Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/21mpL0VBtdaah5_E0Kgu0c8iOak.roa
File:                     21mpL0VBtdaah5_E0Kgu0c8iOak.roa (raw, json)
Hash identifier:          Yh0KMkDjAK1BvJ+eKv5DaJO+pv+FOupYqi71I1o+74Q=
Subject key identifier:   DB:59:A9:2F:45:41:B5:D6:9A:87:9F:C4:D0:A8:2E:D1:CF:22:39:A9
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       025B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/21mpL0VBtdaah5_E0Kgu0c8iOak.roa
Signing time:             Mon 20 Feb 2023 08:01:34 +0000
ROA not before:           Mon 20 Feb 2023 08:01:34 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.76/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:34 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=DB59A92F4541B5D69A879FC4D0A82ED1CF2239A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:6d:64:47:66:cc:77:26:db:9c:29:1c:e7:
                    27:cf:83:d7:90:1d:54:b0:bc:4a:c5:bd:06:1c:a3:
                    b7:ed:18:6f:ca:20:62:61:8d:7a:52:62:02:40:6f:
                    a8:26:39:29:7b:01:99:77:5e:5a:a5:eb:45:33:09:
                    19:37:47:1f:e4:f4:24:ea:4a:3c:4e:a5:72:46:6c:
                    63:92:86:35:11:b1:d1:cb:79:c5:d4:c5:fb:22:bd:
                    5c:ca:fb:06:14:fa:8e:6a:46:b2:06:b2:b5:51:9f:
                    e4:5f:ea:c1:7d:dc:59:a3:1e:fb:82:85:f5:81:a7:
                    b9:33:be:70:19:e3:24:e6:d3:c8:08:0f:06:7c:ed:
                    dd:c5:0f:dc:ae:af:25:8b:cd:71:e9:58:84:ab:80:
                    4f:3b:a4:f3:00:db:3f:df:d0:1d:f9:b7:ef:f9:d0:
                    73:5a:b8:dc:90:64:07:35:c8:c9:e9:48:fb:a7:c0:
                    f0:af:f4:80:1d:27:6f:ee:12:db:f9:3b:8d:a5:27:
                    11:c9:83:b7:1a:cc:f2:7f:f4:e8:07:57:11:26:f3:
                    7a:d0:cb:74:bc:dc:89:85:02:41:c8:5e:7e:48:9c:
                    86:a1:24:e8:26:fc:85:f9:13:84:91:cc:84:e1:e5:
                    e0:ea:fe:c2:14:20:0c:dd:77:35:5e:b6:36:89:28:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:A9:2F:45:41:B5:D6:9A:87:9F:C4:D0:A8:2E:D1:CF:22:39:A9
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/21mpL0VBtdaah5_E0Kgu0c8iOak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.76/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:9f:3a:ad:f7:f3:da:cd:27:92:47:ae:34:e5:cf:aa:0f:
         d3:d3:fa:4d:de:fd:36:d6:7d:8e:05:ac:31:06:ec:39:81:28:
         6c:e7:c7:4a:86:51:1c:70:17:1a:7c:ca:d9:9f:11:d8:6f:55:
         d6:68:7b:68:6f:8e:bd:ea:42:da:7e:8b:08:ca:47:6a:a6:49:
         06:d2:1d:c5:08:fa:8d:4f:35:6f:92:31:32:e3:d4:1b:8a:12:
         0f:89:9e:79:2e:43:ed:0c:1c:0c:48:1c:64:66:6a:df:7b:5b:
         9b:5f:95:2a:67:70:d0:a2:29:e8:7b:9a:39:49:95:a4:d5:7e:
         ac:97:f4:23:13:1e:a0:92:21:a4:f9:cc:81:fb:f5:9f:8c:16:
         dc:a3:07:05:d1:c0:b7:e7:2b:fb:14:37:72:48:f2:9d:ec:4e:
         b0:33:39:a6:e4:c2:6c:68:19:e7:33:d0:48:3f:15:46:ce:f8:
         f5:a7:9b:e1:fb:8f:e3:23:dc:43:e8:39:1c:e9:ec:7e:27:f5:
         ff:6c:28:5a:cc:6f:2a:a5:44:b2:d2:13:6e:de:80:bd:52:1b:
         11:d4:32:04:50:64:1e:b3:66:9e:51:d9:ae:a0:d0:d4:fc:2a:
         63:97:f1:b5:8c:39:d8:7b:13:f3:30:a3:2e:33:cf:87:03:b5:
         23:b0:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----