Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DRO3x6fxapvXHiCqKoy9TlJiD4w.roa
File:                     DRO3x6fxapvXHiCqKoy9TlJiD4w.roa (raw, json)
Hash identifier:          ZjeT9BH7ZkxIQxLb8O/dzccAXUpCplYJbD4z8Fy1DC4=
Subject key identifier:   0D:13:B7:C7:A7:F1:6A:9B:D7:1E:20:AA:2A:8C:BD:4E:52:62:0F:8C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02C6
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DRO3x6fxapvXHiCqKoy9TlJiD4w.roa
Signing time:             Mon 20 Feb 2023 08:07:26 +0000
ROA not before:           Mon 20 Feb 2023 08:07:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.196/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0D13B7C7A7F16A9BD71E20AA2A8CBD4E52620F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:dd:d0:90:90:a4:58:4b:e2:2a:a6:cc:18:
                    88:42:b5:f3:0e:d3:80:cc:98:b7:07:b4:24:e8:74:
                    1f:a2:5c:7e:d5:ee:37:2c:62:f4:1b:96:37:f5:e0:
                    00:a7:b3:01:c0:7f:6b:99:4f:8a:2d:54:22:c5:56:
                    1d:3f:ef:2a:b9:fb:1f:c6:68:e9:86:3b:4a:d5:60:
                    1a:81:9d:96:b7:e3:d9:c9:11:00:1b:53:bd:cc:12:
                    6c:38:e5:48:f1:52:0d:fe:4b:b9:50:69:db:7e:9b:
                    89:02:d7:2f:8c:58:c8:6b:66:d0:10:da:91:72:3d:
                    37:3c:07:39:1f:03:14:9d:92:61:d8:cf:73:b0:0a:
                    35:c3:21:0d:1c:ab:2a:d8:72:ce:0a:92:2e:2a:14:
                    fc:49:5b:6e:2d:0f:73:3c:6c:3e:23:6f:d6:9e:78:
                    7b:49:19:fa:cb:49:58:1c:ec:e5:f0:16:cd:25:88:
                    42:78:98:f1:7e:0f:5b:2b:18:3a:a7:0b:41:30:f5:
                    98:42:1d:31:54:72:28:ac:92:de:7c:a9:c0:63:8a:
                    d5:10:77:c5:6d:e5:4f:ee:5d:07:a8:37:99:65:42:
                    f1:13:88:97:78:9b:ab:3e:15:e4:47:a8:ba:1a:dc:
                    05:cd:ec:aa:6e:e6:2a:c4:2f:a2:04:f3:62:65:3a:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:13:B7:C7:A7:F1:6A:9B:D7:1E:20:AA:2A:8C:BD:4E:52:62:0F:8C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DRO3x6fxapvXHiCqKoy9TlJiD4w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.196/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:6d:1d:16:45:3c:8b:9f:b3:8d:06:10:25:80:83:00:63:3f:
         fb:b6:d0:a0:1d:c2:31:12:6f:a4:a3:22:0c:c8:5e:c7:7f:26:
         5e:76:f9:c6:ec:69:b9:ac:88:e0:cc:b1:9d:90:95:1e:34:26:
         7d:52:07:02:22:00:a7:d2:1f:a8:fa:c9:7d:c7:a7:94:a2:f2:
         d6:ef:bb:6d:d9:91:45:0f:e3:c0:aa:bb:dc:a6:6c:68:4d:9c:
         bf:a0:7a:24:67:eb:b7:af:7b:57:a5:e3:09:b5:7c:2c:cf:a1:
         51:11:0d:01:c0:d0:6a:6a:4a:18:c3:c6:1b:65:55:4f:e2:51:
         7e:6f:58:ac:27:b3:c1:c4:c3:dd:e9:f8:6a:93:ff:87:65:d2:
         9e:a1:65:1d:e7:20:82:a7:cb:99:1a:8f:0a:27:3b:d0:f0:9d:
         1e:8b:5e:e8:11:fb:61:a6:c5:21:4b:6f:b2:87:67:67:71:b5:
         7d:c8:3d:10:55:b0:52:e1:39:b3:4d:5a:36:48:a6:cc:c3:e0:
         98:6e:3a:6b:7c:a6:39:c2:82:62:95:a2:12:f5:f2:1f:75:fc:
         67:88:68:a4:4d:cd:b0:4f:7c:5c:93:eb:2d:7f:ec:b8:f3:1e:
         b6:65:1d:41:5e:36:d2:65:6f:a0:03:e6:23:69:08:ee:f3:17:
         ef:a1:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----