Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DlKSt1uGRp_Pwy3QlKfcrYy7-hA.roa
File:                     DlKSt1uGRp_Pwy3QlKfcrYy7-hA.roa (raw, json)
Hash identifier:          Bfv3YDCF5ixSGf8A6mKADBt97MHHyNCvjYOyndf3sPM=
Subject key identifier:   0E:52:92:B7:5B:86:46:9F:CF:C3:2D:D0:94:A7:DC:AD:8C:BB:FA:10
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       85
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DlKSt1uGRp_Pwy3QlKfcrYy7-hA.roa
Signing time:             Wed 29 Mar 2023 16:04:55 +0000
ROA not before:           Wed 29 Mar 2023 16:04:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.32.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:04:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0E5292B75B86469FCFC32DD094A7DCAD8CBBFA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:1e:41:1e:bd:e2:1c:5d:87:dc:b1:62:9e:
                    fe:56:f0:b8:a9:fb:fb:81:43:c0:3a:82:36:01:77:
                    8a:f9:b6:fb:10:4d:3f:71:3d:45:6f:0d:46:b3:06:
                    d9:bd:4d:b9:63:43:2f:74:c1:03:74:bf:b1:98:4e:
                    e2:5f:18:2d:4f:ca:10:7f:c8:16:4c:36:88:0f:4c:
                    40:f2:cf:4f:73:31:62:04:5e:36:1c:9c:cd:42:33:
                    e3:90:c6:55:f2:a3:4e:fd:9d:2e:79:3f:92:98:ba:
                    91:bc:a8:ef:dc:5c:de:34:0d:48:18:3f:92:cb:fd:
                    f2:0d:de:4a:bb:1b:51:3b:c5:86:fb:7e:d8:48:f4:
                    f4:e3:05:8b:b5:db:58:f5:1e:7d:9a:87:09:6b:b5:
                    2f:d5:95:61:10:41:23:c8:98:cf:99:99:f7:78:e6:
                    6f:f0:7c:f7:26:ca:5c:4f:e5:31:a7:c2:e3:4c:3d:
                    4d:65:b5:4e:d4:26:5c:15:d6:f4:70:8b:c3:c4:dc:
                    b8:7e:7e:14:5e:5a:0b:72:6e:b3:1e:34:58:46:19:
                    a7:09:73:a6:d2:ad:8f:8d:31:bd:ab:38:a9:28:52:
                    3a:78:8d:8c:8c:ae:27:df:18:ad:ae:0e:27:d2:44:
                    74:25:59:7b:28:d5:2c:31:87:c1:6d:0b:6c:eb:92:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:92:B7:5B:86:46:9F:CF:C3:2D:D0:94:A7:DC:AD:8C:BB:FA:10
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DlKSt1uGRp_Pwy3QlKfcrYy7-hA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:e5:c1:02:3b:bb:5e:b8:5b:24:57:0a:a9:ff:2a:b4:1e:61:
         78:bb:f5:75:7a:d3:d0:18:ac:81:6c:19:3d:ab:3a:c0:39:e0:
         4b:99:6f:37:12:53:35:7a:50:61:2b:f9:a4:f8:11:51:d3:0a:
         32:65:1e:25:2a:55:ab:03:17:6f:5a:b8:d9:c7:1b:8e:96:37:
         18:42:49:40:59:ba:bc:0c:c8:ef:d7:64:b8:aa:6b:b1:a1:e6:
         6f:c8:83:6a:93:bb:43:12:b9:32:dc:9b:db:68:4c:1e:51:8b:
         87:5e:cb:ad:fc:15:54:ad:87:b8:70:42:c2:96:78:66:3c:a7:
         0e:82:f2:77:8b:8a:86:0d:c6:53:89:44:dc:18:2c:84:7c:25:
         0d:64:55:46:7b:91:c4:de:06:2d:ac:2c:2a:6d:95:7c:d8:76:
         db:33:1c:29:36:26:13:a5:e3:00:9e:41:04:92:e2:09:e4:aa:
         0e:b8:84:7f:bf:d4:e6:c8:18:5c:ca:41:4d:f2:50:7d:48:ef:
         50:5d:33:01:84:fe:7b:e7:63:75:2e:64:93:53:6b:dc:c9:9c:
         3f:9c:95:0b:13:60:ed:ca:7f:a4:0a:6b:01:4c:3a:83:c5:fa:
         84:3e:47:66:f1:4b:fc:c7:7e:41:18:f3:95:50:99:9b:7c:62:
         67:5f:72:bd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA0NTVaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDBFNTI5MkI3NUI4NjQ2
OUZDRkMzMkREMDk0QTdEQ0FEOENCQkZBMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3HB5BHr3iHF2H3LFinv5W8Lip+/uBQ8A6gjYBd4r5tvsQTT9x
PUVvDUazBtm9TbljQy90wQN0v7GYTuJfGC1PyhB/yBZMNogPTEDyz09zMWIEXjYc
nM1CM+OQxlXyo079nS55P5KYupG8qO/cXN40DUgYP5LL/fIN3kq7G1E7xYb7fthI
9PTjBYu121j1Hn2ahwlrtS/VlWEQQSPImM+Zmfd45m/wfPcmylxP5TGnwuNMPU1l
tU7UJlwV1vRwi8PE3Lh+fhReWgtybrMeNFhGGacJc6bSrY+NMb2rOKkoUjp4jYyM
riffGK2uDifSRHQlWXso1Swxh8FtC2zrkpm9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDlKSt1uGRp/Pwy3QlKfcrYy7+hAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0RsS1N0MXVHUnBfUHd5M1FsS2Zjcll5Ny1oQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYCAwDQYJKoZIhvcNAQELBQADggEBAH7lwQI7u164WyRXCqn/KrQeYXi7
9XV609AYrIFsGT2rOsA54EuZbzcSUzV6UGEr+aT4EVHTCjJlHiUqVasDF29auNnH
G46WNxhCSUBZurwMyO/XZLiqa7Gh5m/Ig2qTu0MSuTLcm9toTB5Ri4dey638FVSt
h7hwQsKWeGY8pw6C8neLioYNxlOJRNwYLIR8JQ1kVUZ7kcTeBi2sLCptlXzYdtsz
HCk2JhOl4wCeQQSS4gnkqg64hH+/1ObIGFzKQU3yUH1I71BdMwGE/nvnY3UuZJNT
a9zJnD+clQsTYO3Kf6QKawFMOoPF+oQ+R2bxS/zHfkEY85VQmZt8Ymdfcr0=
-----END CERTIFICATE-----