Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HpTuwj7-vGJaBLt5bOMyRzGvLQ4.roa
File:                     HpTuwj7-vGJaBLt5bOMyRzGvLQ4.roa (raw, json)
Hash identifier:          m3yVwsYOPeY8rWTtAHetqVFe/Y4EaTR6w5z199fXBJY=
Subject key identifier:   1E:94:EE:C2:3E:FE:BC:62:5A:04:BB:79:6C:E3:32:47:31:AF:2D:0E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0138
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HpTuwj7-vGJaBLt5bOMyRzGvLQ4.roa
Signing time:             Wed 15 Feb 2023 02:28:23 +0000
ROA not before:           Wed 15 Feb 2023 02:28:23 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.21/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:23 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1E94EEC23EFEBC625A04BB796CE3324731AF2D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:9e:64:74:c2:73:a7:74:b6:d1:f3:2a:30:
                    46:5b:0a:0f:eb:d5:4b:f8:98:7d:25:81:58:7a:51:
                    ef:e5:c9:e2:94:3c:34:08:5b:7d:af:e6:cb:14:1f:
                    e1:cd:0f:95:05:5d:9f:1f:6b:32:9b:8d:6e:e1:db:
                    ec:fd:d8:29:c5:54:8e:af:4b:80:e7:2a:19:2b:16:
                    3c:d8:a0:b6:e8:06:21:91:df:35:5e:80:e2:00:8f:
                    fd:ac:57:58:f8:7f:a7:b1:34:c7:72:2c:0a:85:9c:
                    bd:bb:2e:5e:34:13:bb:bd:90:b0:b0:26:fe:bf:6c:
                    4e:90:71:6c:02:eb:a0:4b:ac:3c:03:0c:06:21:a9:
                    77:89:54:80:51:f8:51:54:9e:35:57:fe:f3:7d:00:
                    9e:62:8c:86:91:bf:e9:a9:32:04:b6:13:a2:ad:c2:
                    4d:06:75:da:7e:16:78:22:74:d2:c3:d4:6f:be:c9:
                    d8:3f:10:70:cd:20:66:34:ca:b2:1d:5b:f6:90:b5:
                    44:0f:82:77:f2:02:16:03:06:85:84:56:f3:cc:ba:
                    6f:6c:5c:13:20:ec:77:3c:28:08:15:cf:ca:75:18:
                    ae:51:4c:16:0c:10:4a:6e:ca:e6:54:2d:8f:f3:50:
                    6b:3e:e3:2a:43:87:e8:88:c7:c1:85:75:ad:37:c8:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:94:EE:C2:3E:FE:BC:62:5A:04:BB:79:6C:E3:32:47:31:AF:2D:0E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HpTuwj7-vGJaBLt5bOMyRzGvLQ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.21/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:64:9b:1d:6c:cf:8a:b1:11:b1:54:c5:d0:ae:83:81:8c:
         c4:9b:50:dd:fb:ef:9a:a5:67:db:6a:95:6f:7e:3f:7f:cb:01:
         bb:38:e2:85:07:c0:80:52:3f:e6:51:1f:38:18:c1:4a:34:cb:
         21:64:ed:c8:cf:0b:67:fd:7c:ae:6f:de:7e:53:7c:98:60:ad:
         6e:6c:04:e3:0b:bf:f8:2f:4d:fd:ae:d7:a0:6c:7c:f1:ab:89:
         fc:52:00:43:24:e5:6e:c3:ea:ea:4d:38:ed:39:4b:08:73:30:
         95:48:bf:5d:79:61:f7:75:fa:fb:f9:62:d4:b2:53:9e:9d:39:
         1d:d3:b3:2e:c8:58:13:51:8b:2b:56:23:07:5d:46:24:71:c0:
         2e:b3:2c:6a:57:ba:c2:f7:ac:c1:27:7f:0a:27:73:4c:42:6d:
         94:27:bd:c3:48:67:dc:90:5b:6f:6a:5f:a9:7c:bd:80:ac:ca:
         f8:a8:0c:db:84:ee:ac:c8:73:27:2f:75:ac:45:c0:03:79:ef:
         53:db:cf:8a:71:58:5c:32:91:69:51:d8:cb:b5:72:1e:59:19:
         27:ad:d7:f9:11:9a:ce:1f:96:46:0e:9f:4e:7a:1d:7d:e5:23:
         c8:74:5a:9d:ec:7e:33:79:e1:12:8d:e6:d8:c5:41:3a:0e:bb:
         d2:c0:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----