Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7M9iw9fD6941583NDOH-wc-m-Us.roa
File:                     7M9iw9fD6941583NDOH-wc-m-Us.roa (raw, json)
Hash identifier:          TxGTLga0N71kaIRp292XVXp/AfgD070dv/2GJstNJ+c=
Subject key identifier:   EC:CF:62:C3:D7:C3:EB:DE:35:E7:CD:CD:0C:E1:FE:C1:CF:A6:F9:4B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01C7
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7M9iw9fD6941583NDOH-wc-m-Us.roa
Signing time:             Mon 20 Feb 2023 07:55:20 +0000
ROA not before:           Mon 20 Feb 2023 07:55:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.124/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=ECCF62C3D7C3EBDE35E7CDCD0CE1FEC1CFA6F94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:c7:b0:54:01:3d:6a:6a:89:43:7e:e9:a2:
                    ff:8f:45:dd:ef:f2:23:24:e1:67:7c:b3:66:c4:a2:
                    f7:7e:90:1d:b1:56:12:ad:ab:86:d4:c2:45:cd:e0:
                    b0:2b:d4:8c:08:0d:fd:80:6f:04:79:58:ce:4c:9f:
                    e5:65:68:41:65:28:2d:a5:cd:7f:10:73:91:f0:46:
                    28:86:a7:72:2f:e6:28:35:b8:6f:bf:2a:9c:0d:68:
                    c0:d6:4d:63:a9:5d:27:17:4f:f2:30:cd:5f:02:2b:
                    d6:11:9e:a6:62:85:68:82:34:d2:b6:dd:54:2b:b9:
                    b0:63:3d:ce:f1:a6:34:d5:7a:5a:b5:77:86:bd:d0:
                    80:84:dd:4e:ed:f2:06:83:17:2c:94:6d:be:38:9e:
                    b1:3d:16:00:63:27:62:54:77:05:4b:c2:49:ef:3c:
                    e8:e9:33:10:90:d2:f7:a2:64:95:36:8b:64:a8:c4:
                    d0:50:3d:03:c9:62:81:ba:ec:e7:56:2b:13:da:58:
                    07:59:71:b7:43:39:b1:9f:3a:e2:1a:a0:d0:7f:e4:
                    30:6c:f8:5f:bc:ee:8a:44:a5:5c:cc:d3:1b:2f:da:
                    61:cf:8f:2f:18:b7:f3:2a:44:dc:38:3d:93:f5:33:
                    5c:42:02:b3:f1:a8:e4:6d:e3:27:cd:fc:73:3d:2f:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:62:C3:D7:C3:EB:DE:35:E7:CD:CD:0C:E1:FE:C1:CF:A6:F9:4B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7M9iw9fD6941583NDOH-wc-m-Us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.124/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:ee:1d:09:9f:5f:7a:45:6a:d1:2b:ea:b0:db:21:e9:e3:
         37:d9:7c:d3:42:31:6f:32:0e:43:31:9c:d2:ff:b0:ec:bb:98:
         e5:54:41:69:da:1b:23:8a:67:fd:2b:01:2e:1e:2b:3d:16:4a:
         44:68:e6:c1:17:f7:f3:d2:8e:8c:e5:29:57:c9:10:8f:4d:ba:
         62:8e:26:ea:d2:e0:c3:b7:9c:db:93:99:29:71:9c:dc:98:b2:
         06:e4:3a:0f:fc:18:6a:48:1a:af:50:fb:47:17:70:68:bc:75:
         ff:67:ad:b5:22:93:7d:1c:d8:ed:67:55:2d:14:6e:68:cc:9b:
         f8:49:52:e5:a9:6b:44:e8:97:65:fe:e8:3d:69:69:96:56:8e:
         f7:5e:5c:ab:2d:96:8a:a5:10:08:dc:43:31:68:48:b5:c7:83:
         59:62:8c:20:94:0a:55:fb:90:bf:c7:80:db:64:cb:44:fd:1d:
         fd:56:57:eb:ec:25:99:ad:e7:48:ab:82:d6:79:4b:d9:c4:03:
         ed:5e:a0:ba:e9:27:65:e3:36:5c:80:e7:6a:77:0e:3c:85:13:
         31:82:54:09:37:b7:94:82:d4:8a:17:ce:65:6d:f9:c9:98:0d:
         b4:b1:b7:7e:91:2c:76:b1:88:33:1f:4b:6c:b6:66:70:de:75:
         97:59:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----