Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HDY0Jm35fQu5S7a9YUAQYdXYuAc.roa
File:                     HDY0Jm35fQu5S7a9YUAQYdXYuAc.roa (raw, json)
Hash identifier:          EhwxRHaqSX5u2nQIi0acxH+9ZUxAZbk64gm0h3jYLO4=
Subject key identifier:   1C:36:34:26:6D:F9:7D:0B:B9:4B:B6:BD:61:40:10:61:D5:D8:B8:07
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0282
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HDY0Jm35fQu5S7a9YUAQYdXYuAc.roa
Signing time:             Mon 20 Feb 2023 08:03:35 +0000
ROA not before:           Mon 20 Feb 2023 08:03:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.131/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1C3634266DF97D0BB94BB6BD61401061D5D8B807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:c9:43:cc:27:5c:71:93:01:61:6a:69:73:
                    48:74:ac:cc:f4:9b:a2:27:dd:ff:37:1d:d8:c9:91:
                    02:43:03:06:ab:71:6e:22:41:1e:be:a7:5e:cc:fb:
                    66:17:c8:f3:6e:44:fc:25:f0:4c:d8:c7:2e:24:b6:
                    71:5b:b7:05:a1:62:c6:1c:4b:6d:75:94:1e:a9:99:
                    4f:bd:1a:e8:0e:92:96:6c:07:39:a3:f1:10:aa:42:
                    31:98:d1:b6:87:3e:f3:f4:9b:0e:7f:71:f4:bf:65:
                    3a:50:3e:14:f8:d5:16:fd:8c:5d:1f:36:8e:2a:3a:
                    53:7b:78:ad:c5:3c:45:6f:55:a8:87:25:bc:df:62:
                    8c:0c:d1:41:46:c0:82:67:e5:0a:e8:67:e1:36:7f:
                    c7:15:43:f8:75:7d:72:97:fe:ea:8e:c3:c1:be:f6:
                    fb:e2:41:ac:04:d6:83:c0:a0:01:b1:2c:23:72:e6:
                    8b:d5:61:64:72:09:d1:77:96:0d:a4:02:a1:5b:f7:
                    7b:af:2c:1e:43:8e:41:b3:c5:ab:0c:22:6d:25:14:
                    90:c3:41:61:e3:79:6e:bb:b0:03:20:2e:fa:0f:29:
                    41:b5:37:83:2d:1c:0c:dc:d7:ff:f2:38:95:f7:44:
                    73:2f:cf:01:8e:45:65:4b:fa:8a:25:97:8c:5e:1a:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:34:26:6D:F9:7D:0B:B9:4B:B6:BD:61:40:10:61:D5:D8:B8:07
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HDY0Jm35fQu5S7a9YUAQYdXYuAc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.131/32

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:34:e1:a6:12:d6:11:e0:bd:8a:f1:2a:30:74:8b:7a:f5:
         b6:c4:06:49:de:79:c5:12:2a:10:25:11:49:1e:62:9b:c1:27:
         7a:b9:34:46:56:94:b2:00:ca:e7:d5:c9:61:50:1a:e9:2f:b0:
         b8:3e:ea:4a:3e:1f:c7:e7:7f:5f:18:6e:d3:64:9d:e4:21:bf:
         75:a6:8d:ba:df:97:41:ac:5c:b7:53:28:52:8f:a7:13:20:f0:
         92:59:bb:24:9d:64:66:19:2a:cf:1d:c2:90:99:e7:36:c2:e8:
         03:7f:8c:97:ed:95:ff:83:13:e5:8f:65:2e:9f:7b:01:0c:4d:
         a3:c2:4f:bf:63:cd:2a:10:d1:4a:d7:40:e8:43:31:2a:d5:bc:
         64:9f:5a:3b:10:91:48:0b:31:15:a8:04:d5:1f:4e:44:8a:bd:
         8f:a8:6b:f6:e3:18:6e:40:01:44:13:1c:7b:45:d7:9d:d8:0f:
         d9:62:6c:99:94:69:3c:a4:f3:27:6a:5a:0f:f9:c3:60:0c:90:
         59:ca:cf:ab:c8:2d:37:ea:2a:66:ca:fd:58:1e:ab:ea:d1:60:
         a9:d3:b6:08:07:fd:e1:80:39:e1:73:81:37:57:5a:db:7c:05:
         bd:43:55:99:c1:1c:0b:bb:cd:90:98:ba:e6:56:e5:0b:99:0f:
         6d:4e:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----