Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRsczdhc9mqgVHxTMTovHLg1erY.roa
File:                     IRsczdhc9mqgVHxTMTovHLg1erY.roa (raw, json)
Hash identifier:          zbqyp/BJ6NEMi4T4m0WbcrztBuh2D/lS1CRLcrqKBAg=
Subject key identifier:   21:1B:1C:CD:D8:5C:F6:6A:A0:54:7C:53:31:3A:2F:1C:B8:35:7A:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0380
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRsczdhc9mqgVHxTMTovHLg1erY.roa
Signing time:             Thu 01 Jun 2023 17:57:35 +0000
ROA not before:           Thu 01 Jun 2023 17:57:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=211B1CCDD85CF66AA0547C53313A2F1CB8357AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:09:74:90:70:2e:67:9c:06:51:36:0b:9e:
                    75:5f:f2:30:f6:dc:9c:ab:6b:c8:cd:74:c9:e6:79:
                    bf:50:42:32:fe:62:6e:e2:56:3c:83:92:50:d3:48:
                    f6:66:07:c0:6b:33:2b:b0:3c:47:c5:7a:f9:f3:eb:
                    98:14:9b:a8:48:f4:ca:6d:73:7e:80:1d:2b:fc:a8:
                    d7:7d:10:2e:94:05:00:d3:d8:cf:5c:f8:98:f0:72:
                    84:af:48:03:f5:cc:dc:0a:2b:74:f7:e4:74:40:59:
                    3b:13:87:60:58:ec:31:ce:ec:73:f1:ac:41:4c:34:
                    64:63:1a:97:57:7e:7a:9d:f5:6d:56:d3:a1:87:74:
                    f7:f9:b1:65:ba:e5:92:70:c6:b5:c1:3c:ac:42:c1:
                    79:ec:63:d1:a4:96:c6:ec:32:f1:41:11:dc:99:78:
                    6a:90:cb:17:f0:96:a7:00:3f:bb:34:bc:62:90:c0:
                    1e:3b:c5:22:99:1d:bd:68:b3:0e:9f:54:df:86:55:
                    85:62:0f:d4:bb:76:11:d6:56:54:ce:9a:f8:a9:24:
                    05:37:fe:78:45:cc:37:12:3d:6c:37:8c:ae:39:9c:
                    fc:68:93:1e:c0:70:0d:eb:89:86:5f:01:4f:fb:29:
                    39:62:72:67:19:4e:33:de:a5:19:12:15:7b:09:f1:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1B:1C:CD:D8:5C:F6:6A:A0:54:7C:53:31:3A:2F:1C:B8:35:7A:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IRsczdhc9mqgVHxTMTovHLg1erY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:33:2b:8c:02:62:e9:b6:2b:5e:a7:17:be:9b:a6:ab:fc:be:
         8a:03:be:05:3a:75:65:5f:49:92:0d:d6:1a:b9:7c:42:dc:fe:
         5f:d4:42:13:21:4c:54:ab:0b:ec:93:7b:a5:ee:24:6a:3a:be:
         7f:db:4c:e1:81:94:72:0b:c2:07:0b:0d:2a:15:f0:2d:df:a3:
         b7:f9:97:a4:51:4d:cb:34:bb:6a:b4:86:7e:bf:9f:23:64:7d:
         49:e6:02:ff:06:3f:2c:47:97:d5:0c:14:8a:f8:37:79:13:fb:
         b4:e5:be:f8:e5:b9:2a:0e:4a:0d:b1:27:a4:79:b6:18:80:6f:
         bf:23:55:2c:e6:31:c4:6a:df:ba:36:25:9e:95:13:c5:f6:f0:
         b4:d9:57:1e:74:0e:27:5b:bb:c8:a5:74:4d:ce:51:4e:23:a5:
         81:ab:18:3a:33:52:90:aa:41:3c:80:53:e0:77:df:3e:53:f5:
         3e:37:c2:28:14:5b:5f:3e:b7:5f:ea:91:39:b0:2a:21:72:b7:
         37:b3:5a:17:95:7a:2c:f2:c3:1f:23:fd:af:1d:7a:e2:10:fc:
         22:70:90:5e:5b:be:00:a1:78:2f:d8:e4:7e:e1:7b:ff:b9:8c:
         d4:d2:a9:f5:22:49:4a:bf:69:c1:22:d4:6a:55:c1:db:15:f4:
         9a:5a:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----