Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39002/809tzyhumGgMXk26IibNWBC1SHY.roa
File:                     809tzyhumGgMXk26IibNWBC1SHY.roa (raw, json)
Hash identifier:          peTzTSS0bFkttq2/wDPEwuwNvZ1QF8FRQv0wz4q2HxM=
Subject key identifier:   F3:4F:6D:CF:28:6E:98:68:0C:5E:4D:BA:22:26:CD:58:10:B5:48:76
Certificate issuer:       /CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Certificate serial:       14
Authority key identifier: F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/809tzyhumGgMXk26IibNWBC1SHY.roa
Signing time:             Wed 01 Nov 2023 01:32:44 +0000
ROA not before:           Wed 01 Nov 2023 01:32:44 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     0
IP address blocks:        2001:de8:8:9::/64 maxlen: 128

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 01:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
        Validity
            Not Before: Nov  1 01:32:44 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=F34F6DCF286E98680C5E4DBA2226CD5810B54876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:77:ea:3f:3f:73:d6:c3:98:1f:3a:88:83:
                    1e:2e:28:29:eb:1f:c7:d7:b8:06:84:d0:cf:1e:78:
                    46:81:d3:15:f1:90:b0:20:6f:6a:41:4e:5d:06:32:
                    b0:64:89:4b:ef:80:bd:d9:9b:e9:87:4e:c7:62:72:
                    f3:07:a7:95:a2:68:24:e0:cf:5e:40:79:8f:34:40:
                    bb:8b:22:ba:28:90:5f:4e:d9:b9:c0:01:5d:2e:49:
                    9f:d5:14:07:4a:c0:8e:f8:35:46:09:cc:b8:25:33:
                    75:15:5e:2f:3b:f5:8a:8e:95:c5:58:8c:70:5f:92:
                    3a:4d:b9:88:fd:d9:67:5e:06:8e:d1:f5:6a:52:b3:
                    59:e4:e0:f9:15:80:44:14:54:ce:9c:8b:7e:b3:11:
                    98:c8:08:da:49:d4:49:46:f2:d0:af:b8:91:50:c1:
                    d1:50:d9:99:5f:b4:ae:bc:8a:77:68:c3:42:f7:66:
                    1c:b3:3f:2e:da:b3:6d:b3:f9:dd:67:29:51:44:95:
                    7c:84:e0:76:4c:67:79:52:b5:94:44:5b:73:b3:16:
                    3c:93:51:00:14:45:2b:b8:80:a4:a1:65:3c:e7:2b:
                    8b:85:39:3d:1a:31:42:67:49:80:71:95:c3:46:03:
                    6a:6f:27:7e:d9:76:dc:2e:77:fe:2d:af:83:b2:78:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:6D:CF:28:6E:98:68:0C:5E:4D:BA:22:26:CD:58:10:B5:48:76
            X509v3 Authority Key Identifier:
                keyid:F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/809tzyhumGgMXk26IibNWBC1SHY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:de8:8:9::/64

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:de:b7:78:33:6c:36:80:01:b4:2d:78:86:6e:f5:2b:5e:
         9f:83:1c:f1:f5:ec:c0:c1:30:4f:7c:3f:ce:4a:04:1b:78:fc:
         34:ca:06:10:28:e9:db:6e:a1:52:2d:41:6a:5e:af:1f:4d:87:
         19:08:09:e1:de:5e:12:a3:77:1d:0b:c1:d6:26:88:e0:23:21:
         ea:5c:7d:34:91:7c:4e:16:86:49:96:98:c9:0d:7c:c7:00:3f:
         0d:30:63:62:35:1a:26:e4:75:65:5c:ae:19:18:c0:b6:74:76:
         60:6e:6c:d8:d5:6e:80:ae:a2:77:1d:5d:d1:a9:37:b5:62:4a:
         8e:ee:1b:fb:ec:7a:14:57:1a:49:a6:83:9e:05:94:2a:08:95:
         e6:73:d7:c5:98:4d:d6:0f:84:02:11:55:4a:19:bf:28:d3:13:
         97:ff:58:23:f1:cd:a5:ca:99:50:81:6a:19:a7:2a:f3:05:5d:
         cb:ab:f6:a4:28:e0:fa:31:0d:2b:dc:20:c3:05:d2:89:0e:c8:
         70:f3:3b:ef:88:5d:3b:17:20:a7:e6:25:3d:d1:b7:63:12:9e:
         14:c5:38:b1:c3:d1:d7:32:5f:f4:c6:41:b1:6a:d1:c5:26:a0:
         c3:59:00:73:d1:a0:6b:38:ec:97:d3:d9:92:61:19:7c:55:ad:
         44:4e:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----