Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/838G0eFU4QIC7IRymhkyRjc6tAM.roa
File:                     838G0eFU4QIC7IRymhkyRjc6tAM.roa (raw, json)
Hash identifier:          IZg6m0uYDNvpbZDo/NfIGakOrajFHJzj8lVGRVZk4DI=
Subject key identifier:   F3:7F:06:D1:E1:54:E1:02:02:EC:84:72:9A:19:32:46:37:3A:B4:03
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01CB
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/838G0eFU4QIC7IRymhkyRjc6tAM.roa
Signing time:             Mon 20 Feb 2023 07:55:21 +0000
ROA not before:           Mon 20 Feb 2023 07:55:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.109/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F37F06D1E154E10202EC84729A193246373AB403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:13:5a:68:aa:36:3c:7e:cf:05:6d:db:f5:
                    ef:c1:48:6c:8d:68:91:8f:52:c0:82:16:b1:5f:9f:
                    03:d7:7a:1c:66:bc:28:a6:f3:4d:c2:06:d9:32:3e:
                    82:93:61:86:f2:73:a1:33:94:ec:bb:15:44:04:2d:
                    cd:8c:b7:16:52:fe:43:7d:c3:3c:87:22:3d:b3:3a:
                    28:72:c5:09:7a:9a:09:05:0e:96:ce:f1:f3:f6:0d:
                    db:92:1c:4a:26:71:8b:02:61:9d:06:75:bf:8d:6a:
                    2b:c2:f9:c7:9e:31:72:c9:78:87:3c:e1:69:a9:5b:
                    ee:f8:db:cc:84:30:86:29:aa:54:ae:2d:9b:f7:2e:
                    97:3c:2c:5a:28:e7:5c:ee:e1:4b:a8:f4:78:24:6c:
                    af:70:5e:2a:db:a3:5c:ba:12:80:48:1d:a8:20:ed:
                    88:62:35:90:42:3a:92:bf:d4:53:96:ae:9b:6e:c3:
                    ac:3c:63:0f:36:fa:69:64:23:16:89:a9:d4:67:63:
                    4a:00:ea:a9:64:7c:2b:e4:5f:3a:a2:ed:d0:15:60:
                    c7:cb:7e:5b:12:ce:c7:6f:5f:e8:3a:f4:3d:fc:db:
                    27:86:6c:69:f8:75:f3:62:8f:7f:57:63:01:ee:b6:
                    ff:23:3b:d7:7c:17:c9:e4:e6:50:6e:6f:03:b4:43:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7F:06:D1:E1:54:E1:02:02:EC:84:72:9A:19:32:46:37:3A:B4:03
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/838G0eFU4QIC7IRymhkyRjc6tAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.109/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:f4:6e:04:a5:30:2e:a2:d7:76:e0:75:6b:13:9e:d3:3d:b5:
         b6:b4:cf:d9:b4:5b:5c:24:79:f0:9c:b7:02:a1:65:ca:02:63:
         77:d8:0c:2f:c7:1e:fe:89:cb:f2:86:f5:78:13:e1:d3:74:e4:
         80:6d:66:2d:ac:74:ca:73:cc:4c:dd:da:7e:8a:98:a0:55:8c:
         22:5e:53:68:bd:12:62:28:b7:de:89:00:c2:e1:fa:77:ba:ab:
         11:9e:fc:a3:8d:c3:3e:44:8d:7b:86:23:f4:21:26:d4:6f:aa:
         ee:04:ef:3f:cd:20:aa:8d:df:61:5f:be:83:2d:02:96:77:7d:
         91:19:22:8c:68:2a:9b:6e:60:20:aa:96:17:9c:aa:3e:b5:59:
         46:79:b8:b4:75:45:cc:a8:32:a1:25:fe:0d:5a:0e:74:e6:0a:
         6d:e8:79:63:ca:bf:02:86:dd:70:b8:c4:10:a2:a8:bb:29:90:
         20:fd:0a:18:e3:de:d8:49:2c:42:5d:33:a2:75:f3:11:4e:20:
         e3:74:7e:ab:43:5d:b2:f2:52:14:0b:f8:4c:09:8b:f0:5e:0e:
         47:97:74:7b:5d:cb:8b:04:87:b3:fb:fb:c3:c6:8a:14:e1:bc:
         0c:70:a5:21:2e:61:3e:e0:0d:3d:65:1f:aa:cd:f9:7b:91:f6:
         c6:7c:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----