Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIjLOwB644eSmGhcdBfwhslamT0.roa
File:                     mIjLOwB644eSmGhcdBfwhslamT0.roa (raw, json)
Hash identifier:          7ZeEFNG7RKfRHwkd05gS6W7mrDQ5iQ5f25cY+AcDYt8=
Subject key identifier:   98:88:CB:3B:00:7A:E3:87:92:98:68:5C:74:17:F0:86:C9:5A:99:3D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       C6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIjLOwB644eSmGhcdBfwhslamT0.roa
Signing time:             Wed 29 Mar 2023 16:08:57 +0000
ROA not before:           Wed 29 Mar 2023 16:08:57 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:08:57 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9888CB3B007AE3879298685C7417F086C95A993D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:25:b0:7c:ef:31:0d:ba:1a:d9:2e:42:1c:
                    92:3b:6f:0e:39:55:fc:74:05:2c:f6:df:bd:ce:49:
                    dd:3b:86:4d:1e:c8:71:e0:9e:e6:9a:c1:78:0a:03:
                    bf:c1:1c:46:e9:cc:fc:18:eb:47:42:73:2c:b8:97:
                    46:a5:b8:96:db:4b:d1:22:a9:54:37:fc:a7:28:f8:
                    68:9a:ae:d8:93:40:54:ea:99:37:c1:2f:36:a3:51:
                    dd:ab:aa:93:dc:2c:22:4e:e1:ac:18:01:c7:e0:e1:
                    93:29:ee:e7:cb:6c:ed:08:7d:2c:0f:1a:9a:43:28:
                    9d:5f:a6:b0:4d:f2:d9:04:4b:98:5f:2c:33:aa:38:
                    08:35:f0:d7:76:30:97:92:c6:bf:6e:fc:f1:9f:25:
                    13:6c:83:c9:78:d7:28:5a:6d:4e:95:89:2d:e7:39:
                    1a:3d:ec:0d:c7:b2:77:db:a7:2d:d2:31:48:cc:a0:
                    1d:4f:1a:c1:f4:ad:95:d3:e0:5f:f7:68:7e:ce:ef:
                    d9:00:5b:79:48:b2:ad:d4:2e:b3:d8:15:9b:9c:07:
                    cf:e5:ec:f1:ed:d1:c1:9f:73:c3:6b:79:45:18:38:
                    b0:e2:29:de:97:b4:b1:d3:43:74:4a:50:c3:56:11:
                    23:ef:79:d5:be:40:11:df:0a:d0:90:b6:e1:f3:86:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:CB:3B:00:7A:E3:87:92:98:68:5C:74:17:F0:86:C9:5A:99:3D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mIjLOwB644eSmGhcdBfwhslamT0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:e9:50:d6:9c:a0:3e:8e:90:cd:7f:ae:00:b4:65:96:81:
         56:f4:87:5f:8d:52:2b:b7:eb:5d:20:68:37:d5:c2:92:45:ec:
         6c:29:6e:e4:cd:b7:ec:34:b1:50:e9:08:22:52:a7:67:53:24:
         3d:30:96:bc:a8:51:23:1a:83:59:43:69:aa:54:7f:8a:c1:a0:
         60:44:3b:35:39:08:bd:64:4e:82:f4:7b:fb:03:05:28:04:16:
         8a:ca:83:7e:2e:0c:fc:5d:cc:87:c4:94:2e:e9:3b:8d:b4:b0:
         07:37:17:e0:bf:c1:03:3b:86:06:10:32:8c:aa:f3:16:e5:f1:
         db:30:16:84:9e:17:26:00:ee:74:6d:85:a4:bf:05:0b:83:5a:
         0f:e4:c8:4d:21:de:de:ec:32:82:d4:64:78:da:4c:a9:3c:87:
         9b:b4:79:1c:10:b5:8c:bd:b7:69:08:6a:a6:ae:d6:6a:0a:f3:
         ec:e7:2c:a7:db:d9:d6:48:8f:1a:cb:c9:8a:8f:d4:ae:b0:51:
         3b:3e:2f:88:31:10:42:43:85:0d:55:97:4a:2f:2e:ef:d6:11:
         10:8f:6e:1c:95:a7:40:fc:f7:1d:02:a8:dd:a7:13:8a:28:2b:
         88:ff:8a:51:aa:d2:5e:11:8d:37:bf:63:45:04:e2:ae:c5:f8:
         4e:83:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----