Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/aOL91KDMY_ANSGS6zR27FC3dHDg.roa
File:                     aOL91KDMY_ANSGS6zR27FC3dHDg.roa (raw, json)
Hash identifier:          tO4CcN8SWrLFNxEsoW7J4KhxsUgoZunOldM61zQM0/0=
Subject key identifier:   68:E2:FD:D4:A0:CC:63:F0:0D:48:64:BA:CD:1D:BB:14:2D:DD:1C:38
Certificate issuer:       /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Certificate serial:       05
Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/aOL91KDMY_ANSGS6zR27FC3dHDg.roa
Signing time:             Thu 21 Jul 2022 04:20:40 +0000
ROA not before:           Thu 21 Jul 2022 04:20:40 +0000
ROA not after:            Fri 21 Jul 2023 02:05:48 +0000
asID:                     23808
IP address blocks:        220.152.96.0/20 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
        Validity
            Not Before: Jul 21 04:20:40 2022 GMT
            Not After : Jul 21 02:05:48 2023 GMT
        Subject: CN=68E2FDD4A0CC63F00D4864BACD1DBB142DDD1C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:b9:ca:3c:3c:38:73:89:8c:55:59:65:c2:
                    52:78:05:80:45:82:73:ec:21:c3:75:3c:e6:58:17:
                    64:ea:ed:b5:73:f9:c7:52:8f:b9:de:c6:66:ac:d0:
                    e3:13:c6:8e:6e:19:b8:42:13:97:db:ca:56:97:c9:
                    77:d8:c4:43:29:24:4f:bb:a4:37:aa:26:fa:92:ed:
                    39:47:d3:ef:9a:7a:30:54:2f:1f:d6:01:c3:fc:9d:
                    ff:30:54:ea:20:dc:c6:d2:75:1c:c6:6a:ce:24:1d:
                    c9:d1:40:05:7c:5c:3c:7b:64:38:47:e4:74:50:e5:
                    72:85:88:2a:89:a4:6a:14:49:3d:fd:59:78:e1:41:
                    83:75:58:be:49:c0:95:a2:a5:4a:c4:57:6c:b3:62:
                    6e:3b:45:26:85:d0:55:46:d1:42:df:4a:b4:51:59:
                    09:3f:e3:28:c1:2a:bc:e1:ce:e0:76:f3:56:31:5a:
                    30:1e:c9:48:b1:d3:c2:64:eb:20:64:c0:21:c1:6f:
                    59:96:1b:db:80:0e:71:c7:cb:28:54:6c:a8:92:09:
                    12:41:00:96:20:af:96:8b:46:f7:d8:67:e0:ae:5c:
                    de:47:05:05:8f:c9:79:22:38:77:d9:ee:ea:aa:09:
                    fa:5b:e4:0a:7b:de:eb:5d:10:bf:74:fc:aa:32:42:
                    4d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E2:FD:D4:A0:CC:63:F0:0D:48:64:BA:CD:1D:BB:14:2D:DD:1C:38
            X509v3 Authority Key Identifier:
                keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/aOL91KDMY_ANSGS6zR27FC3dHDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.152.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:e0:b5:28:a7:f1:9b:c0:df:45:d6:ca:33:25:67:2d:0b:da:
         9d:d9:5d:13:f9:54:ac:3d:8c:e2:75:d6:a8:97:6b:76:86:a3:
         8a:be:e4:7a:fb:bd:04:4d:6f:56:88:76:7f:65:4a:f4:2c:84:
         e5:94:b5:f2:14:73:07:a8:11:f9:08:d1:33:0d:75:69:2e:4a:
         e1:e0:bc:eb:65:a2:c4:13:09:5c:f3:5b:46:e6:f3:c5:6b:54:
         26:8b:2b:69:e0:ee:1c:8e:19:2b:09:59:7f:64:36:94:4f:2a:
         c2:84:9a:81:9e:6d:17:c0:ee:40:2b:d9:76:43:3e:91:42:82:
         67:06:6a:2e:29:23:55:e2:64:06:8a:e4:1b:6a:7b:51:44:2e:
         4b:53:18:b3:42:68:d9:99:09:3c:1a:f2:16:7a:78:41:cf:a5:
         d2:e1:7b:3d:12:8a:f2:84:74:30:d4:f3:73:5c:3e:b5:95:dc:
         97:cc:19:cf:58:1f:1b:9f:1f:2d:67:be:37:b1:15:9b:77:75:
         f1:28:7c:d4:73:f9:bd:dc:95:1c:13:6f:fa:56:75:3f:54:9d:
         bb:49:e6:73:4a:d2:5a:a3:a2:4a:98:f2:6d:fa:10:08:0a:7a:
         e7:d7:75:7b:b7:74:96:32:5b:66:ce:c5:d0:fa:df:83:27:a9:
         25:39:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----