Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XNpktP-2_mx2tVgZ4pyysQ-XXK0.roa
File:                     XNpktP-2_mx2tVgZ4pyysQ-XXK0.roa (raw, json)
Hash identifier:          liTpZzG3rw3ld/19N6vmldHS8MzgSbHGuYsiAYsTqQI=
Subject key identifier:   5C:DA:64:B4:FF:B6:FE:6C:76:B5:58:19:E2:9C:B2:B1:0F:97:5C:AD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       A4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XNpktP-2_mx2tVgZ4pyysQ-XXK0.roa
Signing time:             Tue 30 May 2023 16:08:21 +0000
ROA not before:           Tue 30 May 2023 16:08:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5CDA64B4FFB6FE6C76B55819E29CB2B10F975CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:b9:a7:ef:80:ad:a0:8a:68:b4:6b:e3:c0:
                    36:e1:d6:8a:29:82:57:63:c0:86:4e:8f:75:de:e4:
                    7e:33:8f:b7:23:a4:cb:f5:b1:c2:1f:57:8f:fb:d6:
                    34:3f:b6:c2:62:f7:f5:3f:0b:38:4e:c0:83:00:9e:
                    b4:3e:77:12:46:68:9f:d6:58:4a:19:5d:7c:df:6c:
                    28:83:28:45:f5:6b:59:c3:78:da:61:62:39:be:93:
                    8e:0d:62:dc:60:0a:81:9e:84:6e:7c:0c:e9:f2:9f:
                    ef:15:ce:08:c4:47:ed:04:b6:57:97:e8:33:2e:c1:
                    90:9c:7b:b5:5b:af:01:a0:cd:a6:21:47:bc:37:0d:
                    4d:02:a0:00:4e:85:bf:38:32:cc:a0:57:ea:f0:10:
                    c7:88:1c:80:7c:64:a0:31:4d:b0:00:96:5c:6d:39:
                    03:ef:77:ae:88:ad:8a:3c:48:24:74:b5:71:99:a7:
                    87:ab:cc:8f:09:00:75:6c:e1:2b:0a:07:d1:73:fe:
                    d5:6e:0e:47:25:ea:d9:15:c2:29:93:b9:bf:bd:e9:
                    58:32:cc:de:df:70:ea:63:0d:b8:f4:7d:0d:a0:f4:
                    c6:2d:01:1b:de:b8:79:e7:5e:1a:e9:c1:3f:fc:04:
                    f1:c1:d1:78:27:fc:66:12:77:1a:9b:db:d5:8a:3b:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DA:64:B4:FF:B6:FE:6C:76:B5:58:19:E2:9C:B2:B1:0F:97:5C:AD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XNpktP-2_mx2tVgZ4pyysQ-XXK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:f4:c4:b5:81:c1:c2:86:88:9e:87:4b:94:03:65:0d:8f:04:
         91:8c:36:6a:4a:9c:75:90:9b:27:bb:ec:58:75:50:e8:43:35:
         8d:71:a0:df:7c:4f:80:8f:66:05:f6:2b:a3:ac:8b:6e:5d:ab:
         84:3c:36:07:7a:9d:dc:01:94:1e:8d:ce:bf:aa:1c:84:17:29:
         7b:00:20:8b:9c:9e:e4:01:a5:ad:be:39:d6:d0:e4:c1:ef:e1:
         b3:ad:44:cf:0b:09:bc:91:83:7e:81:06:2e:c0:05:dc:d1:11:
         87:88:a3:83:1b:18:7b:94:60:35:61:53:11:85:01:b4:3b:2d:
         bc:d7:c6:ec:5a:da:ee:b9:b0:6a:73:d5:bf:36:e6:32:31:c8:
         87:b5:b3:23:c6:cf:10:26:94:ec:86:0b:03:f8:8b:97:9e:19:
         17:59:95:91:63:b9:75:9f:b1:30:72:56:63:b5:2c:db:15:69:
         81:a4:ac:dd:20:b3:db:b7:5f:a2:86:fd:48:46:23:63:f5:3f:
         05:ac:d9:16:7c:13:a8:ca:81:39:f7:36:33:8c:eb:8e:dd:3c:
         fe:3d:65:17:35:fd:5e:2c:a9:57:7d:47:4c:83:f1:73:b8:c5:
         a2:27:ac:3c:df:46:43:52:9b:64:89:18:2e:39:7a:a8:1f:37:
         7f:31:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----