Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uyEAJFnoNOcapFdJNYIijGrb9AI.roa
File:                     uyEAJFnoNOcapFdJNYIijGrb9AI.roa (raw, json)
Hash identifier:          ESx2Q40oTSTXjJL/vOHRd2b/ek3enmssgpfRs3MtaOA=
Subject key identifier:   BB:21:00:24:59:E8:34:E7:1A:A4:57:49:35:82:22:8C:6A:DB:F4:02
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       036B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uyEAJFnoNOcapFdJNYIijGrb9AI.roa
Signing time:             Thu 01 Jun 2023 17:56:42 +0000
ROA not before:           Thu 01 Jun 2023 17:56:42 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:56:42 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BB21002459E834E71AA457493582228C6ADBF402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:87:d9:54:d2:8c:a7:2d:e3:59:31:12:6a:
                    97:e5:17:ae:0f:f3:3e:0b:06:e6:c1:e2:06:a0:cf:
                    5f:f2:2f:bb:e8:99:5b:56:ec:ba:0d:4c:9a:1b:59:
                    52:98:02:33:94:18:94:80:9a:96:2a:f6:c2:e7:7b:
                    9a:26:51:21:20:64:e8:d9:57:25:8f:01:78:a2:55:
                    06:cf:36:af:44:92:ff:b3:bf:f1:a3:ce:7a:47:98:
                    2b:51:07:a6:d9:84:8b:fc:ff:6f:c8:f9:94:57:bb:
                    c2:aa:4b:90:b9:0d:02:1b:d2:91:32:f3:c1:cb:61:
                    c6:ae:25:9c:c5:53:6c:0d:f6:10:67:0b:24:8c:be:
                    3a:6e:f1:18:87:99:04:8e:1e:91:a1:3c:68:17:11:
                    07:a7:dd:ad:bf:ab:e7:58:0d:ec:ff:ce:17:56:8b:
                    cf:a4:7c:f1:c3:7b:42:42:68:f5:a4:22:2b:ec:39:
                    88:75:61:f9:53:ba:cb:07:0f:bf:52:c3:40:be:83:
                    cb:74:44:41:73:c5:19:17:c6:91:17:99:12:48:64:
                    b3:52:ad:c9:8a:ef:70:be:0f:4b:f7:83:4b:98:18:
                    13:5a:fd:d8:84:9c:82:a9:ba:f1:50:11:d6:8a:e3:
                    84:3c:86:5f:66:b5:27:5a:5b:29:dd:20:76:64:7f:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:21:00:24:59:E8:34:E7:1A:A4:57:49:35:82:22:8C:6A:DB:F4:02
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uyEAJFnoNOcapFdJNYIijGrb9AI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:84:dc:41:2f:ed:f1:e1:08:8f:40:dc:4d:9d:66:c1:d7:36:
         07:84:2f:85:6a:b3:3c:9b:7c:4b:1d:0d:00:49:5a:4b:e1:52:
         8f:76:80:a3:86:21:73:fe:d8:6e:26:6b:2e:99:b8:e3:e9:6c:
         f3:0a:7a:47:52:4f:50:b4:c1:c2:f5:4c:81:89:3e:db:8a:9f:
         b8:28:88:dc:3d:d0:b4:dd:5e:3e:b4:35:11:1b:e6:01:33:54:
         95:6e:76:c9:44:1d:f3:66:77:65:f2:82:ec:09:72:ce:dd:3f:
         ca:23:ef:2f:5e:1b:ff:b2:9a:ba:6b:15:da:49:1b:2b:ce:6e:
         62:1e:93:79:1f:83:cd:df:f4:0d:a5:f0:aa:05:fc:4f:5d:7c:
         55:f0:8d:b0:50:79:30:b8:79:79:79:a2:04:42:5a:c9:96:3d:
         dd:82:68:48:c0:0a:28:0e:e4:cd:29:d9:5c:c1:aa:b1:68:fd:
         b4:e3:9d:6a:aa:b2:e2:86:03:49:4d:49:81:98:8c:16:b2:b8:
         8a:7f:43:06:64:72:c3:b3:af:15:18:bd:df:dc:b4:38:0f:3e:
         33:2f:c9:63:6d:f1:3b:8e:e9:2a:3b:9b:95:5d:97:c6:e9:d1:
         8b:3b:4a:f3:06:4c:1a:bd:75:ab:ee:68:6f:0c:41:54:24:b9:
         87:0f:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----