Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/QbNI0r9PavDCK2H0Pf2728KBsNo.roa
File:                     QbNI0r9PavDCK2H0Pf2728KBsNo.roa (raw, json)
Hash identifier:          g315Wve6s3P9c1NlGvOPgXySsk+RxRUfPkOX5mqfqG8=
Subject key identifier:   41:B3:48:D2:BF:4F:6A:F0:C2:2B:61:F4:3D:FD:BB:DB:C2:81:B0:DA
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       09
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/QbNI0r9PavDCK2H0Pf2728KBsNo.roa
Signing time:             Thu 20 Oct 2022 06:22:21 +0000
ROA not before:           Thu 20 Oct 2022 06:22:21 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        219.121.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:22:21 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=41B348D2BF4F6AF0C22B61F43DFDBBDBC281B0DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:ae:68:50:0a:cf:97:51:ee:e6:e0:13:e6:
                    1c:f8:22:7a:ac:1c:24:3e:d3:d2:83:9d:ee:2d:32:
                    9d:fb:3e:a5:83:58:ac:7f:0e:15:a8:f7:2f:25:dd:
                    c1:dd:09:01:ca:87:67:f6:82:92:39:72:82:82:25:
                    bc:c0:7b:0b:07:4b:4b:87:a1:95:c8:84:58:6a:d7:
                    05:78:09:ba:c9:c2:9c:5a:76:7e:ba:fc:f7:b4:c7:
                    33:94:e0:6e:27:93:02:13:ed:f1:d9:33:4b:b4:71:
                    7f:13:be:80:b4:ae:c8:fe:87:44:45:55:61:c5:c5:
                    52:79:49:58:85:c0:75:a9:83:48:62:63:e9:2a:ff:
                    2b:16:65:73:64:32:16:d8:08:68:8a:46:df:d9:0b:
                    72:ff:a7:8c:3d:98:84:33:42:76:ad:a0:4d:5f:2b:
                    f8:63:81:f4:f3:84:3b:57:ef:e8:63:21:61:2f:64:
                    ed:67:23:f7:95:1f:dd:05:5a:7d:4c:f1:e0:93:64:
                    60:2d:9d:13:a9:3c:bd:82:1e:e7:92:06:3e:91:2e:
                    d9:d2:de:6e:67:2c:82:68:b6:9f:48:7b:46:5c:5d:
                    a6:f5:d5:d9:0b:52:e4:45:c6:c4:5a:cf:f5:3e:73:
                    b0:6f:c8:d8:20:8d:0f:23:71:e9:d7:32:69:9d:37:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B3:48:D2:BF:4F:6A:F0:C2:2B:61:F4:3D:FD:BB:DB:C2:81:B0:DA
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/QbNI0r9PavDCK2H0Pf2728KBsNo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:f1:86:11:b1:53:f7:19:2b:d4:25:f8:8a:32:13:9a:86:
         8e:82:5d:d1:9a:7d:44:d1:72:22:51:48:df:6f:12:27:a5:22:
         6b:7d:74:d0:b3:94:1b:7c:68:ca:b6:51:46:f7:ac:e5:fc:9d:
         5e:44:ec:b8:ab:df:ab:51:05:0b:f8:62:e3:43:83:b0:46:a0:
         91:37:14:d7:13:e0:a2:a8:c1:09:d7:dc:0f:39:bc:b7:18:c7:
         a5:75:4e:98:c1:20:0f:56:47:6c:2f:98:5c:1b:f9:c0:e3:d3:
         38:d9:36:da:85:43:12:ed:a4:f2:dc:a7:f1:e4:c0:3c:25:33:
         13:d3:68:ba:cc:c1:16:f7:50:99:df:ad:66:24:ab:40:32:9e:
         18:4e:ab:a0:14:ad:41:8f:37:31:e1:59:0d:47:0a:b3:77:57:
         a2:72:ca:d2:d6:b1:ca:18:b8:54:7d:08:3e:f2:40:ef:83:6c:
         09:bb:f7:f0:3c:8d:6e:30:49:72:bf:e4:ec:e5:fe:ea:4f:ac:
         1b:20:92:1b:5d:d0:7c:56:f9:a6:9b:c3:36:c2:5b:10:e2:ab:
         ee:33:13:a4:ed:a9:46:93:bc:6b:a6:b8:35:f4:e9:03:04:24:
         04:72:0b:fe:f6:b2:db:f4:19:20:c1:cd:36:83:a3:52:e3:a6:
         cf:4e:8b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----