Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MhP6kLQ0TqMvrt_yHAgZBU7fjNA.roa
File:                     MhP6kLQ0TqMvrt_yHAgZBU7fjNA.roa (raw, json)
Hash identifier:          bWbDiFEpyRaESiY4hTdPRE+UULxXoUBi3SBySZBzCuw=
Subject key identifier:   32:13:FA:90:B4:34:4E:A3:2F:AE:DF:F2:1C:08:19:05:4E:DF:8C:D0
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0274
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MhP6kLQ0TqMvrt_yHAgZBU7fjNA.roa
Signing time:             Mon 20 Feb 2023 08:03:31 +0000
ROA not before:           Mon 20 Feb 2023 08:03:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.92/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3213FA90B4344EA32FAEDFF21C0819054EDF8CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:e1:5c:5b:ac:1d:e3:c1:7d:b0:10:a5:fc:
                    83:90:97:8f:48:4a:32:a6:05:e5:18:7d:d5:40:e1:
                    d7:ed:f7:2a:ae:bd:4c:a0:68:e2:fd:59:4e:0f:5d:
                    fb:fd:86:b8:0c:d8:48:39:25:3e:8c:cb:48:32:fc:
                    9d:b9:b5:47:bc:84:06:ef:e1:4d:a1:f5:a6:3a:c3:
                    14:2d:60:8c:87:e7:42:23:a7:70:cf:fc:87:d0:b4:
                    f5:5e:3a:64:91:dd:b5:06:6a:d4:2b:d1:05:f2:67:
                    0b:27:8e:e6:c3:78:70:40:06:19:48:dd:57:f7:38:
                    1f:e0:5f:e4:ad:d9:63:b4:3d:15:b5:fa:08:a0:d6:
                    b6:77:26:c4:68:5e:c7:73:99:52:cc:ae:e1:22:8f:
                    b2:5e:f9:50:f3:55:ae:d2:ee:38:29:6e:70:50:61:
                    bd:b6:c3:fa:88:58:6d:8c:72:57:49:f7:14:9b:b4:
                    ad:dd:5b:48:f1:7b:55:6e:0a:28:94:66:fe:f6:87:
                    eb:56:38:7d:ef:ee:18:23:6e:8c:4e:7a:84:1d:e7:
                    80:73:8c:fc:61:0b:02:0a:29:74:f1:d5:fc:eb:d2:
                    b4:df:01:57:e0:f4:ef:8e:bf:48:1a:51:b4:3b:0f:
                    ee:b8:17:86:49:d1:05:88:9e:fd:e9:b4:a3:c7:48:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:13:FA:90:B4:34:4E:A3:2F:AE:DF:F2:1C:08:19:05:4E:DF:8C:D0
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MhP6kLQ0TqMvrt_yHAgZBU7fjNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.92/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:11:b6:f6:3c:fa:80:6f:b1:7d:f8:26:94:89:eb:0b:ee:
         36:fd:35:84:b4:82:f3:94:05:54:74:d0:e5:bd:aa:f5:59:2c:
         90:d2:70:0f:ad:43:13:28:b6:27:94:98:68:64:27:bc:66:37:
         ef:fa:7b:b7:6c:03:21:9e:09:b3:64:57:09:c3:9c:5d:67:7c:
         62:43:27:ef:cb:88:73:db:00:b3:08:1a:39:b2:54:44:57:d7:
         fd:47:7e:e9:22:1b:85:1a:e2:d5:5a:bd:5a:ca:7e:8b:f5:eb:
         48:54:c8:6d:b9:06:63:c2:d9:51:90:45:8c:13:5e:68:08:db:
         45:5c:d4:e6:c5:49:6f:97:b9:9d:a4:11:0e:93:e2:dc:86:4d:
         1e:e9:9d:75:ae:b9:a1:6d:ee:1a:95:53:78:85:26:4e:c4:11:
         4d:21:6a:ae:46:84:af:b8:ab:29:a3:f0:7a:c0:ab:8f:44:59:
         ef:15:2f:b7:7c:ad:d7:ae:94:c8:94:86:bd:f9:9f:92:e0:54:
         38:a6:ce:cd:38:bf:26:50:b7:97:0f:23:38:d2:f1:54:38:ab:
         5b:8b:ad:ad:c7:5e:66:c7:87:74:ec:ab:88:9e:46:be:63:20:
         03:0f:e4:bd:37:b4:4c:8c:75:11:90:e7:99:e2:a8:3d:02:b2:
         80:bf:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----