Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mdKcHSDhB7pZAPvcGJzfpMVlNms.roa
File:                     mdKcHSDhB7pZAPvcGJzfpMVlNms.roa (raw, json)
Hash identifier:          hQHKb80r4bH5EyTlzX97jQ3sOB/Z2qAEt+0mr0QyDow=
Subject key identifier:   99:D2:9C:1D:20:E1:07:BA:59:00:FB:DC:18:9C:DF:A4:C5:65:36:6B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       AC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mdKcHSDhB7pZAPvcGJzfpMVlNms.roa
Signing time:             Wed 29 Mar 2023 16:05:51 +0000
ROA not before:           Wed 29 Mar 2023 16:05:51 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:51 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=99D29C1D20E107BA5900FBDC189CDFA4C565366B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:95:c4:02:a3:05:3f:79:d3:18:36:f5:2d:35:
                    e1:ff:c8:18:0e:bd:1a:83:b4:4b:bd:e6:74:69:af:
                    57:1c:46:a9:00:fb:4f:d4:48:8e:fc:1c:7f:35:37:
                    94:77:fe:21:9e:19:09:84:35:9f:15:e8:9e:a5:21:
                    1d:b0:32:2f:44:fc:79:64:15:63:28:60:a8:84:e7:
                    ee:75:07:bf:24:c7:83:c6:50:86:60:73:4c:2e:3c:
                    b4:f8:50:ce:14:12:0b:f9:00:7a:f2:84:e0:2b:e9:
                    ca:46:a8:4d:2e:7b:3b:f2:b2:b9:48:62:9c:8c:7d:
                    1c:16:ac:2f:7d:fe:08:a2:8a:ac:92:fe:f9:22:82:
                    3a:98:f1:c3:b0:7d:46:fb:ed:6a:7f:99:f5:75:fb:
                    79:4b:a2:ef:5f:17:ee:e7:93:13:b0:e8:90:7f:81:
                    4c:88:f4:57:56:59:ad:fd:6e:cb:4b:5d:89:8e:6c:
                    a8:38:b6:15:ac:ea:c2:06:e1:cc:58:aa:0d:9d:da:
                    2e:01:4d:86:6c:b0:2b:f8:a4:96:3f:75:26:1f:ea:
                    32:55:87:53:fd:f4:d3:78:38:e3:ff:25:c7:66:dc:
                    23:fa:21:8e:73:54:74:63:0c:ce:67:b5:f2:a8:04:
                    12:fa:81:ee:2e:51:90:d8:69:83:7a:63:26:61:fb:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:9C:1D:20:E1:07:BA:59:00:FB:DC:18:9C:DF:A4:C5:65:36:6B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mdKcHSDhB7pZAPvcGJzfpMVlNms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e5:4f:09:ed:12:f0:c7:2c:33:7e:c2:9a:d1:6d:ae:31:c7:
         1f:90:92:95:3b:f6:39:4c:b4:ac:21:b5:70:34:e3:ec:22:3b:
         61:9b:4d:2e:1a:9e:9e:23:96:04:84:cd:a3:7e:5e:c0:ea:09:
         43:a3:e9:ec:45:16:d1:84:02:02:78:ac:e6:39:f0:56:1f:9d:
         4d:2b:fd:09:54:ab:c2:a8:a3:fd:28:e8:b0:ec:ab:a6:76:3f:
         3e:34:d5:53:25:01:17:15:62:5c:f9:c5:35:ab:3a:1e:24:51:
         a3:2e:44:24:6a:1d:38:c1:45:fc:27:3b:d2:d9:f0:33:36:62:
         55:bc:cd:43:2b:2e:ba:fd:03:3d:f5:87:38:14:06:5f:72:72:
         ab:c8:b3:78:b4:af:d7:d2:ec:03:e9:c1:3c:10:2d:8f:69:fd:
         90:67:44:0d:5e:7f:ae:d6:04:0b:e3:d0:71:71:33:79:85:fa:
         b7:c9:61:cd:75:f0:41:5b:6a:b5:4e:28:11:f1:45:80:95:eb:
         8c:ad:58:c0:73:aa:17:39:7a:e8:8e:2d:18:59:6a:8b:fc:62:
         f8:8b:8c:36:9c:b6:55:89:a1:b5:0f:94:ea:6f:73:07:9b:0f:
         61:88:bb:0e:58:c0:f3:5f:a8:c5:8a:73:59:47:2d:6d:a3:24:
         0a:48:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----