Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lzR8zQL9WxLvUwsujyy51hDlNKo.roa
File:                     lzR8zQL9WxLvUwsujyy51hDlNKo.roa (raw, json)
Hash identifier:          Kg1WtjQ8C1Rc7SqZMUpVwE/5uzMxxT1MVwbOiHGLQCI=
Subject key identifier:   97:34:7C:CD:02:FD:5B:12:EF:53:0B:2E:8F:2C:B9:D6:10:E5:34:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       88
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lzR8zQL9WxLvUwsujyy51hDlNKo.roa
Signing time:             Wed 29 Mar 2023 16:04:56 +0000
ROA not before:           Wed 29 Mar 2023 16:04:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:04:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=97347CCD02FD5B12EF530B2E8F2CB9D610E534AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:d9:e9:e0:a0:e6:07:c8:3b:9d:9c:1d:a9:
                    24:99:79:59:49:ae:14:8e:fd:e0:3a:82:86:cd:40:
                    e8:37:46:e2:91:7e:d9:ff:32:f4:5c:2b:e7:be:49:
                    dc:3e:b3:b8:f4:96:b7:f2:41:94:9e:f8:37:04:86:
                    fa:40:3b:7d:de:e9:3c:dc:7c:af:de:6b:88:e4:13:
                    ad:be:8a:b0:a4:c6:39:3d:f3:6d:2d:fe:59:99:13:
                    96:26:ff:34:8e:f3:78:ae:63:3b:73:03:6d:19:1e:
                    e6:ad:61:45:df:16:f5:d9:b7:e2:27:44:94:a2:74:
                    bf:6a:36:ca:52:2a:4e:af:f6:4b:1b:e1:a3:42:78:
                    8d:e9:1f:af:32:1c:3a:11:35:d9:eb:68:24:9c:61:
                    19:51:19:f1:c5:0a:bb:12:be:c2:52:34:4d:f4:ee:
                    aa:9a:da:3d:71:66:f1:63:e2:42:c3:17:69:e9:9a:
                    b0:90:e8:64:b5:a7:a0:bf:07:14:13:ad:ad:21:4d:
                    a2:6e:bf:2b:99:89:b0:00:8b:35:5d:f7:81:1c:64:
                    f8:5a:d7:b4:f2:3b:49:ab:44:b0:f6:30:85:07:53:
                    9d:69:21:1c:4f:e2:4e:79:e1:0e:fc:16:86:64:b4:
                    ba:eb:f0:b3:4b:00:29:bf:f7:46:cd:b9:1c:c1:46:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:34:7C:CD:02:FD:5B:12:EF:53:0B:2E:8F:2C:B9:D6:10:E5:34:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lzR8zQL9WxLvUwsujyy51hDlNKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:30:d6:69:64:3c:3c:58:53:b3:9e:ce:dd:c6:39:5e:7e:21:
         a0:ae:b8:9a:49:f6:20:77:7c:b6:09:02:4c:27:61:33:c5:ad:
         18:18:60:56:8c:9e:8b:1b:c2:cc:06:20:02:2e:32:36:0e:80:
         29:65:d9:02:d0:b6:23:41:5c:0e:7b:cb:28:16:18:c8:fe:ec:
         09:69:cf:20:16:7d:4e:08:b3:91:64:90:7a:d3:77:70:df:86:
         26:b6:c1:bd:1a:a1:f4:17:7f:18:68:f2:49:27:c6:b3:8c:68:
         68:83:87:44:75:8c:87:e7:18:d6:07:06:3d:4c:28:30:a4:54:
         1d:eb:cd:d6:26:78:81:7b:bd:f6:f7:5a:84:87:ee:87:b9:8a:
         88:2c:4d:e1:35:2e:a8:a5:d4:e4:68:b7:a2:f0:66:2b:39:56:
         5a:f5:da:84:f5:8c:dd:bc:d9:09:77:e7:ac:83:2f:f9:1e:28:
         56:37:5d:bb:68:1f:2d:1f:47:b9:e5:a8:97:73:7a:12:86:40:
         02:d7:20:4c:c0:e8:75:81:1c:d4:5d:e6:8b:1f:41:16:e8:40:
         d9:56:b4:f6:7f:b7:24:00:ef:c4:b7:f9:c5:9a:87:04:24:ee:
         b3:6f:a7:c6:28:30:1c:78:69:88:fa:88:de:62:d2:23:f6:69:
         64:7e:49:80
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA0NTZaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk3MzQ3Q0NEMDJGRDVC
MTJFRjUzMEIyRThGMkNCOUQ2MTBFNTM0QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsJtnp4KDmB8g7nZwdqSSZeVlJrhSO/eA6gobNQOg3RuKRftn/
MvRcK+e+Sdw+s7j0lrfyQZSe+DcEhvpAO33e6TzcfK/ea4jkE62+irCkxjk9820t
/lmZE5Ym/zSO83iuYztzA20ZHuatYUXfFvXZt+InRJSidL9qNspSKk6v9ksb4aNC
eI3pH68yHDoRNdnraCScYRlRGfHFCrsSvsJSNE307qqa2j1xZvFj4kLDF2npmrCQ
6GS1p6C/BxQTra0hTaJuvyuZibAAizVd94EcZPha17TyO0mrRLD2MIUHU51pIRxP
4k554Q78FoZktLrr8LNLACm/90bNuRzBRn/xAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUlzR8zQL9WxLvUwsujyy51hDlNKowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2x6Ujh6UUw5V3hMdlV3c3VqeXk1MWhEbE5Lby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxYtgwDQYJKoZIhvcNAQELBQADggEBAKUw1mlkPDxYU7Oezt3GOV5+IaCu
uJpJ9iB3fLYJAkwnYTPFrRgYYFaMnosbwswGIAIuMjYOgCll2QLQtiNBXA57yygW
GMj+7AlpzyAWfU4Is5FkkHrTd3Dfhia2wb0aofQXfxho8kknxrOMaGiDh0R1jIfn
GNYHBj1MKDCkVB3rzdYmeIF7vfb3WoSH7oe5iogsTeE1Lqil1ORot6LwZis5Vlr1
2oT1jN282Ql356yDL/keKFY3XbtoHy0fR7nlqJdzehKGQALXIEzA6HWBHNRd5osf
QRboQNlWtPZ/tyQA78S3+cWahwQk7rNvp8YoMBx4aYj6iN5i0iP2aWR+SYA=
-----END CERTIFICATE-----