Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nhumoe-y0VR6lFmgs7M717wDkV0.roa
File:                     Nhumoe-y0VR6lFmgs7M717wDkV0.roa (raw, json)
Hash identifier:          ryCxjsATq47zD3/He3MiaiUjF3bTeKC9Ag2p7uYNT9M=
Subject key identifier:   36:1B:A6:A1:EF:B2:D1:54:7A:94:59:A0:B3:B3:3B:D7:BC:03:91:5D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       AB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nhumoe-y0VR6lFmgs7M717wDkV0.roa
Signing time:             Wed 29 Mar 2023 16:05:50 +0000
ROA not before:           Wed 29 Mar 2023 16:05:50 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.172.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:50 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=361BA6A1EFB2D1547A9459A0B3B33BD7BC03915D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:06:87:6a:00:79:17:77:e5:bc:91:c7:83:
                    5b:12:d6:26:a5:a3:ca:f8:10:8d:55:c6:c1:0c:6f:
                    ad:a1:23:bc:f7:35:18:20:49:5a:fb:8e:00:a8:3e:
                    3b:61:74:f3:5e:72:8f:eb:eb:c8:d5:10:7d:24:40:
                    0f:9a:4e:52:2c:7e:b2:0b:67:76:90:b9:d1:68:fc:
                    31:36:53:c8:80:c4:2c:d4:de:f2:76:98:14:6b:b6:
                    48:59:49:a2:29:dd:3a:68:55:f9:59:34:07:8c:9e:
                    a4:20:17:45:ec:eb:77:b0:e5:a1:ca:ad:9c:2d:d4:
                    0d:5e:51:86:5d:e8:94:7c:39:15:9e:75:84:b6:a7:
                    68:da:89:e4:3b:d0:9c:ed:ef:b3:05:56:f4:65:26:
                    4f:1c:e5:03:ee:85:ae:ce:b1:ce:39:48:f5:84:2a:
                    c1:9e:a6:58:74:48:d9:c9:de:29:e8:ec:2e:24:f0:
                    22:54:51:36:e0:81:94:16:48:6b:19:3b:13:41:5d:
                    84:58:4c:af:63:02:0d:1c:89:08:da:7d:ff:4b:61:
                    c2:48:87:7e:a9:c2:53:b3:25:8b:4b:84:4e:6f:44:
                    36:5e:cb:ef:f4:08:85:0e:da:bc:ec:cb:77:17:e6:
                    13:cc:5c:7e:c5:0c:cb:d6:68:de:78:7e:ba:99:a3:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1B:A6:A1:EF:B2:D1:54:7A:94:59:A0:B3:B3:3B:D7:BC:03:91:5D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Nhumoe-y0VR6lFmgs7M717wDkV0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ad:95:1f:9a:2b:c9:8b:c7:1d:d2:c9:c1:69:ae:b4:61:10:
         f6:f1:4a:d8:8b:4e:a0:01:7f:0a:dc:7c:3e:35:c1:47:16:46:
         0e:7a:c5:89:86:69:16:ab:7a:7b:5e:92:35:e3:60:bb:13:bf:
         72:d7:05:3b:50:b2:fc:27:54:a5:cd:04:8d:9e:eb:35:58:ea:
         80:18:4e:4d:25:f6:06:99:51:6d:20:c1:31:7b:a6:60:51:74:
         cb:1e:23:1f:c9:75:08:16:0d:24:af:52:6e:e6:b2:2a:32:b1:
         02:1c:b1:ca:7e:22:58:33:57:ad:a7:c1:10:4b:be:8c:f2:c0:
         d1:12:15:30:48:bc:84:82:0f:03:fb:e0:50:13:60:7d:fe:08:
         1d:97:34:ec:0e:64:a3:0c:0e:aa:d8:7f:c3:37:7c:f4:39:f2:
         a6:6f:c9:a2:1f:aa:7e:42:f4:20:34:bf:07:10:d1:db:1d:d4:
         a0:10:e8:c3:90:8f:a4:78:29:76:b4:28:35:c6:51:b0:a3:af:
         a9:3f:d3:38:80:28:d1:70:02:58:e3:3d:68:58:e8:aa:79:2b:
         b4:55:73:de:80:06:60:fb:90:9b:48:9f:41:4f:2e:3d:ee:4b:
         f9:e1:8e:7a:c2:5c:2a:9b:b7:3c:60:b3:87:04:f0:a2:46:61:
         ef:08:85:7e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1NTBaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM2MUJBNkExRUZCMkQx
NTQ3QTk0NTlBMEIzQjMzQkQ3QkMwMzkxNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyXgaHagB5F3flvJHHg1sS1ialo8r4EI1VxsEMb62hI7z3NRgg
SVr7jgCoPjthdPNeco/r68jVEH0kQA+aTlIsfrILZ3aQudFo/DE2U8iAxCzU3vJ2
mBRrtkhZSaIp3TpoVflZNAeMnqQgF0Xs63ew5aHKrZwt1A1eUYZd6JR8ORWedYS2
p2jaieQ70Jzt77MFVvRlJk8c5QPuha7Osc45SPWEKsGeplh0SNnJ3ino7C4k8CJU
UTbggZQWSGsZOxNBXYRYTK9jAg0ciQjaff9LYcJIh36pwlOzJYtLhE5vRDZey+/0
CIUO2rzsy3cX5hPMXH7FDMvWaN54frqZo6X5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUNhumoe+y0VR6lFmgs7M717wDkV0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L05odW1vZS15MFZSNmxGbWdzN003MTd3RGtWMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYqwwDQYJKoZIhvcNAQELBQADggEBAGCtlR+aK8mLxx3SycFprrRhEPbx
StiLTqABfwrcfD41wUcWRg56xYmGaRarentekjXjYLsTv3LXBTtQsvwnVKXNBI2e
6zVY6oAYTk0l9gaZUW0gwTF7pmBRdMseIx/JdQgWDSSvUm7msioysQIcscp+Ilgz
V62nwRBLvozywNESFTBIvISCDwP74FATYH3+CB2XNOwOZKMMDqrYf8M3fPQ58qZv
yaIfqn5C9CA0vwcQ0dsd1KAQ6MOQj6R4KXa0KDXGUbCjr6k/0ziAKNFwAljjPWhY
6Kp5K7RVc96ABmD7kJtIn0FPLj3uS/nhjnrCXCqbtzxgs4cE8KJGYe8IhX4=
-----END CERTIFICATE-----