Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NDy9ghJRaTyxCnWaPoeaEATh2vw.roa
File:                     NDy9ghJRaTyxCnWaPoeaEATh2vw.roa (raw, json)
Hash identifier:          1E7ilIbYJqOCReCg5JIKinadxWfODqdZvpt/VP2JF94=
Subject key identifier:   34:3C:BD:82:12:51:69:3C:B1:0A:75:9A:3E:87:9A:10:04:E1:DA:FC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       8D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NDy9ghJRaTyxCnWaPoeaEATh2vw.roa
Signing time:             Fri 10 Feb 2023 07:45:36 +0000
ROA not before:           Fri 10 Feb 2023 07:45:36 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.161/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:36 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=343CBD821251693CB10A759A3E879A1004E1DAFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:ac:29:75:b8:6b:4e:dd:92:fc:7c:96:0b:
                    f8:c1:23:ae:d8:87:b9:35:af:a5:1d:27:c3:ee:60:
                    50:c3:f1:5f:38:92:77:69:eb:d1:4e:b0:b1:b5:45:
                    39:00:54:8f:9a:42:bc:31:ef:87:b2:fd:f2:1f:db:
                    03:49:c9:57:6d:fc:ac:b7:a5:d8:b9:14:5c:77:fb:
                    d9:b2:fc:98:54:27:9c:ff:bf:b2:de:83:f3:24:b5:
                    9d:13:3a:d1:e7:de:b3:a1:63:13:46:ed:07:bc:5e:
                    0c:97:96:a0:2e:fe:e0:77:c3:38:e5:69:00:65:db:
                    59:c9:25:6f:8a:5b:29:eb:ee:9d:d4:38:ee:26:9a:
                    bc:a3:58:0b:72:4e:c9:bd:35:58:a6:f8:bb:95:83:
                    dd:e3:48:20:d1:d0:9e:8f:ff:d1:81:b5:00:c4:0e:
                    f2:3d:85:c2:78:fd:e7:bd:fc:e1:5e:51:de:3a:0a:
                    e7:7f:c7:29:1b:58:bb:76:db:a8:06:b7:ea:7f:92:
                    ed:7d:5b:6f:66:c0:7f:fc:7e:50:b1:1a:28:19:ae:
                    86:90:c9:2a:87:70:d3:5f:05:7b:ca:78:f7:92:53:
                    6f:bf:fa:3c:b0:6d:13:fd:de:38:d0:aa:e6:7e:52:
                    f3:70:4d:68:ef:76:95:16:63:e7:40:fe:b7:0d:da:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:BD:82:12:51:69:3C:B1:0A:75:9A:3E:87:9A:10:04:E1:DA:FC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NDy9ghJRaTyxCnWaPoeaEATh2vw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.161/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:95:da:bb:48:bc:71:85:de:d7:c9:46:b5:52:26:79:98:
         1c:f9:44:a3:43:ea:5b:ad:e0:ff:ad:83:27:f7:2f:6f:75:52:
         2e:90:2a:38:37:91:73:8a:ee:bd:dc:72:ca:4b:2e:52:be:10:
         b8:59:89:8f:81:34:05:11:60:3f:af:18:14:48:22:4e:ea:8b:
         c9:24:47:ba:83:7c:c2:be:70:2a:17:10:64:54:62:60:e0:72:
         37:8b:ea:55:ab:1b:9d:6c:05:f1:66:4e:48:42:b2:58:b8:79:
         6d:83:d4:e3:15:30:0e:3c:b2:bc:5d:49:aa:fb:e9:27:c3:03:
         c0:03:87:64:b2:7c:27:4f:aa:69:f9:70:a1:37:e5:cd:f3:e8:
         7b:cc:43:f3:c1:ec:fa:fe:42:c8:83:d3:fc:be:9f:f7:ea:32:
         81:46:64:45:06:ec:14:c0:42:71:8b:f9:8b:30:a1:d9:90:cf:
         5c:30:cf:5e:81:b3:6b:cd:3e:cb:89:84:a3:d7:a8:ea:86:41:
         63:a7:e3:d9:b7:d6:f4:3a:5c:fa:d4:4f:61:cd:70:8e:23:17:
         93:de:cd:39:7e:dd:9c:86:86:af:bd:10:f2:a0:c8:04:ce:5a:
         62:a8:d8:e9:14:2f:0d:bc:58:3f:78:00:ba:20:b6:84:fc:f0:
         24:a4:81:cc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTAw
NzQ1MzZaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0M0NCRDgyMTI1MTY5
M0NCMTBBNzU5QTNFODc5QTEwMDRFMURBRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK26wpdbhrTt2S/HyWC/jBI67Yh7k1r6UdJ8PuYFDD8V84kndp
69FOsLG1RTkAVI+aQrwx74ey/fIf2wNJyVdt/Ky3pdi5FFx3+9my/JhUJ5z/v7Le
g/MktZ0TOtHn3rOhYxNG7Qe8XgyXlqAu/uB3wzjlaQBl21nJJW+KWynr7p3UOO4m
mryjWAtyTsm9NVim+LuVg93jSCDR0J6P/9GBtQDEDvI9hcJ4/ee9/OFeUd46Cud/
xykbWLt226gGt+p/ku19W29mwH/8flCxGigZroaQySqHcNNfBXvKePeSU2+/+jyw
bRP93jjQquZ+UvNwTWjvdpUWY+dA/rcN2o7BAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUNDy9ghJRaTyxCnWaPoeaEATh2vwwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9ORHk5Z2hKUmFUeXhDbldhUG9lYUVBVGgydncu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaoTANBgkqhkiG9w0BAQsFAAOCAQEAXvyV2rtIvHGF3tfJRrVS
JnmYHPlEo0PqW63g/62DJ/cvb3VSLpAqODeRc4ruvdxyyksuUr4QuFmJj4E0BRFg
P68YFEgiTuqLySRHuoN8wr5wKhcQZFRiYOByN4vqVasbnWwF8WZOSEKyWLh5bYPU
4xUwDjyyvF1JqvvpJ8MDwAOHZLJ8J0+qaflwoTflzfPoe8xD88Hs+v5CyIPT/L6f
9+oygUZkRQbsFMBCcYv5izCh2ZDPXDDPXoGza80+y4mEo9eo6oZBY6fj2bfW9Dpc
+tRPYc1wjiMXk97NOX7dnIaGr70Q8qDIBM5aYqjY6RQvDbxYP3gAuiC2hPzwJKSB
zA==
-----END CERTIFICATE-----