Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/56IjLehY3qof6luBYVlqr6sb4Ns.roa
File:                     56IjLehY3qof6luBYVlqr6sb4Ns.roa (raw, json)
Hash identifier:          QIttSk7ormvaIW5V+W5tyyMc70m4TgMT87784aqeCG4=
Subject key identifier:   E7:A2:23:2D:E8:58:DE:AA:1F:EA:5B:81:61:59:6A:AF:AB:1B:E0:DB
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0249
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/56IjLehY3qof6luBYVlqr6sb4Ns.roa
Signing time:             Mon 20 Feb 2023 08:01:27 +0000
ROA not before:           Mon 20 Feb 2023 08:01:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.63/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=E7A2232DE858DEAA1FEA5B8161596AAFAB1BE0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:c2:c7:a6:37:20:d4:d1:dc:d3:79:65:3e:
                    fd:2f:0b:77:03:e4:fa:53:02:2e:ac:9f:88:91:09:
                    34:18:4c:71:70:5c:1b:09:8d:b6:aa:ce:c2:fd:4b:
                    a9:df:17:f2:e0:5e:4d:79:63:c2:e2:44:d1:95:4f:
                    d8:b6:a1:16:9a:75:11:c1:62:c4:93:d9:93:cb:95:
                    58:fa:80:91:e2:de:7a:6a:e8:6d:4b:79:50:f0:3f:
                    54:58:8a:c4:38:dc:1f:1e:2f:e5:4d:12:09:ad:6f:
                    37:67:87:9a:66:72:5d:d0:7e:39:61:5d:d8:e5:ea:
                    5d:28:98:36:16:6d:4e:d3:56:f7:0a:61:90:36:07:
                    aa:49:03:71:8e:e3:3d:e0:0a:40:d5:e0:92:83:ed:
                    ca:fb:90:bb:0c:82:27:ff:69:a2:43:3f:5e:be:d7:
                    46:f6:a0:01:2f:81:c5:7f:9d:78:e1:62:d9:48:d7:
                    fc:76:f7:8d:a1:2c:bf:4b:a5:7d:8b:3f:8a:50:fd:
                    54:9e:10:2a:94:af:b0:14:b5:3d:d4:d4:a0:ef:58:
                    1e:c7:45:7c:b5:ae:ab:a5:75:a2:e8:a4:5b:8f:c7:
                    c9:b7:c4:ec:36:ac:d1:bd:40:59:c8:3b:f1:47:d4:
                    06:4e:50:7c:0b:fe:31:c3:26:37:c0:b8:a9:9e:a0:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A2:23:2D:E8:58:DE:AA:1F:EA:5B:81:61:59:6A:AF:AB:1B:E0:DB
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/56IjLehY3qof6luBYVlqr6sb4Ns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.63/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:f3:3a:09:7e:47:34:c1:fb:26:b9:24:70:f7:d9:8f:36:
         cb:31:2f:76:67:ff:48:23:6b:3b:11:0a:93:b9:b2:5f:6c:16:
         4b:be:a0:27:b8:59:7b:18:72:01:42:37:c9:b9:68:f5:cc:5a:
         4d:73:3e:76:5d:52:c1:3a:be:1f:aa:a4:21:ee:15:13:00:00:
         c9:26:cc:2c:76:4d:dd:3c:51:8b:34:e7:ef:44:82:ed:aa:36:
         15:97:0f:02:cd:53:2a:73:27:a1:9e:e3:9e:6f:25:3b:fe:e5:
         de:19:b2:eb:dd:9b:81:b0:e3:e5:0b:51:62:cf:cd:38:b6:2d:
         d1:e0:5e:ac:98:fd:c9:9c:21:e5:cc:3a:23:01:fb:6b:30:c0:
         09:34:98:9e:51:b0:58:4e:9d:65:c3:db:8e:07:17:37:d6:1b:
         3a:42:51:f3:0c:b1:81:02:47:60:29:3a:4b:11:34:d9:f1:2a:
         e9:bf:e3:25:e2:ab:e8:37:63:a5:65:2a:b3:d0:88:d5:42:fc:
         fe:9c:c0:e2:b9:4e:6d:94:6b:05:73:86:d1:e9:da:75:97:8d:
         3e:6b:04:94:f0:d7:3d:8d:87:66:48:13:93:f0:b8:15:7a:78:
         5f:3d:b6:c5:47:74:c6:62:8a:87:56:b0:80:1b:9d:dd:7d:9e:
         dd:0a:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----