Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MyNO-pnM5SrU7cRJfJ72kjU2Rgw.roa
File:                     MyNO-pnM5SrU7cRJfJ72kjU2Rgw.roa (raw, json)
Hash identifier:          cmrtNlCyI0seo3TUllaAtJunHfvmOlvmJZzQxPyR8Fk=
Subject key identifier:   33:23:4E:FA:99:CC:E5:2A:D4:ED:C4:49:7C:9E:F6:92:35:36:46:0C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       022D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MyNO-pnM5SrU7cRJfJ72kjU2Rgw.roa
Signing time:             Mon 20 Feb 2023 07:59:27 +0000
ROA not before:           Mon 20 Feb 2023 07:59:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.228/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=33234EFA99CCE52AD4EDC4497C9EF6923536460C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:b1:1c:82:41:3d:d2:50:52:7f:52:26:40:
                    e0:c6:a5:86:d7:40:67:0c:f9:6f:50:86:05:e0:85:
                    54:6e:7b:bf:43:5c:dd:2c:d4:71:c3:d2:3f:cc:72:
                    b7:51:dc:27:82:f1:64:ad:c6:49:53:7f:fa:a1:05:
                    9b:1d:53:7f:c7:2f:70:75:b9:8e:c0:3e:cf:c9:a1:
                    06:66:9f:fd:c2:f3:07:0a:ab:72:b2:3a:3a:16:15:
                    89:ef:c2:3c:b0:d3:d0:8d:27:0f:2a:64:73:69:05:
                    52:e6:08:ca:b9:a8:97:09:f8:d8:a2:0f:35:6b:36:
                    13:00:1a:7f:c4:2b:49:f5:02:6b:b9:36:02:01:9e:
                    56:91:bf:35:3d:03:8b:61:cb:35:c0:f0:0b:e6:55:
                    09:f9:d7:c9:6d:36:14:e3:da:65:71:f4:7f:2d:31:
                    69:16:1a:71:72:2f:81:59:7b:5f:3c:c4:41:49:cc:
                    df:10:ad:5e:ec:b4:5f:da:f6:4f:93:65:5d:b6:a0:
                    dc:a6:6b:11:1a:82:4d:80:5b:ac:06:7f:02:0b:b7:
                    43:2e:7a:e8:45:eb:ad:b1:de:ba:23:27:8a:14:66:
                    b4:ba:f4:19:d1:e9:49:72:22:6d:88:99:b4:54:0f:
                    fb:4d:36:99:8e:a1:a9:ff:cb:81:64:fb:d5:4e:cb:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:4E:FA:99:CC:E5:2A:D4:ED:C4:49:7C:9E:F6:92:35:36:46:0C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MyNO-pnM5SrU7cRJfJ72kjU2Rgw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.228/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:2d:f0:8d:e7:21:d7:90:b7:19:ef:9c:9f:01:5e:94:ba:
         f3:73:ce:33:84:43:16:96:91:92:0d:32:bf:b9:46:4b:a3:eb:
         d0:6a:b2:8c:70:a6:89:9f:71:24:1d:2f:4d:fc:a1:63:c2:41:
         92:ff:7f:ac:db:e0:e4:c2:99:cc:a2:95:b9:88:7c:3b:3f:f9:
         0b:44:cc:cd:2d:44:cd:bf:00:43:f3:5c:56:18:88:a5:2e:8e:
         dd:05:ef:a0:6c:8a:1d:b5:7b:30:3f:26:5f:0f:04:de:6d:23:
         dc:12:29:ed:d0:38:f2:c1:34:09:ba:7c:13:4f:3f:f1:df:60:
         85:a1:b3:41:b4:3e:ed:32:21:64:b6:f8:fe:54:44:91:8e:af:
         05:59:a4:a3:f4:c4:30:bc:4e:bf:70:8b:49:07:07:f4:24:31:
         c2:ab:77:a4:d9:ee:58:ed:6c:07:7b:20:70:88:f1:a2:ec:a8:
         f4:f6:3f:2d:de:51:be:d7:10:d2:91:e4:aa:be:8e:e6:e7:d5:
         3c:fb:02:ae:2e:f5:88:4d:d4:31:f0:dd:26:4a:82:3b:c3:66:
         f2:08:2f:17:37:8b:41:38:5f:bf:64:ba:9e:1e:a8:22:9c:7e:
         4e:3e:95:43:e2:7f:b3:2f:5e:4e:c1:c8:63:70:19:65:f6:cd:
         37:b6:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----