Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/q7R7OIcO8fZbDwVMLC2yroc_mUw.roa
File:                     q7R7OIcO8fZbDwVMLC2yroc_mUw.roa (raw, json)
Hash identifier:          t0Nxs4XCer076/xpunPFYCN4p1eBtP8rbxUdSOnvops=
Subject key identifier:   AB:B4:7B:38:87:0E:F1:F6:5B:0F:05:4C:2C:2D:B2:AE:87:3F:99:4C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03A3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q7R7OIcO8fZbDwVMLC2yroc_mUw.roa
Signing time:             Thu 01 Jun 2023 17:59:31 +0000
ROA not before:           Thu 01 Jun 2023 17:59:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.101.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:59:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ABB47B38870EF1F65B0F054C2C2DB2AE873F994C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:f7:16:02:63:7f:62:12:42:15:d6:8b:84:
                    5f:6f:ed:0e:6c:b9:a4:26:cf:ce:bc:63:74:32:5a:
                    9d:c1:12:b2:8c:c1:ce:c8:a6:81:6d:98:f6:f4:b8:
                    29:f8:38:60:23:46:d8:05:9f:22:37:0c:eb:97:1e:
                    9e:97:87:32:d8:9a:2a:f4:99:c5:40:b1:6c:11:4e:
                    b4:23:af:85:57:f7:a9:33:96:bf:73:b9:0d:b5:3e:
                    41:f4:58:ea:9e:f8:92:d3:f1:75:43:6c:4d:f0:4a:
                    df:62:e0:74:1f:2b:63:23:06:f9:6d:21:5a:ae:92:
                    67:8b:43:fa:66:78:48:68:d4:a3:ae:62:76:20:f2:
                    f1:a0:c8:73:69:08:bb:6e:ad:41:bf:a5:cf:20:a0:
                    cf:a0:75:aa:0a:11:a9:40:69:b1:a7:05:30:ff:77:
                    b3:70:e1:6a:71:af:65:70:c9:53:5c:77:bf:43:16:
                    44:82:24:6c:aa:00:2b:57:34:ee:5c:d8:8e:db:1f:
                    c9:7f:b0:18:29:3e:52:fa:7a:69:66:69:b7:f3:14:
                    06:50:be:ce:92:5a:8a:e7:e5:89:b0:75:e8:49:07:
                    1a:08:97:22:72:4e:aa:62:31:0d:f0:2d:40:09:e0:
                    0f:69:10:aa:18:8b:1e:98:f4:ec:4d:79:36:d1:27:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B4:7B:38:87:0E:F1:F6:5B:0F:05:4C:2C:2D:B2:AE:87:3F:99:4C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/q7R7OIcO8fZbDwVMLC2yroc_mUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.101.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         29:ca:e8:e5:9a:87:35:50:9a:ed:38:21:56:5d:63:8a:87:b5:
         fd:7e:c4:e6:df:8e:9d:96:8d:d3:eb:21:14:59:2e:32:68:17:
         c1:19:41:53:f1:b0:d0:07:13:f5:8c:07:50:2c:06:61:47:f3:
         0b:ce:d5:c1:29:d6:3c:f8:ba:4c:b7:42:d5:e1:f3:1f:2f:dc:
         52:3c:fd:10:2d:aa:8f:d1:dd:0a:32:48:eb:7d:18:43:f1:72:
         57:d2:7f:f5:50:3d:77:73:fc:5b:4b:26:13:f6:6d:db:cd:3f:
         06:ee:e9:aa:d3:0a:c9:9d:6e:45:63:3b:ab:e5:e1:2e:1d:db:
         76:94:33:e9:02:7d:2d:63:6e:fc:57:a3:e1:15:ba:b9:87:4f:
         26:74:70:87:86:98:3a:a6:00:ee:1d:6f:8f:f3:98:04:0f:f7:
         f8:06:74:de:2a:d2:6a:63:6f:c9:bb:ff:f5:b3:f5:c8:c4:39:
         9a:60:60:f9:77:3c:0b:46:08:85:31:df:c6:d7:4e:a9:5b:ba:
         cd:8f:cf:9b:bb:1c:1b:74:5b:67:1f:43:4f:db:b3:9a:38:c4:
         c2:53:85:66:fb:70:66:ef:cf:e3:44:6d:09:b9:ac:10:e9:1d:
         72:6f:9f:a2:f4:98:ba:ed:fe:bb:2e:7f:62:9d:ad:ff:c4:0c:
         c2:ee:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----