Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y3f4He0WYTeaauP426WjEO1ox80.roa
File:                     y3f4He0WYTeaauP426WjEO1ox80.roa (raw, json)
Hash identifier:          hfcRlWSQKDgj+e7M4IcYwC4+rMNqWN9Ks5+W+6X3nIs=
Subject key identifier:   CB:77:F8:1D:ED:16:61:37:9A:6A:E3:F8:DB:A5:A3:10:ED:68:C7:CD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       036C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y3f4He0WYTeaauP426WjEO1ox80.roa
Signing time:             Thu 01 Jun 2023 17:57:27 +0000
ROA not before:           Thu 01 Jun 2023 17:57:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.198.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CB77F81DED1661379A6AE3F8DBA5A310ED68C7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:03:0f:79:e6:41:77:81:de:a7:4c:7e:64:
                    45:3a:87:d0:a4:25:74:bf:56:17:24:64:24:d5:9c:
                    fb:ef:a8:f9:43:0e:5e:c1:d6:7b:f7:f6:a1:0c:e1:
                    fb:5e:b4:82:a4:98:b8:11:0e:dd:c8:19:b6:41:ca:
                    38:de:6b:4b:90:4a:77:e5:ab:8d:25:ea:26:f0:15:
                    80:a8:1c:38:f0:b7:8f:df:87:44:fb:67:00:eb:95:
                    7e:ac:52:73:2f:85:e8:0a:53:f2:2a:ee:90:3f:d2:
                    31:0d:24:c0:d5:cf:6d:07:93:06:ad:73:0c:47:11:
                    37:4a:eb:55:85:d2:7b:64:90:e9:c3:6b:9c:5f:8c:
                    10:c7:c6:58:b6:6b:da:47:d2:4e:02:a8:73:b2:c9:
                    42:f3:2a:a3:ec:f0:b2:e0:5f:44:f1:7a:56:6d:a5:
                    71:da:f8:09:34:40:1b:5a:4e:34:ee:8c:18:4e:1e:
                    8c:d6:95:9f:c4:7a:13:57:37:2a:a8:da:bc:84:5d:
                    a6:0c:ea:0e:00:26:4f:39:ca:23:29:a8:08:77:36:
                    ca:e3:ee:3c:af:84:ec:0a:4a:39:85:f7:80:1f:85:
                    15:c7:bc:d0:59:7d:e7:85:26:75:ae:cb:02:9b:f6:
                    8d:49:20:7b:b9:71:57:e9:57:9f:6d:85:80:60:28:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:F8:1D:ED:16:61:37:9A:6A:E3:F8:DB:A5:A3:10:ED:68:C7:CD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y3f4He0WYTeaauP426WjEO1ox80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:d5:46:3b:87:e5:69:c3:49:1f:14:96:ce:cd:6d:34:c1:66:
         bc:aa:71:77:f5:6c:de:9e:56:43:e0:8d:b9:d2:bd:3e:74:0e:
         03:7b:b0:51:b8:9f:ed:09:f6:a7:e2:4f:98:de:1e:b9:ab:8a:
         4c:5e:0f:ac:73:75:d0:48:14:c8:28:12:99:4d:ad:47:9a:87:
         99:fe:3d:3a:85:b2:76:63:a7:a3:a9:84:48:52:80:fd:20:73:
         c7:85:6a:41:5f:fc:ee:c2:f6:5a:45:5e:16:2e:00:86:dd:ac:
         9a:80:5a:3f:6b:7b:d5:1c:92:0f:b1:8e:44:35:fd:b1:62:5d:
         9a:a5:ed:2e:ab:a5:26:0b:27:85:7d:56:88:80:fe:50:93:d9:
         33:cc:60:58:44:0e:d0:37:f5:4d:97:b1:97:b5:73:cd:b8:d8:
         b8:42:fc:0d:22:ab:fe:05:5c:da:95:b2:6f:eb:60:33:78:96:
         c2:80:2d:04:ee:70:af:94:7b:43:ba:5a:42:17:77:e7:e6:e8:
         35:36:a3:93:24:47:0f:89:2f:2f:fd:a6:d8:13:f0:fe:ba:ae:
         60:93:09:9a:9c:17:96:88:c2:0c:71:10:e6:ab:13:17:a7:57:
         d2:24:6e:0a:6a:28:1e:ed:d8:62:56:d4:a4:0a:cc:58:d0:57:
         a9:32:47:02
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU3MjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKENCNzdGODFERUQxNjYx
Mzc5QTZBRTNGOERCQTVBMzEwRUQ2OEM3Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4jwMPeeZBd4Hep0x+ZEU6h9CkJXS/VhckZCTVnPvvqPlDDl7B
1nv39qEM4ftetIKkmLgRDt3IGbZByjjea0uQSnflq40l6ibwFYCoHDjwt4/fh0T7
ZwDrlX6sUnMvhegKU/Iq7pA/0jENJMDVz20HkwatcwxHETdK61WF0ntkkOnDa5xf
jBDHxli2a9pH0k4CqHOyyULzKqPs8LLgX0TxelZtpXHa+Ak0QBtaTjTujBhOHozW
lZ/EehNXNyqo2ryEXaYM6g4AJk85yiMpqAh3Nsrj7jyvhOwKSjmF94AfhRXHvNBZ
feeFJnWuywKb9o1JIHu5cVfpV59thYBgKFAZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUy3f4He0WYTeaauP426WjEO1ox80wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3kzZjRIZTBXWVRlYWF1UDQyNldqRU8xb3g4MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAG3S8YwDQYJKoZIhvcNAQELBQADggEBAMzVRjuH5WnDSR8Uls7NbTTBZryq
cXf1bN6eVkPgjbnSvT50DgN7sFG4n+0J9qfiT5jeHrmrikxeD6xzddBIFMgoEplN
rUeah5n+PTqFsnZjp6OphEhSgP0gc8eFakFf/O7C9lpFXhYuAIbdrJqAWj9re9Uc
kg+xjkQ1/bFiXZql7S6rpSYLJ4V9VoiA/lCT2TPMYFhEDtA39U2XsZe1c8242LhC
/A0iq/4FXNqVsm/rYDN4lsKALQTucK+Ue0O6WkIXd+fm6DU2o5MkRw+JLy/9ptgT
8P66rmCTCZqcF5aIwgxxEOarExenV9IkbgpqKB7t2GJW1KQKzFjQV6kyRwI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org