Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30043/JQ2s5qFm-9rxK1JlYvMgTJm6R-M.roa
File:                     JQ2s5qFm-9rxK1JlYvMgTJm6R-M.roa (raw, json)
Hash identifier:          rZn/cH/YLrpDIRGCNaPluNGhzYTRuYLJq6njiExBktw=
Subject key identifier:   25:0D:AC:E6:A1:66:FB:DA:F1:2B:52:65:62:F3:20:4C:99:BA:47:E3
Certificate issuer:       /CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
Certificate serial:       14
Authority key identifier: 7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/JQ2s5qFm-9rxK1JlYvMgTJm6R-M.roa
Signing time:             Wed 21 Sep 2022 05:03:20 +0000
ROA not before:           Wed 21 Sep 2022 05:03:20 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9621
IP address blocks:        2001:d28::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
        Validity
            Not Before: Sep 21 05:03:20 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=250DACE6A166FBDAF12B526562F3204C99BA47E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:15:54:6c:e2:2b:87:06:65:9a:67:67:ac:
                    57:f9:fc:56:bb:64:30:27:a2:10:fa:cb:08:36:a3:
                    9d:2a:06:c7:e5:ef:46:5b:c1:d2:61:84:75:7d:b5:
                    08:ca:28:93:e0:b2:3d:13:f9:a8:85:cc:82:8e:31:
                    dc:d5:5c:eb:e6:bb:18:1c:54:61:c0:27:54:e5:4e:
                    d1:25:22:cc:c8:0a:16:94:81:3b:35:2f:22:73:14:
                    96:a8:e3:56:87:9a:d4:f2:9c:97:b3:de:83:c6:4b:
                    ed:8b:e0:b4:53:de:b3:51:a0:d4:45:eb:d0:47:6d:
                    96:1c:1b:1e:f3:f0:2f:15:19:fb:3e:30:76:28:9b:
                    85:dd:ed:c2:14:07:07:23:aa:10:92:01:fd:59:2e:
                    6c:1e:a7:e0:6f:db:bf:57:54:e4:a2:63:5b:16:92:
                    bb:3c:9c:16:be:ab:3f:a5:96:9b:22:6b:9c:e2:02:
                    51:00:01:33:f3:e7:a5:71:d1:89:bb:08:67:e7:04:
                    6f:83:9b:aa:af:ea:79:3b:ab:40:0d:59:b2:3f:b0:
                    f9:66:a8:65:a1:90:86:31:59:a5:60:52:08:e4:e2:
                    a1:4c:8f:3f:73:31:5e:ce:e8:09:28:88:64:d5:87:
                    ff:3a:7d:5a:69:b5:17:45:76:c7:91:32:a3:7f:a6:
                    1c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:AC:E6:A1:66:FB:DA:F1:2B:52:65:62:F3:20:4C:99:BA:47:E3
            X509v3 Authority Key Identifier:
                keyid:7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/JQ2s5qFm-9rxK1JlYvMgTJm6R-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:77:2f:f1:45:a1:31:01:a7:6b:9e:c1:09:22:70:50:fb:e7:
         02:3e:be:da:37:a0:66:e3:ed:63:fd:7e:35:a0:98:92:95:fa:
         48:68:c2:ce:73:eb:8a:30:4d:36:8b:10:1d:be:aa:f0:fa:24:
         eb:81:7a:b8:e1:c9:04:f4:1f:4c:99:28:55:1d:eb:b5:10:cb:
         fb:a9:a5:8e:1d:86:4a:0e:fe:24:5f:21:3f:b4:56:7a:b1:d3:
         25:d9:e5:70:49:44:cf:2a:d1:a9:b1:de:e9:74:b8:71:e2:12:
         26:a3:df:0a:b4:9a:5f:22:2a:8c:d3:5c:84:8a:e8:7a:a6:c1:
         69:1d:17:e1:90:3a:3d:ce:1a:a8:2d:63:98:f7:eb:cd:39:e3:
         81:da:ce:34:36:5a:4e:3a:a9:68:dd:a7:24:49:82:cd:35:c8:
         0c:67:4b:7b:a6:dd:80:6b:ea:85:ee:94:fd:ca:10:81:d1:38:
         09:16:2a:a8:90:b2:bc:05:53:39:70:93:00:33:28:e1:cf:54:
         5a:a8:70:48:e2:95:21:2b:3e:f6:8b:e5:4b:75:00:f6:b0:c1:
         41:f0:20:27:db:9d:46:94:f7:b2:9e:a3:43:c8:db:db:9f:f1:
         b3:e8:d2:d6:a1:d8:34:13:49:c5:4f:c0:08:71:8c:74:87:86:
         62:9d:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----