Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P9ESIeiMlAaHllrcOUG1oFW1bbI.roa
File:                     P9ESIeiMlAaHllrcOUG1oFW1bbI.roa (raw, json)
Hash identifier:          006xu93XGiplRfr3aEDXyHs5PdFDstcVpZ8GdJLrcGM=
Subject key identifier:   3F:D1:12:21:E8:8C:94:06:87:96:5A:DC:39:41:B5:A0:55:B5:6D:B2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       013E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P9ESIeiMlAaHllrcOUG1oFW1bbI.roa
Signing time:             Wed 15 Feb 2023 02:28:25 +0000
ROA not before:           Wed 15 Feb 2023 02:28:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.40/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3FD11221E88C940687965ADC3941B5A055B56DB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:07:73:45:c5:11:7b:ec:8e:b6:75:1b:cd:
                    da:e7:b6:ce:94:4e:0b:bf:d8:4d:89:e4:d0:59:cc:
                    48:49:6c:ad:c9:46:f0:51:b8:58:8b:ae:e6:31:d9:
                    87:0f:2a:fb:af:39:a6:35:c9:a8:e7:d2:5c:5f:0e:
                    61:6a:89:67:f5:a3:38:64:a8:22:e6:3a:f1:4b:16:
                    dd:01:53:11:5e:19:7d:88:70:87:ea:50:75:82:69:
                    4e:8d:8e:4d:0e:7f:07:d4:60:9b:db:4f:56:96:f4:
                    52:b2:e1:86:d3:93:78:5d:9d:93:2f:2e:c0:a6:78:
                    37:c1:5e:98:1e:b0:bc:f8:d3:bf:51:9f:38:58:d2:
                    c1:12:7b:67:8e:57:70:38:9b:4f:8a:6c:fc:61:96:
                    b9:ed:de:ca:77:c5:42:77:ec:90:39:6d:09:48:73:
                    c0:bc:e5:fa:e3:2d:61:0e:52:68:e0:79:23:c2:3d:
                    35:88:64:b2:e8:f6:9c:d0:b2:ef:83:af:9d:c7:cb:
                    08:a5:7b:76:59:cc:d1:06:48:a9:9d:61:84:d8:ce:
                    99:be:9a:87:5d:ac:36:0b:55:cc:fe:83:d5:00:a4:
                    5a:cc:6a:27:08:15:b1:38:0b:7b:9a:93:d6:0b:18:
                    76:37:57:90:47:de:19:03:9b:d0:fa:4f:83:18:df:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D1:12:21:E8:8C:94:06:87:96:5A:DC:39:41:B5:A0:55:B5:6D:B2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P9ESIeiMlAaHllrcOUG1oFW1bbI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.40/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:94:8a:94:9b:81:58:04:73:35:62:65:d0:e7:31:3b:30:
         db:7f:25:58:6b:a1:a3:26:50:4e:0a:84:22:23:68:37:2d:4b:
         f6:7d:b3:4b:95:58:47:d8:35:7d:43:fc:34:18:b0:ba:ff:d1:
         a3:28:58:cb:78:ff:37:1e:a3:a8:0c:ee:dc:c3:b8:fa:5e:0e:
         24:6f:23:b0:ad:2e:7a:16:fc:5d:29:60:e4:35:d5:40:f0:99:
         51:71:82:68:cb:17:f7:49:c0:9b:46:5a:9a:ba:54:16:1a:22:
         ce:48:05:da:ed:56:f0:ad:7b:e0:93:e7:15:39:70:bd:ba:8b:
         f7:94:7f:85:c3:af:c8:46:8b:aa:e5:53:e4:d3:97:74:5b:66:
         3b:dc:23:3f:ad:29:f4:aa:26:90:5e:32:ef:0e:37:63:a1:d8:
         e6:6b:c0:b2:ba:2d:a1:d3:b3:f2:5b:26:92:5f:b7:c2:7a:f9:
         5c:d2:ba:47:6f:40:7e:21:22:60:a9:56:83:e5:33:3b:b8:ff:
         51:32:7f:ba:20:f7:92:2a:d8:5f:7d:d1:0c:51:c8:57:ce:dc:
         94:fa:8c:c3:6d:5d:3b:d3:99:d6:75:0d:c6:c6:06:50:69:33:
         85:ee:a9:1b:fa:8b:e9:c6:56:75:4f:88:1b:b5:4e:f1:54:aa:
         7f:26:32:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----