Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SuO8brZTchspReyeB3ybS0DbeWc.roa
File:                     SuO8brZTchspReyeB3ybS0DbeWc.roa (raw, json)
Hash identifier:          GlPr+AonxRrSROw4uQ7i9NWWGwMxHX/C0a5PutNvwo4=
Subject key identifier:   4A:E3:BC:6E:B6:53:72:1B:29:45:EC:9E:07:7C:9B:4B:40:DB:79:67
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       B1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SuO8brZTchspReyeB3ybS0DbeWc.roa
Signing time:             Wed 29 Mar 2023 16:05:53 +0000
ROA not before:           Wed 29 Mar 2023 16:05:53 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:53 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4AE3BC6EB653721B2945EC9E077C9B4B40DB7967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:6b:46:51:61:0b:db:c8:22:7a:54:78:dd:
                    99:2b:fc:3a:59:6c:7c:2d:33:d7:27:53:30:bd:3f:
                    a1:b6:15:db:3b:96:5a:43:86:5b:c7:0f:25:16:f0:
                    4c:e1:06:b9:ed:2a:3c:fe:32:a9:81:36:5f:7d:c7:
                    17:aa:02:14:0a:77:b0:2b:de:dc:f1:e0:ed:ae:fd:
                    b1:cf:4f:46:7c:6f:32:69:e1:ef:ce:d9:64:3e:68:
                    f4:a0:a4:7d:d5:8d:af:8b:19:ff:1e:04:88:ab:24:
                    18:2f:7e:15:e6:54:20:04:10:b1:a0:5b:08:51:66:
                    76:74:5d:de:7e:71:fc:fa:b3:06:63:a0:0c:a7:ee:
                    2b:fa:26:3e:b5:f0:c3:08:41:5c:bd:17:12:a2:e9:
                    49:2c:a9:68:81:cc:9c:9f:9c:72:5a:63:74:84:07:
                    21:d8:8a:0d:76:f9:7a:6c:84:65:3d:3d:6b:f1:1c:
                    27:20:c1:77:65:b5:61:3a:25:b5:ef:41:42:b6:48:
                    0c:5b:1b:55:7c:1e:18:ab:41:74:a8:b0:1c:58:ed:
                    ee:95:d0:72:a6:d4:b3:ef:ac:2a:e0:6d:24:a4:05:
                    92:72:15:69:e9:04:e0:34:e9:08:07:df:11:0c:18:
                    96:88:a7:3b:e3:7e:cc:86:c6:0c:76:f3:1b:37:af:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E3:BC:6E:B6:53:72:1B:29:45:EC:9E:07:7C:9B:4B:40:DB:79:67
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SuO8brZTchspReyeB3ybS0DbeWc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:42:ee:ca:e2:e5:5d:02:4a:f6:12:72:4f:2f:42:75:10:5a:
         58:e7:be:93:d7:d0:19:42:b8:d7:6c:01:76:64:0f:a9:fd:30:
         bc:89:c4:8f:e9:ee:84:61:fd:81:18:46:08:bf:0d:bc:0d:fc:
         78:1d:d3:9a:77:01:a3:1f:69:69:24:a0:47:e0:a7:e5:75:ff:
         25:7a:ee:b9:79:9a:ff:1f:31:d5:13:1d:05:64:65:4e:a4:94:
         81:72:5a:84:bd:92:11:b3:9d:f1:76:e4:c4:a0:dc:ef:99:df:
         63:f3:35:22:29:01:b2:e1:1d:c2:ea:e9:34:a1:bb:7e:37:c5:
         2c:c4:2d:94:cf:67:8f:e7:92:11:ae:be:4a:a7:fb:87:79:88:
         34:5c:61:27:69:7d:3d:54:f8:7f:6c:bb:b9:4e:71:38:09:5f:
         d8:0f:a2:18:e3:d9:5f:88:7d:ad:5d:8e:eb:6a:5f:b8:b9:0b:
         8f:02:3e:ec:c1:d7:9e:9b:5e:f5:c4:f9:2d:6e:c2:a5:cc:56:
         d3:c6:60:db:23:37:ff:60:5c:1f:0d:aa:08:85:04:02:30:45:
         2b:d4:a2:56:14:9a:aa:00:2e:fa:c4:28:09:eb:5b:e2:43:00:
         76:04:65:73:61:3e:82:05:2b:e5:e7:6b:f0:21:fc:d0:a9:86:
         d1:e7:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----