Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NRmHbv5KdWl6mShVZhmLFcOqW5U.roa
File:                     NRmHbv5KdWl6mShVZhmLFcOqW5U.roa (raw, json)
Hash identifier:          8kbzVYdtiNQSa7SPaVCKlcNPTFDWYb7Xd+UzEPjiRDI=
Subject key identifier:   35:19:87:6E:FE:4A:75:69:7A:99:28:55:66:19:8B:15:C3:AA:5B:95
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02D8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NRmHbv5KdWl6mShVZhmLFcOqW5U.roa
Signing time:             Mon 20 Feb 2023 08:07:32 +0000
ROA not before:           Mon 20 Feb 2023 08:07:32 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.109/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:32 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3519876EFE4A75697A99285566198B15C3AA5B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:7f:3e:e6:15:1c:3b:93:23:8f:00:53:24:
                    3c:7d:7f:d5:70:f0:83:21:70:45:01:d3:d4:84:93:
                    7b:51:5e:2c:28:10:11:40:9d:30:3c:27:5b:07:bf:
                    9f:84:ba:22:d6:49:b7:0e:dc:cf:4d:86:c4:0a:3c:
                    3d:fc:6b:c7:45:84:a1:84:98:e7:f7:32:83:a0:7e:
                    57:d2:0a:b9:9a:88:46:aa:e1:23:c0:53:2a:f7:3a:
                    52:05:62:98:3e:74:1b:07:d2:40:64:16:5b:4c:fa:
                    d0:87:fa:4d:e0:89:43:59:f9:02:f1:a9:09:5e:12:
                    36:d6:27:da:38:b6:40:90:a7:f8:dc:f9:cc:8c:54:
                    5a:d8:b6:75:ea:06:10:0d:88:8a:2e:7f:7e:68:72:
                    b6:58:e5:84:70:b6:9b:95:ad:1a:49:80:b1:23:62:
                    89:47:e1:37:19:a2:ea:b0:e7:32:80:d4:55:23:4d:
                    0a:72:78:1b:d7:0f:c4:91:2f:e5:28:86:bb:1c:7a:
                    05:53:24:4a:66:a8:0a:f7:ca:54:60:6e:4e:c9:46:
                    79:e4:e0:57:5e:32:c1:18:03:af:5a:78:cd:4a:d9:
                    55:29:6f:52:0b:56:0c:3b:31:ec:0b:30:33:47:27:
                    f2:49:f6:65:b9:71:08:50:fa:dd:ec:47:04:e8:17:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:87:6E:FE:4A:75:69:7A:99:28:55:66:19:8B:15:C3:AA:5B:95
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NRmHbv5KdWl6mShVZhmLFcOqW5U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.109/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:36:f4:1a:7f:7b:17:a1:5f:9d:61:b8:3e:6c:d8:eb:dc:84:
         a8:0e:75:f8:b2:1e:45:d3:b0:85:9d:98:63:66:d1:9d:f3:e9:
         2b:01:d9:7e:17:77:3c:38:6a:a0:25:a7:28:0a:f2:b1:76:7b:
         16:1d:dc:70:a1:f9:f5:38:e9:83:de:b9:d3:5c:2d:62:75:79:
         91:be:b4:48:8e:74:49:30:7f:f0:b2:1e:d4:db:bd:3f:23:18:
         ab:1f:5c:5e:62:dd:de:f4:21:d2:3b:df:9d:60:40:e6:df:63:
         ee:fc:de:2e:b4:4b:f8:42:ac:3b:21:5e:04:9c:b2:5b:14:d2:
         8c:0f:84:b5:22:9e:64:ad:2f:f5:57:fa:33:d1:c6:e8:cc:c9:
         27:0a:30:0d:b3:51:81:fb:39:7a:61:0f:51:6d:7e:77:a7:f4:
         e3:0d:d3:c9:8a:38:9e:14:e3:bc:36:e2:0f:b0:42:21:77:fe:
         3b:4f:93:88:ca:b5:d5:81:88:bf:bb:b5:64:81:fc:46:59:b0:
         10:3a:d8:54:53:95:8d:dd:11:0c:eb:60:5b:42:5a:c9:62:8a:
         7c:9a:cd:3d:47:28:8a:c7:4a:67:fa:c0:2f:19:56:9d:b1:1f:
         5e:38:97:a0:ed:71:8a:7d:f6:75:9f:1f:6a:7e:5b:c0:54:63:
         f0:97:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----