Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2J1pvOnpnem55mNyz2c8zfvqoQk.roa
File:                     2J1pvOnpnem55mNyz2c8zfvqoQk.roa (raw, json)
Hash identifier:          1W24ctDW5vVmzQtwuGibBIpZz4VR+TKjpr9RyuxXZdo=
Subject key identifier:   D8:9D:69:BC:E9:E9:9D:E9:B9:E6:63:72:CF:67:3C:CD:FB:EA:A1:09
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       024E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2J1pvOnpnem55mNyz2c8zfvqoQk.roa
Signing time:             Mon 20 Feb 2023 08:01:29 +0000
ROA not before:           Mon 20 Feb 2023 08:01:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.204/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D89D69BCE9E99DE9B9E66372CF673CCDFBEAA109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:88:6a:07:4f:b5:5d:6a:27:39:2b:ce:47:
                    ca:37:d9:c0:2c:0a:00:69:4c:10:c6:5b:b2:89:47:
                    6b:cc:72:51:c9:0e:eb:df:3d:ce:6b:c6:3c:8f:c6:
                    45:ba:b1:85:25:a1:b8:47:63:0c:14:e7:79:5f:7f:
                    47:97:aa:8c:86:de:05:de:4d:4d:0f:8b:a5:98:43:
                    f4:5c:5d:79:7c:06:cd:cc:c5:65:6b:ba:d8:a1:23:
                    ab:b0:64:f7:a0:a8:32:ea:23:80:0c:22:71:c1:bb:
                    a1:28:4e:12:62:07:16:97:df:59:c8:fc:8d:ca:95:
                    d8:85:9f:81:6b:fe:5f:97:aa:8d:e1:38:17:82:e7:
                    55:69:ad:cb:d2:c1:fe:a4:d3:e7:6d:2e:63:dc:76:
                    b1:07:eb:ce:fb:10:a7:cd:70:ec:fc:ff:d9:0b:fc:
                    2f:d1:5b:64:53:27:67:20:94:3a:7b:81:8d:5f:a1:
                    da:89:71:51:24:96:da:aa:c9:93:52:d9:e4:cd:85:
                    98:2a:6d:de:5f:19:86:c2:47:c3:a1:a3:0e:c7:7a:
                    45:a8:41:8d:2a:b6:70:c3:bd:9a:73:b9:75:9a:e5:
                    57:2a:6e:a7:27:a1:e9:ed:8e:8a:27:5c:15:48:f6:
                    9a:13:90:d8:b4:91:8c:0a:6b:df:ed:d8:d0:c8:b2:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9D:69:BC:E9:E9:9D:E9:B9:E6:63:72:CF:67:3C:CD:FB:EA:A1:09
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2J1pvOnpnem55mNyz2c8zfvqoQk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.204/32

    Signature Algorithm: sha256WithRSAEncryption
         17:50:ae:d3:8d:72:1c:81:77:15:e1:82:4b:c6:d0:49:f8:fe:
         24:c4:ee:81:63:13:f0:15:74:f5:2b:50:5e:de:9f:26:60:51:
         e1:16:81:6f:ad:ce:d0:df:40:62:46:66:8b:c7:9a:43:34:4c:
         7c:ac:a9:ad:97:94:f8:df:20:19:4d:6f:50:2d:35:7b:73:f9:
         64:20:46:47:7f:8a:90:cd:5b:0a:02:8f:6e:7c:cc:cd:e5:72:
         9d:d6:3c:58:99:de:0a:4f:24:81:08:6c:cc:33:08:09:2e:38:
         0a:59:36:1a:f5:c0:9f:9c:0b:32:e7:e6:9d:b4:11:eb:47:dc:
         13:ea:a5:39:a7:c7:ff:18:fe:ec:59:fb:d3:ca:c5:3d:6f:7a:
         ec:6b:dc:ff:2f:e9:36:d4:91:33:94:da:1e:24:4b:4a:b1:f2:
         96:c3:f5:43:dc:24:e6:e7:40:e9:83:05:df:9f:94:9c:00:d6:
         7e:b9:67:f6:02:1f:cf:4e:c3:cd:83:25:eb:90:5d:5b:72:bd:
         53:d1:69:fe:ba:81:13:8b:9e:14:e6:ec:d3:c9:bc:a1:ed:c8:
         5b:86:7a:9b:1f:fb:a6:e2:35:a1:8f:58:68:ce:91:07:f2:37:
         a7:ee:fd:3a:60:b5:80:09:8b:6a:56:fd:95:22:a4:34:d9:e7:
         01:97:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----