Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yW1sifJam0eE3d_p7sJ0aep96MI.roa
File:                     yW1sifJam0eE3d_p7sJ0aep96MI.roa (raw, json)
Hash identifier:          eoGN9dPdE0c1NkWw2pfrIxWIWN0ozRweGH3aG/kWy1Q=
Subject key identifier:   C9:6D:6C:89:F2:5A:9B:47:84:DD:DF:E9:EE:C2:74:69:EA:7D:E8:C2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       A2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yW1sifJam0eE3d_p7sJ0aep96MI.roa
Signing time:             Wed 29 Mar 2023 16:05:46 +0000
ROA not before:           Wed 29 Mar 2023 16:05:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C96D6C89F25A9B4784DDDFE9EEC27469EA7DE8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:71:5c:2e:d9:cd:46:ac:fb:fb:28:ee:7f:
                    21:89:63:c9:38:0f:dd:61:94:41:cc:8d:6a:d4:66:
                    88:2a:e2:04:1c:77:f3:32:81:53:0f:84:ec:d4:af:
                    b7:fd:29:31:1e:0d:25:6d:03:ac:ee:29:7a:eb:b6:
                    f3:5b:52:6e:47:bc:0a:89:22:ee:9c:d2:c3:72:03:
                    c9:42:91:d4:58:56:ef:b4:f7:2e:a5:41:08:d1:66:
                    01:94:f7:4d:85:27:9e:e7:b7:f6:7e:22:16:01:fb:
                    35:80:db:43:69:03:76:3b:69:e2:90:1a:95:c2:a9:
                    18:01:bb:18:65:92:11:bb:46:71:4b:9e:b5:d2:aa:
                    5e:f0:cf:15:5c:b8:17:5b:17:3c:90:e8:30:4a:81:
                    31:aa:ca:d5:b6:d5:26:43:8c:ad:40:e2:13:8e:53:
                    cd:d7:d7:19:07:23:0b:6f:e7:c3:43:66:62:7c:04:
                    7c:80:6c:25:e6:c4:22:06:02:88:51:de:18:93:35:
                    41:a8:a2:77:00:24:96:a8:4f:c6:3a:57:90:61:f1:
                    d4:17:9f:c4:5f:62:90:0f:c9:79:6d:cc:4b:41:15:
                    be:ac:c8:7f:28:d1:70:71:2c:ea:49:04:fb:e4:8a:
                    ac:c8:a5:5e:95:2c:cb:3f:40:07:72:e8:f9:73:62:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6D:6C:89:F2:5A:9B:47:84:DD:DF:E9:EE:C2:74:69:EA:7D:E8:C2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yW1sifJam0eE3d_p7sJ0aep96MI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:38:71:2c:5e:df:61:02:93:3b:4e:8b:68:be:6c:68:e9:ac:
         aa:16:1f:be:49:e6:3c:ae:fc:6a:52:13:d4:1b:bc:fe:4b:b2:
         a7:8b:17:15:5d:b5:88:45:04:f3:21:e3:27:d5:b6:d0:f8:97:
         52:2c:5d:d0:77:d9:a9:2e:c7:1c:44:cb:48:d3:e6:cb:90:99:
         0c:33:cb:07:cf:fa:2d:da:c0:6a:1d:b4:2a:23:7b:7d:6d:eb:
         97:a7:75:5c:7b:52:08:a0:35:c1:99:29:5a:73:cb:53:96:16:
         75:70:76:0b:24:40:96:f4:0c:85:57:3a:d0:cc:da:90:0b:a7:
         ed:7c:6f:0e:46:92:07:65:bb:d8:73:6d:af:82:be:c0:a5:8c:
         9e:7d:c0:37:ab:f2:4f:49:27:68:d5:f2:cb:c2:57:b3:cf:c8:
         6d:7b:26:c1:d3:34:c1:f5:0f:dd:ef:cc:ea:c6:9d:dc:38:c0:
         28:40:a3:d0:5b:0c:b8:65:51:b3:48:e1:00:17:b0:c8:89:04:
         62:5b:5c:a3:02:92:da:ea:f9:5a:57:84:15:46:61:e7:79:80:
         7e:80:05:57:db:d3:f2:9b:99:88:a7:e3:45:5a:bf:3c:4a:7d:
         20:65:30:95:d0:2d:69:a0:e5:8b:5a:7c:3e:9d:42:e8:8a:32:
         97:e0:83:18
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1NDZaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM5NkQ2Qzg5RjI1QTlC
NDc4NEREREZFOUVFQzI3NDY5RUE3REU4QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtTXFcLtnNRqz7+yjufyGJY8k4D91hlEHMjWrUZogq4gQcd/My
gVMPhOzUr7f9KTEeDSVtA6zuKXrrtvNbUm5HvAqJIu6c0sNyA8lCkdRYVu+09y6l
QQjRZgGU902FJ57nt/Z+IhYB+zWA20NpA3Y7aeKQGpXCqRgBuxhlkhG7RnFLnrXS
ql7wzxVcuBdbFzyQ6DBKgTGqytW21SZDjK1A4hOOU83X1xkHIwtv58NDZmJ8BHyA
bCXmxCIGAohR3hiTNUGooncAJJaoT8Y6V5Bh8dQXn8RfYpAPyXltzEtBFb6syH8o
0XBxLOpJBPvkiqzIpV6VLMs/QAdy6PlzYvwbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyW1sifJam0eE3d/p7sJ0aep96MIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3lXMXNpZkphbTBlRTNkX3A3c0owYWVwOTZNSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYsQwDQYJKoZIhvcNAQELBQADggEBAEE4cSxe32ECkztOi2i+bGjprKoW
H75J5jyu/GpSE9QbvP5LsqeLFxVdtYhFBPMh4yfVttD4l1IsXdB32akuxxxEy0jT
5suQmQwzywfP+i3awGodtCoje31t65endVx7UgigNcGZKVpzy1OWFnVwdgskQJb0
DIVXOtDM2pALp+18bw5Gkgdlu9hzba+CvsCljJ59wDer8k9JJ2jV8svCV7PPyG17
JsHTNMH1D93vzOrGndw4wChAo9BbDLhlUbNI4QAXsMiJBGJbXKMCktrq+VpXhBVG
Yed5gH6ABVfb0/KbmYin40VavzxKfSBlMJXQLWmg5YtafD6dQuiKMpfggxg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org