Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Cqfm6nTqPRciXZOuUwqfikLvYxg.roa
File:                     Cqfm6nTqPRciXZOuUwqfikLvYxg.roa (raw, json)
Hash identifier:          uYD/W+Gxk2IQw1OnWbvv0shWKRNvDUmSwiOyjj+KTL4=
Subject key identifier:   0A:A7:E6:EA:74:EA:3D:17:22:5D:93:AE:53:0A:9F:8A:42:EF:63:18
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0228
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Cqfm6nTqPRciXZOuUwqfikLvYxg.roa
Signing time:             Mon 20 Feb 2023 07:59:25 +0000
ROA not before:           Mon 20 Feb 2023 07:59:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.83/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0AA7E6EA74EA3D17225D93AE530A9F8A42EF6318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:0d:1e:aa:d6:f0:8d:92:1c:b3:55:ee:0e:
                    00:ed:81:6f:5b:31:e4:5b:de:25:ee:6f:14:c0:0c:
                    ce:ea:c6:27:c2:85:cc:5f:59:ed:d2:bf:ee:32:4d:
                    0f:66:01:4f:ee:05:40:ba:6f:ff:6a:9b:2f:a1:5e:
                    c8:02:c3:31:11:8b:3e:59:b3:1f:02:45:7e:d2:a9:
                    9f:9c:01:ca:a0:8c:39:d0:fd:da:cd:57:6a:40:8b:
                    68:54:62:fe:83:58:fc:8a:73:18:25:84:63:0e:13:
                    98:9d:1c:08:30:a0:d4:d4:fd:62:fd:49:52:ee:e8:
                    9a:dd:fb:20:24:98:95:1d:d1:8d:c3:a4:37:e4:cf:
                    a9:d5:6e:76:e5:bf:f1:28:a1:0a:ca:48:14:cb:ce:
                    db:9b:1f:ab:ee:b4:d5:0e:27:72:5a:1c:07:2e:92:
                    a7:3e:7e:0f:bd:22:87:73:1a:db:94:f8:69:6a:d2:
                    58:79:09:0b:51:61:ce:f4:79:eb:00:5d:f5:66:38:
                    46:8e:d1:b4:f7:90:00:be:c0:08:24:37:83:6b:3e:
                    b4:1d:c1:e4:9c:77:ae:06:be:73:41:e5:57:e2:21:
                    af:f7:3f:75:dc:dc:0f:7d:06:62:bd:18:b5:9b:d3:
                    8e:22:24:5a:74:2c:28:e7:9c:67:7b:c5:25:f1:6a:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A7:E6:EA:74:EA:3D:17:22:5D:93:AE:53:0A:9F:8A:42:EF:63:18
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Cqfm6nTqPRciXZOuUwqfikLvYxg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.83/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:de:e2:da:b9:55:36:94:b4:c1:2f:73:5e:d3:af:ec:ea:aa:
         82:7e:7e:67:c6:34:03:89:bd:a1:34:33:30:5e:38:de:3c:f0:
         56:dd:39:bc:46:98:da:d8:73:a7:8e:a0:51:0e:16:d8:74:cb:
         dc:6a:ca:da:f0:b2:cf:90:fe:6f:ab:cd:7f:39:b6:66:d3:ef:
         44:ae:f2:8e:74:6e:b3:c2:75:d6:38:fd:24:99:f0:27:c8:83:
         0b:7f:80:04:6f:67:c8:64:8d:23:9f:49:12:7d:b5:f7:9c:61:
         d8:0a:e7:5d:30:f6:23:0b:9f:85:1d:32:e6:08:86:bd:c6:a3:
         af:c3:8e:56:56:fe:0c:17:de:4d:05:28:19:1f:a8:45:df:be:
         4f:79:a4:8f:7c:e0:98:50:66:33:fc:d1:b2:78:7b:82:96:a8:
         1d:00:8a:57:6d:42:d5:95:12:95:6d:1e:8a:df:77:9d:d0:6a:
         b4:3d:cf:bf:62:a5:9e:08:47:ec:32:f7:51:e8:4f:31:59:cd:
         b8:26:f2:b7:df:6b:57:8b:ae:16:07:12:e7:8c:91:bd:11:e6:
         0c:3b:a8:52:b2:37:ad:29:dd:c0:ca:bb:26:0b:b0:f8:0b:1b:
         98:a1:16:48:38:48:c0:d9:16:5e:32:b5:78:08:e9:17:6a:7a:
         db:c1:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----