Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa
File:                     IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa (raw, json)
Hash identifier:          dSurzwKhaKXimAT3dS4Re/srLFeJ4mgA82Byd14/uf0=
Subject key identifier:   20:32:1D:A8:BF:19:64:00:0E:1C:82:2B:DA:19:9D:E9:55:F9:77:31
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa
Signing time:             Mon 20 Feb 2023 08:05:30 +0000
ROA not before:           Mon 20 Feb 2023 08:05:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.118/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=20321DA8BF1964000E1C822BDA199DE955F97731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:43:6b:89:48:88:ff:25:d6:8e:5a:dd:cc:
                    91:3b:e4:ee:a0:bd:d8:14:60:22:dd:79:fc:79:70:
                    4a:fa:0a:53:cb:1f:ab:12:54:12:e4:f1:73:2b:80:
                    68:17:52:51:79:30:d3:2a:07:a1:81:76:47:f7:b3:
                    25:62:22:d2:2b:65:af:c1:bf:a9:cc:56:31:a9:e4:
                    bb:b5:ee:c7:2e:4f:65:f0:3f:b2:52:e0:dc:09:b2:
                    f3:ab:e7:44:6e:3c:b8:df:c7:46:cc:26:92:e7:1b:
                    e2:41:49:a7:ad:fe:9c:16:a7:24:8f:2a:b2:aa:40:
                    75:a0:65:00:86:42:30:a1:40:34:cd:a2:39:53:ea:
                    9c:50:29:85:83:bc:26:a4:fa:32:7a:8d:44:bd:a2:
                    42:a4:7e:4f:86:fb:56:14:67:ba:a7:d4:c3:fe:5c:
                    33:29:00:54:6e:ff:b5:1b:e1:5a:89:57:26:35:a0:
                    0f:24:d2:aa:e4:90:fd:d8:0d:22:d3:7c:81:7a:81:
                    99:d6:5a:ff:54:8c:0a:6c:20:31:6d:89:9e:f3:87:
                    3e:7a:25:5d:f7:78:dc:4c:00:f0:1c:b7:51:19:1b:
                    32:ec:aa:a8:49:38:ab:be:e4:57:ef:ef:c2:5a:3c:
                    63:9c:c4:dd:ca:c9:02:a3:4f:72:09:37:96:b1:5d:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:32:1D:A8:BF:19:64:00:0E:1C:82:2B:DA:19:9D:E9:55:F9:77:31
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IDIdqL8ZZAAOHIIr2hmd6VX5dzE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.118/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:c1:1d:53:c3:77:23:99:c2:d0:a7:10:61:a8:2f:1a:89:
         51:0d:ea:12:f7:e8:ed:02:37:9b:a2:e4:e4:5c:ed:e8:3a:ed:
         e1:39:8d:68:f4:0b:32:8f:cc:54:d5:3a:1c:00:19:9c:cb:99:
         0c:21:f7:d8:ea:9b:c4:12:04:8d:70:5a:96:1a:78:39:a0:fb:
         52:e0:ad:a0:24:54:94:c5:4c:28:df:f8:f4:c7:b5:22:e4:77:
         05:29:6f:59:3c:9b:65:38:33:41:8b:50:94:2c:93:da:14:77:
         26:0a:08:1a:98:a6:9a:e6:95:ba:c3:53:3f:8e:f3:39:5c:6e:
         78:66:1a:42:db:04:cf:04:c7:8e:5b:dc:fa:c1:7f:6e:ed:99:
         40:8a:09:b0:d2:f2:71:02:78:5a:de:15:42:4b:11:07:cd:73:
         ef:7f:0e:49:a9:b7:5c:39:f3:db:23:b1:f2:5b:17:36:53:3f:
         8b:1c:2b:38:8f:aa:33:72:1c:1e:ba:d8:26:ed:ac:39:95:ef:
         3d:53:7c:82:a5:06:69:2b:86:cc:d0:76:07:cc:97:bd:64:1b:
         00:7e:15:24:0b:03:ef:fa:54:10:e2:d3:7e:13:36:b8:c3:04:
         69:e8:13:a9:04:22:5e:9d:b4:0d:dd:5a:78:12:19:88:b8:e0:
         7a:c7:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----