Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa
File:                     0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa (raw, json)
Hash identifier:          WwQ7asjHbdkaG7C0hkbesELSctBwq+fweV4wTz46Oug=
Subject key identifier:   D2:70:FC:0A:4F:B5:A8:64:16:FF:27:85:3C:FE:A2:A0:9E:46:6D:B1
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       021A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa
Signing time:             Mon 20 Feb 2023 07:59:20 +0000
ROA not before:           Mon 20 Feb 2023 07:59:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.218/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D270FC0A4FB5A86416FF27853CFEA2A09E466DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:f3:69:cd:52:df:c9:de:cf:e0:ef:d4:6c:
                    0e:39:49:8e:99:d4:f0:e5:02:40:73:50:f0:96:f0:
                    08:f9:86:9e:de:43:ee:ea:8c:25:f0:67:fd:cc:ab:
                    53:be:8b:87:d8:d0:07:1d:b8:e9:31:6a:db:9a:ac:
                    8f:60:9a:f5:e1:e6:b2:38:03:25:23:ea:01:fa:54:
                    a6:57:f7:5b:f9:2d:b7:ad:37:50:55:99:83:a0:0a:
                    05:40:36:52:20:51:a5:bd:28:eb:4e:fc:e4:53:4b:
                    91:34:cf:03:f3:56:18:ce:40:6b:7f:fb:12:68:66:
                    af:da:2d:d4:1b:4b:ce:4c:65:db:dd:f2:5f:90:fd:
                    f9:dd:5f:3e:a0:21:e3:1e:ba:f8:b2:b8:81:bf:1d:
                    57:4e:68:3f:42:ae:87:51:12:3d:0f:9e:b6:cf:b4:
                    be:b1:6d:0b:41:c3:b5:70:fb:e9:59:50:a3:12:27:
                    ce:c9:2a:44:55:79:47:38:48:74:02:6d:e7:bb:4a:
                    74:a4:3e:4e:ca:6a:30:c5:67:a8:d1:8a:6e:46:06:
                    a9:51:47:3d:d5:b7:23:71:f3:64:d3:55:bc:c9:bf:
                    4c:02:81:eb:d6:b0:f8:39:05:35:fa:b2:76:29:79:
                    f5:b2:3a:e7:2c:32:65:a6:99:84:64:ec:74:8f:9c:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:70:FC:0A:4F:B5:A8:64:16:FF:27:85:3C:FE:A2:A0:9E:46:6D:B1
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0nD8Ck-1qGQW_yeFPP6ioJ5GbbE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.218/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:ea:b2:c4:44:94:a9:d5:91:83:d6:90:72:31:00:9b:f1:
         d8:64:38:38:c3:c8:70:95:8c:a2:67:f7:44:08:88:ad:71:ba:
         79:a2:10:ce:ff:66:74:b3:9c:78:59:f6:49:0b:7c:14:8c:f2:
         4c:09:f5:59:de:26:77:aa:83:34:52:b5:1f:e2:a1:76:f2:d1:
         74:24:96:30:99:45:8c:4a:e6:25:9b:af:94:e3:30:0b:f3:bd:
         5a:00:2c:9e:22:1d:22:a0:5c:7c:d9:95:4c:98:ee:18:de:a4:
         6b:bd:6f:d1:e0:af:0c:26:9b:4d:bf:05:9c:41:fc:3a:f6:e3:
         ba:93:e1:0b:cd:1b:85:c5:dd:48:47:03:56:9b:d0:45:d3:06:
         c8:80:3e:15:2b:cb:ee:8b:32:32:aa:8a:69:12:f4:83:8c:89:
         30:fb:cf:3b:96:8c:ed:06:14:72:be:03:f9:0c:80:7b:c4:30:
         17:7f:82:5d:51:72:ac:ec:d1:10:9c:10:68:a3:43:08:d5:99:
         15:fd:8e:18:d7:e9:9b:49:ac:ec:48:7a:96:1a:1a:6a:4a:6b:
         e3:04:92:95:ea:a1:e3:e2:91:46:3c:d7:5c:fa:13:69:f1:04:
         97:84:7d:5f:31:1f:40:fa:00:bb:ae:e6:c4:3c:cc:25:9a:12:
         69:03:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----