Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bd9VcEFeu9uZsezdUIM9LNChWME.roa
File:                     Bd9VcEFeu9uZsezdUIM9LNChWME.roa (raw, json)
Hash identifier:          R7dTiMKlxXkgNROFUIcO8iCNDI3aygOjSCD0lruiJBM=
Subject key identifier:   05:DF:55:70:41:5E:BB:DB:99:B1:EC:DD:50:83:3D:2C:D0:A1:58:C1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       A9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bd9VcEFeu9uZsezdUIM9LNChWME.roa
Signing time:             Wed 29 Mar 2023 16:05:49 +0000
ROA not before:           Wed 29 Mar 2023 16:05:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.99.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=05DF5570415EBBDB99B1ECDD50833D2CD0A158C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:c3:3d:cb:a6:04:f2:8a:4d:f4:0f:32:da:
                    6d:a5:65:48:46:58:df:13:e7:ae:87:d7:36:fa:d5:
                    a5:2f:19:a0:53:27:e3:84:32:b8:7b:38:e0:e6:b7:
                    eb:26:b0:d7:0a:1d:bc:79:e8:cf:bc:f5:40:f1:64:
                    c1:08:56:aa:6b:a6:55:f6:28:93:4a:81:ad:04:38:
                    8e:01:3d:62:e4:d6:1a:67:6d:c4:7e:27:a0:53:26:
                    c9:30:cc:23:ee:1c:5e:45:4b:22:43:27:1b:69:0c:
                    7a:88:e5:4b:a6:27:74:f8:73:b4:e5:4b:bb:d5:5c:
                    85:65:72:4d:cd:68:95:6b:4c:48:f4:b1:16:00:9a:
                    4d:17:51:98:a4:92:76:5f:5d:91:8f:38:ce:eb:e6:
                    be:f4:07:03:bf:65:17:9b:8d:b1:89:11:18:e9:90:
                    e7:04:58:34:95:c5:19:d1:e3:34:3d:72:a0:65:5c:
                    e3:50:e8:bc:7d:95:f9:32:8e:1c:64:ae:ad:37:7f:
                    1a:65:ad:cc:c4:7c:bb:1e:4a:c0:51:62:35:4f:f2:
                    d4:fc:4a:ee:7d:73:58:b9:76:b3:52:70:69:53:80:
                    a5:4b:a0:0a:c3:d5:d9:a5:d2:63:1a:24:c0:59:9f:
                    6b:92:40:3d:4a:a6:a9:f8:2d:f4:1c:dc:5e:7b:0a:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:55:70:41:5E:BB:DB:99:B1:EC:DD:50:83:3D:2C:D0:A1:58:C1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Bd9VcEFeu9uZsezdUIM9LNChWME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:3b:9f:67:b0:01:e7:9d:a2:7c:31:57:44:05:a9:40:ad:
         02:1d:4b:c3:23:c3:b0:07:83:ef:a0:e3:31:f3:c6:39:ba:ee:
         86:0f:53:0c:d8:68:0d:b6:bb:5b:8f:4a:fd:bf:c1:a5:02:b0:
         fe:a5:50:5a:c1:2f:70:c6:99:94:93:70:78:e4:e1:f3:ff:b2:
         95:bc:38:03:6d:9e:d4:6f:cf:07:48:3a:f6:0c:0c:0e:1f:ff:
         6a:f7:ee:98:d2:43:90:12:0f:ff:5c:a7:ab:5e:81:be:22:c3:
         c6:23:a1:79:2e:05:88:19:1f:fe:64:8c:4c:c3:d3:9e:4b:b5:
         b6:19:97:d5:83:58:1e:0e:f2:7e:fb:e3:54:50:17:ef:16:ef:
         a9:4e:70:68:e4:8d:b2:09:f2:57:48:d9:43:ca:c5:5d:59:85:
         5b:39:fb:24:19:30:ba:5e:ea:90:22:dc:f5:08:e5:97:c8:d0:
         41:0c:2a:71:1a:c1:61:70:44:69:22:63:b7:29:20:a5:b7:24:
         e1:35:c8:9d:8d:5d:2a:85:1d:01:c1:f1:fd:f8:a6:94:34:da:
         c3:78:c2:5c:31:99:84:1c:90:c3:bf:92:70:4c:a7:e2:c7:03:
         05:ca:12:db:d0:3b:3e:33:28:d0:5f:3c:ac:b5:da:95:d6:3e:
         b0:37:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----