Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/of0hzdekmEAlDWymRIXyIokQBY4.roa
File:                     of0hzdekmEAlDWymRIXyIokQBY4.roa (raw, json)
Hash identifier:          SVcGkEGztDhrewYukyOHX1g6Rl1FktenGG94wfEwtoU=
Subject key identifier:   A1:FD:21:CD:D7:A4:98:40:25:0D:6C:A6:44:85:F2:22:89:10:05:8E
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       32
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/of0hzdekmEAlDWymRIXyIokQBY4.roa
Signing time:             Mon 01 Aug 2022 01:28:30 +0000
ROA not before:           Mon 01 Aug 2022 01:28:30 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9607
IP address blocks:        2001:370:a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Aug  1 01:28:30 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=A1FD21CDD7A49840250D6CA64485F2228910058E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:13:aa:52:1d:22:29:eb:f7:95:28:f9:a4:
                    89:b2:1a:25:15:e5:1e:67:d1:23:61:ee:af:00:91:
                    e6:82:bb:d6:c8:18:69:0d:dc:52:10:3d:e3:79:93:
                    c5:7e:47:d4:28:ab:61:bd:9f:f4:69:e5:be:9b:6f:
                    53:6b:c7:b9:3a:40:dc:3d:3c:a0:c2:53:35:5d:2b:
                    a0:69:3c:44:1a:78:95:a3:dc:67:45:77:33:0c:a2:
                    16:8f:33:fc:48:40:8c:57:71:dc:fe:ba:20:6d:27:
                    fb:f2:7d:a8:91:a4:84:2e:a3:0e:d8:05:d9:52:dd:
                    9b:af:fb:e3:a0:8d:15:f1:f6:73:4f:4a:c2:a6:a0:
                    98:0e:de:22:28:cb:fa:8a:3c:c6:4d:a0:60:67:44:
                    de:ff:5e:26:52:d4:e5:ec:5c:bc:67:3c:48:1d:2d:
                    db:07:a2:19:09:98:c9:c2:64:cb:e2:ca:8d:a0:9d:
                    c2:45:95:3a:84:74:75:22:f6:26:71:bd:3b:a1:31:
                    9a:2a:16:86:fe:75:b1:7b:32:cc:b1:2f:ac:6f:e6:
                    1f:12:0d:25:22:eb:d0:85:53:e8:6a:73:75:13:c1:
                    96:d2:1a:a2:63:a5:bf:40:95:d8:af:94:82:6d:ad:
                    df:c7:3d:17:42:fa:2e:c0:c9:8a:81:99:5a:23:ad:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FD:21:CD:D7:A4:98:40:25:0D:6C:A6:44:85:F2:22:89:10:05:8E
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/of0hzdekmEAlDWymRIXyIokQBY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:370:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:d8:59:70:c6:c4:42:5b:dd:bd:00:0a:e7:19:ee:dd:4a:06:
         ec:8a:84:27:08:c8:15:03:09:36:f0:4a:05:d9:0f:cc:15:28:
         2c:b6:c6:87:34:10:2c:33:43:35:c2:79:47:d5:74:18:4a:ad:
         fc:ef:a6:62:29:af:95:a8:f1:df:cc:46:b7:a0:96:93:97:ef:
         b1:a0:78:02:30:1c:e3:f0:f3:4d:23:e5:ac:ad:79:b9:82:85:
         0a:1b:6d:bc:9a:d7:64:b6:b5:46:fd:6c:86:3d:40:90:cb:89:
         69:26:80:79:64:f5:89:8e:8e:b3:4b:53:a6:a4:15:43:e0:68:
         60:84:61:2b:1c:85:33:77:32:8c:d2:3f:01:a0:19:0b:b6:2e:
         f0:a1:17:43:7f:09:7a:bb:00:de:d6:2e:24:7c:45:54:ed:44:
         b1:19:4a:5a:3d:0d:35:cd:f7:c5:c4:af:e3:11:3e:f8:78:0c:
         a5:a5:70:3c:4e:e1:fd:e3:80:97:ce:1a:9b:35:07:3e:f1:b5:
         ad:d9:c8:7b:3f:c7:08:98:af:72:8f:88:32:ae:fa:a3:23:a6:
         42:78:0a:fb:27:f5:8a:75:3c:d9:67:ab:6b:2a:a2:17:b7:63:
         06:68:be:04:d1:b1:ba:6c:ec:ea:1b:68:0e:82:22:ee:21:7e:
         7e:15:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----