Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NdcCV3JsfZqOv5t2CAjylXyD160.roa
File:                     NdcCV3JsfZqOv5t2CAjylXyD160.roa (raw, json)
Hash identifier:          792SZsxVkahkiqxsE94qstHCiUr0Jj6fkgVaYj4qpRo=
Subject key identifier:   35:D7:02:57:72:6C:7D:9A:8E:BF:9B:76:08:08:F2:95:7C:83:D7:AD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       024C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NdcCV3JsfZqOv5t2CAjylXyD160.roa
Signing time:             Mon 20 Feb 2023 08:01:28 +0000
ROA not before:           Mon 20 Feb 2023 08:01:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.114/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=35D70257726C7D9A8EBF9B760808F2957C83D7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:82:fe:b1:ca:7a:98:97:33:9c:02:5b:ec:
                    74:8b:0b:9e:96:d1:83:13:16:14:a6:3f:f3:f1:dc:
                    ae:d0:66:b4:e1:b3:26:52:29:be:d8:0c:ac:14:bf:
                    f6:e9:52:ab:9d:03:87:05:75:0d:fe:ef:ac:7e:6a:
                    31:47:ca:8d:71:ed:60:4a:fa:66:89:b4:22:a4:a4:
                    21:c9:b9:56:9f:39:cc:4e:2d:12:ad:73:e5:cc:70:
                    3d:46:1d:2e:c4:1c:89:af:40:4a:cd:18:3d:a4:fb:
                    06:45:98:99:d3:d9:e0:50:ce:fe:ca:bd:9b:22:e2:
                    d7:74:49:fd:f8:72:2c:b2:eb:9f:e7:4d:95:80:ac:
                    17:7f:fd:20:e8:76:68:6e:ce:da:92:93:58:07:a5:
                    5d:14:87:e0:62:47:c3:bb:d8:79:8f:00:b5:d5:6d:
                    50:c0:3f:ff:25:35:2f:63:bc:4d:68:4f:d3:48:5c:
                    a3:c3:97:af:e2:cd:6a:1f:b5:40:5f:72:b7:cb:f2:
                    ab:2a:7f:12:d3:5d:23:b1:9a:ba:60:6a:46:92:30:
                    07:43:4e:1a:e4:60:c6:85:14:eb:dc:ed:25:c2:4e:
                    93:85:fd:7c:ca:dd:73:00:0b:48:f2:fb:70:ea:14:
                    ff:9f:8c:2b:52:23:74:65:bf:93:b4:27:42:1c:5b:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D7:02:57:72:6C:7D:9A:8E:BF:9B:76:08:08:F2:95:7C:83:D7:AD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NdcCV3JsfZqOv5t2CAjylXyD160.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.114/32

    Signature Algorithm: sha256WithRSAEncryption
         40:30:67:97:42:35:77:b9:77:c2:eb:c7:6b:8d:be:da:63:9e:
         e2:f7:0b:57:5d:ba:0f:a9:ad:a4:df:f0:d5:ac:2a:2c:32:2e:
         33:2a:17:f1:76:1f:6d:bb:e9:ec:e1:6d:1e:a8:23:48:75:63:
         cb:87:03:94:e8:4c:81:fa:0c:66:1b:bc:6a:a4:9c:42:b7:55:
         1f:6d:91:2c:40:21:18:0c:a3:66:c0:ec:59:04:3b:e3:a6:a1:
         85:7f:fa:24:28:0d:ad:de:d1:ce:2b:5a:c6:6a:ab:a7:a3:d6:
         50:4b:47:3c:2b:02:e5:ff:88:45:4e:e4:5b:2a:53:9b:b3:b1:
         d2:a2:59:18:3c:03:92:b6:76:f4:1f:cb:37:d6:97:75:fd:38:
         5c:ed:b0:03:dd:9f:46:01:21:89:0f:a8:06:bb:8f:16:f0:c9:
         af:2b:e6:66:4c:ba:a6:75:71:eb:a8:34:ab:2b:66:3c:55:35:
         02:02:9b:66:46:c8:6d:9d:61:9e:23:3b:40:85:96:e5:fd:63:
         d6:c5:fd:88:04:fb:b1:11:8d:19:03:ea:0e:8b:55:30:5c:3c:
         5f:02:e5:03:8f:c5:f7:90:20:ff:d9:e3:c4:8f:a0:a7:ab:40:
         ae:b3:32:e3:f3:3d:52:c9:f1:40:71:c0:9e:45:b2:cd:eb:16:
         30:e2:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----