Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpNriyWFV4sk6jWjGHusOPECdtM.roa
File:                     NpNriyWFV4sk6jWjGHusOPECdtM.roa (raw, json)
Hash identifier:          ptm4r/EGNzMhAyQCKfwflr5Jp2WucFZ9jFZj8xCUUco=
Subject key identifier:   36:93:6B:8B:25:85:57:8B:24:EA:35:A3:18:7B:AC:38:F1:02:76:D3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       C1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpNriyWFV4sk6jWjGHusOPECdtM.roa
Signing time:             Wed 29 Mar 2023 16:08:55 +0000
ROA not before:           Wed 29 Mar 2023 16:08:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:08:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=36936B8B2585578B24EA35A3187BAC38F10276D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:32:79:3f:83:2c:44:b5:08:ad:91:44:fa:
                    3b:46:2b:57:6d:6c:0b:f7:2e:e8:04:8b:f5:1a:5c:
                    3e:8c:4b:77:60:82:e1:12:bd:da:b2:10:e8:b5:f1:
                    d7:a3:fe:f4:d9:9e:36:4a:08:f3:2f:1c:8d:4f:80:
                    fc:46:33:e6:7e:32:40:3a:53:f9:a8:18:8f:33:1b:
                    e7:2c:e8:7c:10:a7:1a:76:ab:f6:46:9b:79:51:f7:
                    d8:67:9c:7d:69:6b:2a:66:65:13:ce:da:00:6a:8c:
                    f2:8e:1c:e4:e1:f8:62:ca:e9:7a:56:7f:f6:31:41:
                    31:48:48:23:4f:c4:d3:74:59:b3:20:c8:d9:da:08:
                    6a:be:f0:30:00:0b:6c:43:a3:d2:f4:d9:03:ad:4b:
                    a0:03:82:35:a4:30:3b:2f:8c:d6:b6:fc:cb:4c:e5:
                    d9:fc:dc:61:6c:5f:77:96:33:64:14:67:36:9d:c9:
                    97:33:f2:23:95:dc:2f:bf:43:1b:6c:42:77:1f:db:
                    65:ac:3c:a5:5e:e9:21:15:49:6e:62:cd:8f:ad:93:
                    51:69:af:90:64:7a:aa:b6:d0:7e:dd:0f:47:50:b0:
                    d1:d9:89:1a:e0:e9:a2:c6:28:f6:4e:c4:5d:b8:2b:
                    2e:95:35:79:59:7c:f3:98:94:09:45:3a:ea:cb:28:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:93:6B:8B:25:85:57:8B:24:EA:35:A3:18:7B:AC:38:F1:02:76:D3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NpNriyWFV4sk6jWjGHusOPECdtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:66:58:be:66:ba:26:af:a1:a8:77:e8:7c:60:50:2c:aa:
         e6:86:1c:2f:72:0a:e5:6d:c9:ca:09:fc:ad:ae:a4:d6:f1:0e:
         b5:16:fc:3f:62:0f:22:66:99:2e:58:47:8b:e7:45:5d:d7:68:
         0d:d9:16:f3:04:61:02:dd:71:a0:75:5e:33:22:7d:72:e1:75:
         19:fd:0e:6f:1a:00:95:7d:e3:6d:2e:ad:a9:2a:0b:8e:57:23:
         bc:ae:bc:9d:37:c9:a2:18:85:40:d0:67:17:47:be:e4:1b:73:
         ff:5c:6b:c5:2d:22:97:a4:57:87:70:23:61:14:03:6c:e0:20:
         94:01:35:3b:11:a9:51:71:1f:da:25:74:26:3b:a5:be:b9:5b:
         de:46:db:52:37:77:c4:c4:60:37:74:10:6d:72:b3:0c:c2:ba:
         9c:a5:5d:7e:df:92:ee:30:d8:2e:96:42:0d:2f:d0:4e:f4:2a:
         5c:45:e6:99:cb:82:1e:b4:ff:f0:f2:31:44:42:ba:97:e5:48:
         d6:61:0d:cc:b8:6f:08:2e:a2:88:22:90:5e:fc:3c:a8:b6:40:
         f7:2e:a6:0e:15:4f:17:98:d9:fa:2e:a8:2d:80:e4:b8:d5:10:
         72:90:1f:e9:3e:a9:47:bf:2c:e3:cd:5c:db:bc:6c:b9:19:34:
         d7:8f:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----