Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1blFutG9jhmYuXpPitoNToIhVsc.roa
File:                     1blFutG9jhmYuXpPitoNToIhVsc.roa (raw, json)
Hash identifier:          lfGTtMoOhynTQZ2lsxcAKfhTgn5zZek+lONI/OpSZ2g=
Subject key identifier:   D5:B9:45:BA:D1:BD:8E:19:98:B9:7A:4F:8A:DA:0D:4E:82:21:56:C7
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02C1
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1blFutG9jhmYuXpPitoNToIhVsc.roa
Signing time:             Mon 20 Feb 2023 08:07:24 +0000
ROA not before:           Mon 20 Feb 2023 08:07:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.162/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D5B945BAD1BD8E1998B97A4F8ADA0D4E822156C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:7a:a8:c2:84:69:58:70:a9:de:6c:4d:9f:
                    58:dd:46:8c:18:e3:d3:46:37:cd:82:93:66:81:81:
                    ad:2c:71:c1:84:0f:34:9b:9b:2d:80:9b:d8:0a:56:
                    69:b2:46:37:c0:f6:b1:f2:72:7f:3c:f3:d9:c3:11:
                    19:a8:55:1d:27:35:3f:0f:32:36:76:9b:d9:96:dc:
                    7a:2c:bd:86:87:9e:71:bf:4e:b1:3f:6b:1a:1b:02:
                    65:7a:08:b0:64:13:b8:d6:61:25:88:4e:61:a4:c1:
                    c3:3d:23:84:f4:0a:6d:e1:aa:b9:3a:37:a2:96:0a:
                    ab:cc:c2:c8:d8:e8:18:47:37:e6:11:8d:6d:f2:97:
                    56:58:59:9c:65:0f:1f:12:5c:3a:54:d0:5d:d0:07:
                    bb:23:88:81:e4:58:f7:dd:02:40:60:03:76:75:c0:
                    30:60:96:0d:50:1a:32:57:11:80:89:d7:ea:eb:bc:
                    4e:4f:34:31:a8:f8:90:72:cb:7e:f3:6c:5c:1c:a2:
                    60:d5:74:4e:98:31:cc:1d:e9:ad:24:b9:56:98:6a:
                    ad:94:4f:fd:a0:1a:c6:10:76:c8:76:e3:94:74:73:
                    f5:13:ea:af:85:a2:4b:eb:2a:c3:8c:55:2c:80:03:
                    3e:d9:a1:9d:1f:ee:8f:32:db:ba:4e:8d:d2:6e:f1:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:45:BA:D1:BD:8E:19:98:B9:7A:4F:8A:DA:0D:4E:82:21:56:C7
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1blFutG9jhmYuXpPitoNToIhVsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.162/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:89:5a:d7:28:ae:1d:b8:7a:01:df:55:d9:fe:cb:f6:4b:
         4d:5d:e3:78:41:d9:84:da:5e:0d:62:61:04:3c:a0:7c:f2:9a:
         5f:43:46:37:57:c3:12:ba:7f:df:aa:a6:16:42:32:77:5b:ac:
         5d:4a:48:6e:1a:54:f1:36:88:a8:28:5e:f0:57:57:89:30:1a:
         5e:83:b3:ef:c0:e3:ae:e7:c8:7c:17:e2:9b:8a:20:8b:22:69:
         f1:29:b6:7a:a3:3d:de:9b:d3:03:0b:83:93:a7:72:6a:1d:af:
         99:9f:db:d8:34:5c:eb:68:80:2b:f3:77:f1:ae:05:d9:1f:b7:
         bc:4b:30:4e:de:0e:8c:8c:be:bd:16:fe:9d:35:00:27:a1:7e:
         26:5e:0f:0a:63:c8:95:d5:15:e5:d7:7a:e2:fd:c5:7f:ef:28:
         a8:c7:0b:88:b1:10:ae:de:c4:15:0d:0d:95:86:2a:68:1e:65:
         13:72:d1:72:e6:66:f4:b7:ea:2c:b5:e1:d9:3c:e6:f5:e5:65:
         fc:ff:10:79:7b:65:e7:28:ca:65:30:73:cb:ea:39:9c:08:c3:
         2e:8b:c7:1f:ea:a3:ff:35:93:31:2f:0e:39:7a:87:03:ee:1a:
         23:d3:dd:bf:e3:2b:0a:0d:3c:38:aa:ca:41:cd:7d:db:7c:20:
         ab:66:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----