Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7p2Aq0hhJllXAqd5MtSrhDhoPiY.roa
File:                     7p2Aq0hhJllXAqd5MtSrhDhoPiY.roa (raw, json)
Hash identifier:          aI9+Es7qXoMqAOuIruI8PRGLVdrPeCkiRaOsXOFftFE=
Subject key identifier:   EE:9D:80:AB:48:61:26:59:57:02:A7:79:32:D4:AB:84:38:68:3E:26
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01DA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7p2Aq0hhJllXAqd5MtSrhDhoPiY.roa
Signing time:             Mon 20 Feb 2023 07:55:28 +0000
ROA not before:           Mon 20 Feb 2023 07:55:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.178/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=EE9D80AB486126595702A77932D4AB8438683E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:1f:3d:ed:38:ef:4f:75:3c:fa:2a:b3:78:
                    c6:46:34:47:f5:80:75:65:3b:3c:4c:e8:87:be:15:
                    a5:05:99:44:7d:a2:f3:2d:e5:9c:30:05:56:46:bb:
                    10:8c:1b:4b:19:c6:d5:bf:4f:2e:f4:0f:55:dc:88:
                    ae:a1:8a:00:00:26:7f:2f:ae:d2:94:9d:76:0b:59:
                    cb:0f:27:61:20:f8:ec:51:f8:9c:78:87:4e:50:95:
                    96:a8:2f:0d:d9:f7:1e:84:84:8b:d6:07:15:bc:84:
                    18:81:26:2e:89:7a:c3:bb:37:f9:94:3c:62:c0:fa:
                    ff:44:e0:6b:d5:91:2c:05:49:e1:d1:45:5a:96:08:
                    b5:53:20:d2:d1:8f:e5:04:35:66:21:44:72:85:98:
                    2c:8c:fd:18:21:93:fa:fb:de:7a:f7:2e:9f:19:46:
                    85:2f:78:7d:8c:04:bb:dc:c1:44:34:f7:34:bc:9f:
                    c5:2a:dc:65:a4:e0:c2:f8:a9:e4:4e:1b:54:bb:17:
                    a9:84:4e:80:c2:c1:75:68:29:48:ca:80:13:a9:43:
                    58:ca:40:17:90:84:50:49:99:af:9c:32:4d:ed:2a:
                    5f:f6:4f:85:98:8f:f4:0f:05:e4:0e:6c:e0:73:f7:
                    ae:4f:4c:2c:da:f3:cc:be:3f:0c:21:ae:8a:2c:44:
                    f6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9D:80:AB:48:61:26:59:57:02:A7:79:32:D4:AB:84:38:68:3E:26
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7p2Aq0hhJllXAqd5MtSrhDhoPiY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.178/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:f8:34:b9:5d:4a:6c:32:c3:2e:80:38:f5:8b:33:8f:0a:
         02:02:19:82:a7:84:f9:e0:5e:71:e0:85:b5:59:04:a9:a7:1b:
         5b:a0:e3:d4:11:1b:45:36:6c:32:35:6f:6f:2e:c9:03:4c:d4:
         79:58:bd:37:3d:43:53:bf:ba:f1:1c:77:e2:b1:00:ac:5a:69:
         3b:a8:09:94:9a:af:b2:16:b9:bd:71:cd:30:5d:62:e3:80:26:
         b8:17:e7:00:95:08:ae:78:73:d5:32:0b:53:ef:24:14:cf:9c:
         ce:a5:b9:8f:ac:44:95:2a:0b:02:f0:50:bf:98:7f:38:fe:c9:
         1c:73:fc:d1:c1:6e:ea:6b:55:bf:51:f4:50:57:eb:48:d3:f2:
         f0:7c:ed:b2:32:ba:49:df:66:60:f1:be:cb:7d:cb:c3:d0:e9:
         7b:f4:c3:23:dd:0b:11:2a:2d:eb:84:a2:47:a1:3e:9c:58:1d:
         56:41:fa:a7:0a:c0:e8:bf:b7:be:56:d2:62:08:54:13:76:c4:
         aa:17:d2:74:82:98:2e:bd:fd:4b:ba:4e:29:60:03:4d:ee:84:
         3a:e8:35:a0:1a:9d:fd:73:2c:fa:2a:03:75:e6:9b:ab:f9:0b:
         01:e8:9a:16:fe:ed:8e:67:8f:14:e1:df:34:97:d9:d7:fb:93:
         8f:40:32:d5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MjhaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVFOUQ4MEFCNDg2MTI2
NTk1NzAyQTc3OTMyRDRBQjg0Mzg2ODNFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/gh897TjvT3U8+iqzeMZGNEf1gHVlOzxM6Ie+FaUFmUR9ovMt
5ZwwBVZGuxCMG0sZxtW/Ty70D1XciK6higAAJn8vrtKUnXYLWcsPJ2Eg+OxR+Jx4
h05QlZaoLw3Z9x6EhIvWBxW8hBiBJi6JesO7N/mUPGLA+v9E4GvVkSwFSeHRRVqW
CLVTINLRj+UENWYhRHKFmCyM/Rghk/r73nr3Lp8ZRoUveH2MBLvcwUQ09zS8n8Uq
3GWk4ML4qeROG1S7F6mEToDCwXVoKUjKgBOpQ1jKQBeQhFBJma+cMk3tKl/2T4WY
j/QPBeQObOBz965PTCza88y+PwwhroosRPbXAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU7p2Aq0hhJllXAqd5MtSrhDhoPiYwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My83cDJBcTBoaEpsbFhBcWQ1TXRTcmhEaG9QaVku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxasjANBgkqhkiG9w0BAQsFAAOCAQEAHOb4NLldSmwywy6AOPWL
M48KAgIZgqeE+eBeceCFtVkEqacbW6Dj1BEbRTZsMjVvby7JA0zUeVi9Nz1DU7+6
8Rx34rEArFppO6gJlJqvsha5vXHNMF1i44AmuBfnAJUIrnhz1TILU+8kFM+czqW5
j6xElSoLAvBQv5h/OP7JHHP80cFu6mtVv1H0UFfrSNPy8HztsjK6Sd9mYPG+y33L
w9Dpe/TDI90LESot64SiR6E+nFgdVkH6pwrA6L+3vlbSYghUE3bEqhfSdIKYLr39
S7pOKWADTe6EOug1oBqd/XMs+ioDdeabq/kLAeiaFv7tjmePFOHfNJfZ1/uTj0Ay
1Q==
-----END CERTIFICATE-----