Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30381/_mKK6jdFKQXtPjt5wktiIkXk7a4.roa
File:                     _mKK6jdFKQXtPjt5wktiIkXk7a4.roa (raw, json)
Hash identifier:          hvVPmTYfIarE84JWZKC+pS3SHqrbTOYSxfdKoA+ipCQ=
Subject key identifier:   FE:62:8A:EA:37:45:29:05:ED:3E:3B:79:C2:4B:62:22:45:E4:ED:AE
Certificate issuer:       /CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
Certificate serial:       02
Authority key identifier: 79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/_mKK6jdFKQXtPjt5wktiIkXk7a4.roa
Signing time:             Thu 20 Oct 2022 01:53:08 +0000
ROA not before:           Thu 20 Oct 2022 01:53:08 +0000
ROA not after:            Tue 17 Oct 2023 08:31:47 +0000
asID:                     131988
IP address blocks:        2407:b0c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
        Validity
            Not Before: Oct 20 01:53:08 2022 GMT
            Not After : Oct 17 08:31:47 2023 GMT
        Subject: CN=FE628AEA37452905ED3E3B79C24B622245E4EDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:f1:84:db:4e:9d:bf:75:c5:02:78:52:1a:
                    3c:0b:33:07:1c:c6:e8:68:a9:c4:44:f1:e9:2e:f4:
                    14:3c:18:8a:50:87:a7:73:e2:b3:82:5d:b5:69:a1:
                    4c:f2:9b:d0:27:ef:98:d4:43:f3:4e:d2:52:27:13:
                    99:6b:d9:ca:76:2e:a4:07:63:1c:a7:85:f5:27:ed:
                    2f:b6:b2:93:52:f6:cb:85:69:4f:5c:8d:7d:ca:d8:
                    a1:ec:5a:51:4c:43:3e:1b:9b:b2:5c:ba:29:26:d5:
                    a8:8c:e2:aa:a2:90:07:db:40:5d:cb:ad:74:58:ac:
                    40:ce:98:e4:b5:4b:7e:43:20:d2:45:e3:95:be:32:
                    02:8d:dd:a2:6c:32:85:83:6e:1d:bf:86:f9:99:5c:
                    63:55:59:7f:ba:11:12:89:76:e4:51:2a:5a:06:49:
                    c6:4f:19:7c:c0:c5:5d:41:93:16:13:9a:8a:5f:fa:
                    97:70:24:a7:58:d3:a5:19:c5:5a:76:58:b1:c3:34:
                    d1:14:99:92:b9:ee:d9:19:78:e7:2b:aa:3a:67:f1:
                    ce:5e:6a:35:ca:fd:96:e2:d9:b8:80:60:f2:5d:66:
                    be:cb:9a:b1:51:f8:ce:ed:eb:67:2d:f6:2e:35:0e:
                    74:c7:ed:88:2a:bf:0a:3e:f5:51:1d:63:fc:18:7d:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:62:8A:EA:37:45:29:05:ED:3E:3B:79:C2:4B:62:22:45:E4:ED:AE
            X509v3 Authority Key Identifier:
                keyid:79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/_mKK6jdFKQXtPjt5wktiIkXk7a4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:13:7c:63:1f:20:9b:e7:1a:ea:de:8b:e8:09:5e:95:93:c9:
         b2:ed:5b:95:9f:90:ca:bb:3e:e5:e2:42:2a:31:71:91:95:e1:
         00:2d:4e:64:3b:86:e9:58:b0:84:da:2c:48:9e:ae:b8:4e:3a:
         34:27:5f:07:e0:9c:40:c4:65:ed:58:ce:1c:e2:87:cb:63:13:
         bd:ee:86:90:2e:8e:fb:1e:b1:59:de:cd:4f:c4:73:de:20:96:
         ce:c6:70:07:39:cd:d6:22:d9:c3:69:21:31:3e:2f:d3:12:77:
         38:d0:f0:4f:6c:28:29:99:74:4b:11:2f:07:d7:5f:7c:2c:d8:
         d9:ed:e8:b0:2b:27:ed:1e:a1:78:31:75:27:04:9f:a5:0d:ad:
         83:e0:2a:c4:e5:d9:0b:e7:80:80:cd:35:3e:26:8b:b8:46:33:
         7b:d1:9c:c5:83:24:e6:77:51:34:5d:d8:ea:04:f1:c8:53:a9:
         43:a3:73:71:14:9f:13:16:4b:79:b1:29:ce:6e:22:ea:f0:32:
         43:c1:9b:f7:b4:25:fa:7e:29:43:4b:ee:70:70:9c:b6:39:3d:
         44:51:3b:71:ee:fc:24:64:09:31:6f:32:9a:ac:62:77:ac:98:
         f4:c5:26:16:e7:8e:82:36:0f:11:e4:a4:ca:20:26:79:eb:ca:
         c2:5c:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----