Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1G2IMBSITJ7AK22dVuW-asTOq-w.roa
File:                     1G2IMBSITJ7AK22dVuW-asTOq-w.roa (raw, json)
Hash identifier:          jcjy10I20gjbhN0KAJK/ZZNpempd9IUAykdOpk8H+JI=
Subject key identifier:   D4:6D:88:30:14:88:4C:9E:C0:2B:6D:9D:56:E5:BE:6A:C4:CE:AB:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       035E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1G2IMBSITJ7AK22dVuW-asTOq-w.roa
Signing time:             Thu 01 Jun 2023 17:56:36 +0000
ROA not before:           Thu 01 Jun 2023 17:56:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:56:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D46D883014884C9EC02B6D9D56E5BE6AC4CEABEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:13:b4:6a:d2:44:e1:57:39:8a:f5:f9:8d:
                    d3:b0:64:37:d2:46:36:7e:31:eb:fa:54:34:ce:f1:
                    8d:0f:0e:66:9e:27:1f:d4:28:f8:62:f1:6a:20:f0:
                    0b:dd:16:8c:46:6d:11:74:06:eb:df:a2:56:c2:bb:
                    da:43:ac:8e:69:91:76:b9:79:0d:92:1a:4d:9f:8f:
                    12:1d:bf:7c:44:72:06:66:c8:5e:14:0b:47:c6:de:
                    b5:b2:82:20:73:ba:d1:a4:29:8f:ed:07:4e:f4:1f:
                    07:53:98:97:4c:af:3b:6e:f9:1f:c2:37:b1:79:92:
                    20:65:90:c0:33:15:24:a9:fa:44:46:ae:23:42:27:
                    7d:07:86:3b:07:5f:8a:f6:9e:ac:ab:72:a8:01:92:
                    bd:56:d7:fd:94:b3:ee:f7:10:6a:56:66:1c:7a:93:
                    4e:93:99:f2:dd:95:5e:e8:46:3e:a5:17:95:58:79:
                    7e:d5:04:26:05:2b:75:73:97:85:48:72:01:93:3b:
                    6e:0f:14:f0:27:b8:22:1c:50:96:df:2d:50:8b:b9:
                    68:d3:7f:b8:4a:c9:bd:c1:0e:6b:ad:14:c0:6d:09:
                    90:17:75:50:84:1b:22:20:2a:bd:d4:e5:bf:81:9a:
                    4e:fe:fb:a9:6e:aa:52:5d:0a:22:17:8c:29:11:65:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:88:30:14:88:4C:9E:C0:2B:6D:9D:56:E5:BE:6A:C4:CE:AB:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1G2IMBSITJ7AK22dVuW-asTOq-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:5a:bf:ce:be:52:0b:b6:b0:7c:cc:3f:28:9d:3e:3c:1d:3b:
         f9:a3:f3:4d:d0:0b:33:20:02:7d:78:38:57:b9:36:95:0f:ad:
         69:67:24:b0:3a:e4:9f:90:fe:4b:32:1f:3a:ed:7e:0d:0f:de:
         53:12:8c:66:e4:e7:08:df:8d:92:44:1f:1d:19:e9:d4:d8:98:
         64:9e:53:d4:25:6c:b9:8a:d4:eb:80:a7:63:85:cd:17:8b:0d:
         67:9c:62:57:29:19:17:b5:c6:04:ba:53:ab:75:7c:30:f0:0e:
         ce:6b:2f:62:e7:81:ae:18:cf:de:d4:63:82:a7:4d:c9:e5:6a:
         6f:fb:a1:07:80:2c:9b:2f:b5:61:1d:b1:f5:04:e7:0a:75:05:
         40:c3:ed:eb:33:4b:a7:19:11:3c:4c:a1:59:e0:2a:fd:19:49:
         8a:9c:ba:84:77:f9:40:81:1b:b2:e0:6c:ab:1a:fb:1c:ba:7d:
         c3:59:1c:1f:69:b3:8b:20:52:59:97:bf:c9:1a:10:7a:22:57:
         e4:34:d6:69:17:bb:37:88:74:0a:e4:e4:12:48:6e:36:15:1d:
         a9:6f:e1:8c:88:a7:97:a3:8e:bd:07:da:24:14:7f:8f:ce:d4:
         c5:09:a1:8c:d3:6f:1e:49:b1:9c:0b:1e:11:97:6c:55:6e:1f:
         2e:4c:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----