Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa
File:                     UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa (raw, json)
Hash identifier:          wiTZL2MBD0UWYPhZ8moBcd3HAiZacEhCvLhxc69WEqo=
Subject key identifier:   52:60:8B:8E:CB:8E:16:5E:24:F2:E3:D7:0D:10:A9:5F:CB:86:94:03
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa
Signing time:             Wed 29 Mar 2023 16:08:57 +0000
ROA not before:           Wed 29 Mar 2023 16:08:57 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:08:57 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=52608B8ECB8E165E24F2E3D70D10A95FCB869403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:67:80:c6:44:e7:a3:00:e1:7b:0c:bc:fb:
                    94:2c:9e:8a:7d:b9:98:54:cf:27:ad:08:27:20:ff:
                    60:83:2b:12:d9:83:fb:0e:d6:8c:d0:e9:b0:40:c5:
                    3f:1d:81:c1:2e:80:51:f1:01:b8:2f:c0:7a:1f:e8:
                    f2:bc:4c:df:64:71:6c:30:84:cd:85:db:93:bb:d0:
                    97:d2:de:62:10:1b:1e:5f:c1:f1:50:79:3f:fe:70:
                    a5:fa:11:ff:64:4b:2e:aa:2e:d6:96:41:b5:3a:42:
                    ea:0a:c5:16:cd:ab:34:92:67:76:cc:e1:bb:09:9a:
                    71:58:21:82:3f:a8:9c:04:8c:19:b1:7e:63:92:21:
                    18:4a:86:00:e3:1f:10:3c:79:9c:f6:75:8c:98:57:
                    7c:ee:af:31:b5:16:8a:2a:79:63:63:83:ca:8d:84:
                    65:b8:f8:65:65:02:ee:cd:6b:6b:d2:83:db:c8:4e:
                    01:b1:6d:b7:b8:21:a4:05:ca:29:10:88:83:fe:61:
                    a8:55:98:97:45:05:c5:8a:e0:99:d1:4f:4b:f3:51:
                    2a:47:82:3e:3a:99:65:3c:27:bf:b5:c2:d5:97:b3:
                    f6:d2:df:c3:44:a4:c8:67:8c:52:54:16:de:6e:8c:
                    db:03:0b:7e:4d:ed:e3:88:c6:8b:ea:33:57:3b:8a:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:60:8B:8E:CB:8E:16:5E:24:F2:E3:D7:0D:10:A9:5F:CB:86:94:03
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UmCLjsuOFl4k8uPXDRCpX8uGlAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:64:d8:24:12:0c:b5:10:74:ea:31:c5:35:cc:ae:5a:4b:0b:
         b7:b6:27:77:dd:bb:e4:2e:e4:15:86:69:87:34:56:29:9c:44:
         f8:39:e3:90:fd:96:30:f0:68:9a:bb:7d:44:47:67:bb:25:18:
         3b:a3:d8:b5:f6:8e:c7:0a:04:d7:96:0b:c7:18:0e:2c:ac:88:
         a5:92:a4:ec:27:9a:42:02:c0:de:33:3a:51:fa:70:a0:4d:00:
         8a:28:79:d1:72:31:90:da:d7:01:12:3c:a6:97:62:49:e3:7d:
         a1:3e:93:9c:ae:74:46:c2:d1:17:45:cd:11:16:bf:d6:7c:fd:
         3f:c5:24:23:15:76:be:43:72:30:a6:bc:78:45:de:76:c2:43:
         5d:9a:72:38:5d:76:59:3b:d2:2f:76:0f:dd:00:f3:39:9d:82:
         ac:15:81:f4:db:7c:37:07:af:93:50:ba:0f:d5:96:b3:86:8a:
         00:32:52:5e:8d:a2:80:b4:95:a7:6d:2d:27:96:87:fe:84:67:
         d6:3d:9d:83:1e:29:6b:87:58:20:4a:f1:4c:26:f7:98:54:e3:
         e7:3f:4d:64:ac:92:e7:a1:58:d3:a7:5a:30:1e:b0:dc:73:fe:
         ed:94:f5:79:64:dc:e5:7d:65:61:fb:a1:97:b3:bd:3b:db:ec:
         07:76:8a:e5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA4NTdaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDUyNjA4QjhFQ0I4RTE2
NUUyNEYyRTNENzBEMTBBOTVGQ0I4Njk0MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvkGeAxkTnowDhewy8+5Qsnop9uZhUzyetCCcg/2CDKxLZg/sO
1ozQ6bBAxT8dgcEugFHxAbgvwHof6PK8TN9kcWwwhM2F25O70JfS3mIQGx5fwfFQ
eT/+cKX6Ef9kSy6qLtaWQbU6QuoKxRbNqzSSZ3bM4bsJmnFYIYI/qJwEjBmxfmOS
IRhKhgDjHxA8eZz2dYyYV3zurzG1FooqeWNjg8qNhGW4+GVlAu7Na2vSg9vITgGx
bbe4IaQFyikQiIP+YahVmJdFBcWK4JnRT0vzUSpHgj46mWU8J7+1wtWXs/bS38NE
pMhnjFJUFt5ujNsDC35N7eOIxovqM1c7ivy5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUUmCLjsuOFl4k8uPXDRCpX8uGlAMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1VtQ0xqc3VPRmw0azh1UFhEUkNwWDh1R2xBTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYowwDQYJKoZIhvcNAQELBQADggEBABlk2CQSDLUQdOoxxTXMrlpLC7e2
J3fdu+Qu5BWGaYc0VimcRPg545D9ljDwaJq7fURHZ7slGDuj2LX2jscKBNeWC8cY
DiysiKWSpOwnmkICwN4zOlH6cKBNAIooedFyMZDa1wESPKaXYknjfaE+k5yudEbC
0RdFzREWv9Z8/T/FJCMVdr5DcjCmvHhF3nbCQ12acjhddlk70i92D90A8zmdgqwV
gfTbfDcHr5NQug/VlrOGigAyUl6NooC0ladtLSeWh/6EZ9Y9nYMeKWuHWCBK8Uwm
95hU4+c/TWSskuehWNOnWjAesNxz/u2U9Xlk3OV9ZWH7oZezvTvb7Ad2iuU=
-----END CERTIFICATE-----