Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/C_uIFcZdCw4GdTZdhvknp5pwReY.roa
File:                     C_uIFcZdCw4GdTZdhvknp5pwReY.roa (raw, json)
Hash identifier:          DVZmDWAItvD+w9ms08WJSnt43IqyipTwTFh7z3+Wg9M=
Subject key identifier:   0B:FB:88:15:C6:5D:0B:0E:06:75:36:5D:86:F9:27:A7:9A:70:45:E6
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0240
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/C_uIFcZdCw4GdTZdhvknp5pwReY.roa
Signing time:             Mon 20 Feb 2023 08:01:23 +0000
ROA not before:           Mon 20 Feb 2023 08:01:23 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.149/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:23 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0BFB8815C65D0B0E0675365D86F927A79A7045E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:37:2d:3a:b4:a3:de:f5:0a:cb:33:3e:4f:
                    13:22:e4:f6:52:f5:0d:a1:71:33:46:07:71:ee:34:
                    c9:c0:d1:3c:58:f7:b4:32:64:af:f5:51:92:01:97:
                    27:dc:f8:d5:af:b4:61:42:43:6f:4a:c3:6e:db:0f:
                    3a:65:26:84:69:39:1b:7e:5d:9d:2f:08:f1:30:46:
                    fb:3e:87:69:24:67:d2:04:44:89:fe:d9:ab:c8:76:
                    92:8d:06:49:51:41:6b:dd:9b:31:b8:22:0e:b0:e4:
                    65:68:da:b8:c3:25:35:8a:06:7d:2c:21:82:6d:7c:
                    a6:da:27:3f:3b:6c:73:6a:be:e4:68:18:a2:ec:10:
                    8e:94:72:64:26:89:3e:e7:79:ec:27:7d:6f:26:c9:
                    f8:e1:09:4d:3f:ce:75:45:ba:d6:4b:b5:7b:3a:0e:
                    73:c6:51:97:0e:75:97:68:8b:5d:b3:43:56:00:ce:
                    d9:5a:f3:f8:05:41:e0:a5:2d:6c:98:91:9a:4d:50:
                    cc:1c:0b:18:bb:25:4e:1c:19:27:f3:c8:82:08:0f:
                    d3:94:d5:b2:25:81:42:eb:45:bc:2b:73:dd:34:c4:
                    a2:08:b8:56:02:7c:97:b0:9f:7b:3f:a2:a8:57:5d:
                    80:42:fd:d9:82:df:1c:3a:82:db:cc:0b:fa:49:42:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FB:88:15:C6:5D:0B:0E:06:75:36:5D:86:F9:27:A7:9A:70:45:E6
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/C_uIFcZdCw4GdTZdhvknp5pwReY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.149/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:64:34:fc:84:70:88:de:7c:b9:f6:53:b2:75:38:51:53:b8:
         a4:e4:b5:6f:d7:af:b6:43:4a:19:0e:7f:c7:d3:18:db:39:a6:
         19:1f:5f:3c:7a:64:39:97:71:46:42:6e:c4:f0:d7:d8:7c:03:
         72:e0:6c:32:f5:0a:05:e0:0f:2c:6c:f2:ab:30:7d:87:fe:8b:
         21:c4:28:a0:a9:95:ca:17:fc:94:85:f6:e9:b3:dc:86:9b:f9:
         00:10:67:17:e2:16:0e:4c:98:be:f5:00:3c:07:ba:e7:56:ed:
         8b:01:83:3e:83:61:fb:8d:1d:21:a2:a5:24:0b:ab:83:fd:84:
         98:03:ee:66:45:3e:6e:16:c9:34:ca:89:a3:6b:50:40:2d:bf:
         07:58:ba:53:c3:35:3d:c1:52:d9:ad:ff:05:e1:6b:96:d1:eb:
         96:4a:ba:3c:75:7c:2f:3b:f9:4d:82:a1:89:cd:74:39:5c:7a:
         09:f2:fe:aa:d0:59:6c:e2:7a:f6:4f:7b:ed:88:94:06:6a:95:
         21:06:50:f8:78:3b:c4:e3:2f:a5:d6:62:10:37:5b:7d:c1:71:
         4c:ba:38:ec:a2:c2:58:aa:28:48:56:4f:29:45:c2:79:1e:41:
         cb:ab:4a:2e:82:cf:63:4e:84:f5:69:8c:a0:76:d8:99:9f:37:
         6b:31:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----