Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BKnXD1A8FPqYpU7sesGjxK3ZiOI.roa
File:                     BKnXD1A8FPqYpU7sesGjxK3ZiOI.roa (raw, json)
Hash identifier:          5QpgGyU+fG1Fjmy5xO3UHEmNZ8mFk9EMP0HdTGIdxFk=
Subject key identifier:   04:A9:D7:0F:50:3C:14:FA:98:A5:4E:EC:7A:C1:A3:C4:AD:D9:88:E2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       038A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BKnXD1A8FPqYpU7sesGjxK3ZiOI.roa
Signing time:             Thu 01 Jun 2023 17:57:38 +0000
ROA not before:           Thu 01 Jun 2023 17:57:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.222.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=04A9D70F503C14FA98A54EEC7AC1A3C4ADD988E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:64:8b:99:4b:9f:f8:e1:2b:9f:d4:46:22:
                    eb:03:90:30:ea:12:81:72:2c:c2:b7:01:e7:b1:8c:
                    ac:2c:2f:e1:e5:14:d0:23:c3:8c:99:ae:49:bf:d7:
                    7f:f3:18:a9:ce:69:54:2f:11:1a:91:bc:fd:fa:5a:
                    69:85:a3:52:90:f6:1c:d7:84:6e:28:5d:e5:06:d4:
                    c4:c9:be:2e:74:8d:c1:d8:c2:3e:81:2e:42:e4:a8:
                    0f:4a:cb:37:fb:bd:46:ee:ce:f5:cc:76:45:54:c8:
                    58:18:9e:74:e7:f3:49:09:0d:e4:52:15:71:4a:c5:
                    76:aa:bc:6f:01:b9:9e:50:ca:8f:0f:a7:a7:f9:2b:
                    00:a8:61:ae:6b:2f:59:79:e9:88:85:02:de:e9:13:
                    dd:ec:a8:18:95:df:0e:3a:df:9d:28:84:90:91:d0:
                    84:08:42:da:97:2b:4f:ab:07:25:d7:d0:39:b4:b3:
                    0d:c5:8f:6b:c7:6c:dc:40:33:45:3c:45:cf:82:a7:
                    70:a8:0d:3a:32:24:62:cb:62:07:1b:ea:b2:29:aa:
                    89:30:c3:f9:31:dd:68:0f:84:63:d9:b7:c2:75:23:
                    db:44:34:bf:45:ca:00:d3:09:97:d1:62:e4:87:e2:
                    74:83:27:d8:2c:18:ab:09:2c:65:35:92:47:6c:7a:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A9:D7:0F:50:3C:14:FA:98:A5:4E:EC:7A:C1:A3:C4:AD:D9:88:E2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BKnXD1A8FPqYpU7sesGjxK3ZiOI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:89:ac:33:25:9e:11:be:f7:86:ff:0b:19:19:d5:76:9b:bc:
         ab:40:68:68:23:cd:32:0b:cf:28:83:8b:7a:7d:8f:75:0f:16:
         8d:fe:24:dc:ec:72:c5:ff:d7:58:2b:13:5f:6e:12:1d:9f:77:
         6e:84:0e:46:57:7b:26:fa:81:e6:7b:0b:c8:96:a4:d9:a5:b2:
         0a:30:00:69:1a:26:a0:9e:e6:a2:b7:47:fc:18:8d:8e:dd:f9:
         fc:d1:0b:fa:d4:93:2e:eb:64:e3:39:61:8d:30:87:73:7e:80:
         64:50:75:19:19:bc:7a:e9:a1:57:bc:27:5c:36:d6:c6:30:d7:
         1f:ff:da:e8:b1:2d:7e:15:61:57:30:9e:3a:72:15:74:9f:36:
         88:64:c1:7f:c1:04:ec:17:0b:b9:68:4e:62:ab:97:73:ef:ab:
         3a:75:4b:b7:a0:4d:1c:dc:1f:0a:53:a5:8e:c9:e2:1c:62:8f:
         bc:1a:8c:d3:91:75:a0:ae:90:a2:43:35:ac:41:45:40:b4:73:
         70:27:5c:2e:4f:2a:a3:a7:09:e8:99:7c:7e:8b:95:e3:45:16:
         07:b4:db:72:d6:f2:ad:ad:26:6d:2a:13:3e:a9:38:e2:79:aa:
         8b:91:d5:93:0d:a0:49:24:33:55:19:56:8d:0d:7b:bd:84:6b:
         0f:eb:e2:8c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU3MzhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA0QTlENzBGNTAzQzE0
RkE5OEE1NEVFQzdBQzFBM0M0QUREOTg4RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZSGSLmUuf+OErn9RGIusDkDDqEoFyLMK3AeexjKwsL+HlFNAj
w4yZrkm/13/zGKnOaVQvERqRvP36WmmFo1KQ9hzXhG4oXeUG1MTJvi50jcHYwj6B
LkLkqA9Kyzf7vUbuzvXMdkVUyFgYnnTn80kJDeRSFXFKxXaqvG8BuZ5Qyo8Pp6f5
KwCoYa5rL1l56YiFAt7pE93sqBiV3w46350ohJCR0IQIQtqXK0+rByXX0Dm0sw3F
j2vHbNxAM0U8Rc+Cp3CoDToyJGLLYgcb6rIpqokww/kx3WgPhGPZt8J1I9tENL9F
ygDTCZfRYuSH4nSDJ9gsGKsJLGU1kkdsetBLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBKnXD1A8FPqYpU7sesGjxK3ZiOIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0JLblhEMUE4RlBxWXBVN3Nlc0dqeEszWmlPSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExat4wDQYJKoZIhvcNAQELBQADggEBAEyJrDMlnhG+94b/CxkZ1XabvKtA
aGgjzTILzyiDi3p9j3UPFo3+JNzscsX/11grE19uEh2fd26EDkZXeyb6geZ7C8iW
pNmlsgowAGkaJqCe5qK3R/wYjY7d+fzRC/rUky7rZOM5YY0wh3N+gGRQdRkZvHrp
oVe8J1w21sYw1x//2uixLX4VYVcwnjpyFXSfNohkwX/BBOwXC7loTmKrl3Pvqzp1
S7egTRzcHwpTpY7J4hxij7wajNORdaCukKJDNaxBRUC0c3AnXC5PKqOnCeiZfH6L
leNFFge023LW8q2tJm0qEz6pOOJ5qouR1ZMNoEkkM1UZVo0Ne72Eaw/r4ow=
-----END CERTIFICATE-----