Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OdWAC3qydvLjHTuADu2xE0Axeoc.roa
File:                     OdWAC3qydvLjHTuADu2xE0Axeoc.roa (raw, json)
Hash identifier:          si8sRZ0mC3XpAxcdbSn5W4WPpkJefGU7oMMbvVvVb10=
Subject key identifier:   39:D5:80:0B:7A:B2:76:F2:E3:1D:3B:80:0E:ED:B1:13:40:31:7A:87
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02AC
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OdWAC3qydvLjHTuADu2xE0Axeoc.roa
Signing time:             Mon 20 Feb 2023 08:05:34 +0000
ROA not before:           Mon 20 Feb 2023 08:05:34 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.86/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:34 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=39D5800B7AB276F2E31D3B800EEDB11340317A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:73:db:f7:01:63:ce:30:a1:f1:e0:46:47:
                    1d:df:8b:52:3a:7c:b6:d6:58:fc:4a:d8:ea:82:27:
                    f5:21:75:11:40:1b:df:a2:54:be:29:7f:2d:a1:23:
                    e6:59:42:ec:d8:91:0b:2b:a1:96:4c:f3:e2:40:9b:
                    38:70:6f:a2:db:25:62:f2:62:6e:02:06:9b:35:69:
                    02:56:75:a0:b3:8c:43:25:0e:81:16:57:a0:92:5c:
                    e1:a2:b3:87:b0:71:e9:c6:4d:ee:bf:2d:5b:ad:7e:
                    92:4a:f9:4e:ac:63:ed:06:47:77:a4:81:4c:43:06:
                    1a:14:a6:ee:cc:c0:16:77:18:33:32:c4:af:45:aa:
                    48:9d:eb:5b:d1:5b:6a:dc:3b:ef:c3:41:fa:ff:51:
                    d0:ae:34:cc:be:f5:8f:d2:03:75:c9:5c:4e:3c:e1:
                    fe:8a:78:ec:81:71:f0:f7:01:40:83:e4:c5:00:3b:
                    fd:13:07:e8:69:c6:6f:0f:5c:9d:b6:ff:dc:50:0c:
                    5c:ce:8a:88:89:2c:8c:a0:03:3e:c1:1a:a4:74:bb:
                    03:92:0e:28:a2:06:70:ee:5b:34:c8:b1:ad:3f:95:
                    39:6d:0c:0e:77:ed:fd:fd:3b:91:d3:fb:fd:40:b9:
                    81:ca:20:72:a9:a7:43:75:68:2a:c8:b6:c9:71:1d:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D5:80:0B:7A:B2:76:F2:E3:1D:3B:80:0E:ED:B1:13:40:31:7A:87
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OdWAC3qydvLjHTuADu2xE0Axeoc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.86/32

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:0c:df:5a:d5:8d:b2:48:3c:2c:84:0b:6a:2c:e6:4a:34:
         df:1d:26:c6:e9:99:a6:37:36:07:9a:38:60:e9:31:f8:59:11:
         b6:17:82:81:8a:24:56:6a:65:1d:b5:fb:8a:48:a0:eb:0f:11:
         56:e3:ae:c9:8f:aa:c3:af:e7:f8:3d:7b:55:01:a7:37:c5:55:
         e8:75:09:ff:0f:83:0c:00:ed:b4:7e:fe:2f:69:84:1f:cb:f1:
         ff:91:2a:b3:c4:89:e2:34:78:31:3d:b6:7a:65:d5:02:cc:dd:
         ef:b9:cf:1a:f8:b1:56:20:c8:37:3b:43:44:21:8e:6a:fe:84:
         37:ba:0e:45:44:9f:c5:ab:b1:c4:14:6b:ea:45:95:44:29:29:
         49:e3:94:dd:e5:47:a5:34:19:c8:13:21:bc:c4:a5:e6:59:58:
         d2:ac:73:c5:0c:b5:d3:90:d2:b8:8a:cd:a6:25:22:f2:1b:6a:
         d8:49:0c:3b:22:0e:17:34:9f:fa:2e:0b:0d:85:ae:46:bb:35:
         75:be:77:45:a1:e6:a8:52:43:2f:43:ce:d8:50:bf:f0:52:4a:
         b1:c8:55:83:e6:1e:4a:14:6c:8f:c7:73:9c:22:db:dd:fb:37:
         11:79:cc:1b:5e:af:08:3d:92:8e:76:17:f9:c9:21:24:9c:f0:
         eb:c6:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----