.roa (raw, json)
Hash identifier:          r4s/TQ8+9FAQgDIVlj7dN49+O6rYeU9VLoztQkW58sg=
Subject key identifier:   3B:3D:E4:B9:6E:94:A1:B7:27:CD:3E:AA:90:11:1A:3E:56:EA:C7:24
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0150
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Oz3kuW6UobcnzT6qkBEaPlbqxyQ.roa
Signing time:             Fri 28 Oct 2022 06:01:46 +0000
ROA not before:           Fri 28 Oct 2022 06:01:46 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        125.53.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 06:01:46 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=3B3DE4B96E94A1B727CD3EAA90111A3E56EAC724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:49:cf:f7:01:57:b5:30:ce:a2:6b:45:1e:
                    e5:3e:45:76:ee:b2:83:13:a2:de:ca:21:fc:c6:82:
                    73:a9:28:59:d5:e9:12:66:0e:2a:cd:80:eb:70:b4:
                    bd:11:8c:07:00:11:61:4e:f9:72:05:20:93:a7:2c:
                    30:b3:22:7b:2f:b4:26:3e:c7:3f:49:85:c2:f5:17:
                    bc:f5:1d:a0:69:83:76:8a:99:dc:9b:cc:ea:ff:90:
                    97:62:c9:5a:f9:dd:7c:51:34:60:c3:6f:91:8e:3a:
                    51:c5:5c:a7:eb:f1:e7:a4:86:2f:73:16:c5:d0:a8:
                    68:2e:bc:92:ee:eb:1e:4b:f2:6d:54:2d:0b:06:7a:
                    d6:11:19:fb:71:d1:19:66:36:f4:70:ab:10:cb:45:
                    b3:10:c6:a9:7e:26:f7:97:d6:21:1a:0d:69:f6:e3:
                    70:f6:dc:53:09:19:39:53:1f:6a:6e:90:fe:ac:67:
                    a9:18:e3:6c:0d:c7:03:80:dc:6e:0f:98:19:71:f3:
                    60:e7:39:f6:38:21:1a:22:56:60:5a:fc:92:cf:c7:
                    4f:c8:6a:fb:0e:05:cb:c5:45:a3:23:b6:b1:26:2f:
                    bb:63:b6:52:ad:7f:6a:8b:d0:7f:93:59:80:44:21:
                    89:77:71:a3:17:2f:13:44:f7:fc:a5:85:5c:57:ef:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3D:E4:B9:6E:94:A1:B7:27:CD:3E:AA:90:11:1A:3E:56:EA:C7:24
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Oz3kuW6UobcnzT6qkBEaPlbqxyQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:9e:6e:d3:f4:bb:08:90:59:21:e7:63:4d:28:b1:4c:f5:15:
         40:5c:88:18:96:60:62:52:16:df:ba:8d:3a:56:95:dc:a2:32:
         35:53:9f:36:91:40:67:1d:5a:fc:f8:33:40:98:bd:3e:57:d8:
         e7:18:9c:01:0b:b3:7c:8f:0d:f0:ee:76:1b:a4:6c:41:b8:a0:
         db:e5:c1:ca:34:e5:a6:77:45:29:89:53:45:a0:57:0c:62:da:
         dd:b9:c0:ea:dc:ff:4c:0e:8e:5b:80:86:aa:c8:79:f2:22:4a:
         e7:af:11:39:91:86:68:04:e6:92:2a:39:ab:1e:46:33:cf:64:
         09:c7:da:2e:b7:e4:e4:c4:8e:56:51:fb:9f:35:f6:15:3b:03:
         4a:b4:1d:db:ef:a7:22:81:64:93:d4:53:ee:d8:1a:24:86:52:
         61:9a:c9:b7:cc:80:b6:a0:5e:ec:07:9f:44:9d:00:32:27:9f:
         13:76:c0:c0:62:ae:b2:9f:d3:d7:8b:35:40:c1:4f:5a:2c:8a:
         01:42:e5:57:af:24:50:d4:40:23:ce:5c:09:be:7e:8e:42:21:
         18:36:ad:5a:4d:f8:de:29:bd:a1:28:b0:3c:f4:81:eb:9e:f8:
         af:41:e9:cd:30:9b:39:64:c5:68:4d:a7:14:3a:c0:01:50:5f:
         3d:32:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----