Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2c6DsLE84Jhvn-SAuCshzdYJcJw.roa
File:                     2c6DsLE84Jhvn-SAuCshzdYJcJw.roa (raw, json)
Hash identifier:          u4xskkycDWJ+kzthij58jCowEqft8BlignE4XBPqUg8=
Subject key identifier:   D9:CE:83:B0:B1:3C:E0:98:6F:9F:E4:80:B8:2B:21:CD:D6:09:70:9C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0230
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2c6DsLE84Jhvn-SAuCshzdYJcJw.roa
Signing time:             Mon 20 Feb 2023 07:59:28 +0000
ROA not before:           Mon 20 Feb 2023 07:59:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.52/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D9CE83B0B13CE0986F9FE480B82B21CDD609709C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:ca:52:49:14:34:4a:08:61:46:75:5b:7a:
                    24:cc:48:f9:97:86:70:1f:f5:10:98:09:80:77:67:
                    c4:45:1f:37:65:b0:76:12:a4:b8:76:13:67:0b:3f:
                    dd:a2:17:d0:57:9b:50:88:4c:cc:03:9e:48:c6:7b:
                    1d:aa:ff:86:05:78:52:d2:11:fe:37:02:b9:1d:e5:
                    11:24:b6:f4:48:23:e9:13:e9:e9:b3:13:3b:ca:74:
                    6c:42:d7:b1:db:6d:89:42:05:5c:44:4b:04:55:cf:
                    ef:db:77:f5:6c:f8:27:c3:b8:ef:52:d9:6c:43:c7:
                    47:21:86:22:5f:76:5b:44:c2:83:a2:a1:f9:30:f7:
                    fb:a9:a9:ab:50:00:d9:b4:a5:97:b3:5c:b4:c8:26:
                    aa:b0:82:71:68:05:2a:66:cd:04:2e:8d:e0:0a:49:
                    44:b3:31:05:ba:b9:fb:01:13:b4:8a:54:9c:d4:16:
                    d2:b2:2d:c8:ab:f4:40:bd:ec:7c:5b:b5:b4:7d:b3:
                    9c:74:d6:b6:db:58:f6:32:07:be:27:36:c2:bc:10:
                    a1:e7:fb:53:1f:68:d8:72:89:cf:16:46:c5:3c:b8:
                    dd:13:14:52:ac:f8:d7:9a:18:48:fd:19:29:36:b9:
                    3c:bf:ee:0a:2a:bf:65:d1:15:0f:8b:4d:a8:09:ea:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CE:83:B0:B1:3C:E0:98:6F:9F:E4:80:B8:2B:21:CD:D6:09:70:9C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2c6DsLE84Jhvn-SAuCshzdYJcJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.52/32

    Signature Algorithm: sha256WithRSAEncryption
         94:05:3f:02:0f:f3:65:42:31:99:26:ed:5c:da:be:9f:d8:a5:
         49:86:a2:8c:28:98:03:dc:4d:61:f5:2d:b9:f0:96:44:ba:67:
         f5:6b:10:a9:9a:53:4f:5c:72:09:9d:c5:88:4b:75:be:87:95:
         3a:75:a9:dc:3b:e4:93:80:c1:20:c2:a6:17:e3:66:fa:bb:32:
         2b:f8:ca:a9:f6:87:39:a4:41:07:fa:11:be:8a:2f:f8:a8:08:
         92:6d:4c:30:dd:08:39:c8:ae:3b:15:c2:ce:f1:07:49:8d:1f:
         98:24:51:5f:95:9a:1a:99:78:bf:f7:79:66:2b:d4:87:1e:f8:
         53:d8:b9:48:34:a3:17:98:22:f9:3a:ce:7f:f5:cb:08:c4:63:
         72:ad:b2:63:a5:d9:0f:00:3e:86:8f:ca:02:db:30:1b:a2:47:
         c7:3c:0d:b5:b5:bf:0c:d6:42:e6:6b:e6:68:eb:2f:fe:c3:3f:
         54:43:ae:4f:9c:9f:ed:41:06:5e:62:a2:ed:06:4d:30:16:9b:
         fc:e9:d1:fa:87:c2:97:a2:6f:bc:e2:ed:57:13:7a:56:17:c8:
         08:03:c7:2a:b6:cc:04:07:37:a8:19:da:2c:c4:bc:bf:2d:af:
         c0:c2:93:d5:ad:88:aa:7d:e5:8b:f5:97:73:50:80:e2:83:f8:
         02:0b:5a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----