Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PpfXeaSZjGRURUzjnftU82BXgrQ.roa
File:                     PpfXeaSZjGRURUzjnftU82BXgrQ.roa (raw, json)
Hash identifier:          LdedoReX+fiIzqZsraPKUkU67qL5PJPJlb9PAJQcyAE=
Subject key identifier:   3E:97:D7:79:A4:99:8C:64:54:45:4C:E3:9D:FB:54:F3:60:57:82:B4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0287
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PpfXeaSZjGRURUzjnftU82BXgrQ.roa
Signing time:             Mon 20 Feb 2023 08:03:37 +0000
ROA not before:           Mon 20 Feb 2023 08:03:37 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.85/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:37 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3E97D779A4998C6454454CE39DFB54F3605782B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f3:15:f4:37:30:a2:28:d0:e1:73:3f:be:cf:
                    dc:59:09:b2:f5:0a:66:6d:c8:67:04:b2:3c:4d:a4:
                    93:0f:66:62:04:64:24:ac:3f:1f:66:c3:a0:fc:7d:
                    53:5e:c8:1d:16:8c:38:1e:8e:64:ca:87:0f:bb:06:
                    61:32:3a:3b:ad:31:bc:a9:1d:9e:51:f6:dc:29:7a:
                    4b:aa:9b:e7:89:f6:1c:bb:86:9b:e9:27:a6:20:2e:
                    6e:44:25:d0:75:a6:4f:dc:18:06:c1:68:22:4c:bc:
                    87:e1:b8:f4:d7:52:ea:9c:c0:e7:4b:ec:32:38:95:
                    3c:0a:4f:35:13:d0:6d:41:79:17:c9:30:36:c2:6f:
                    c4:95:19:22:54:9e:4d:cf:8a:3d:84:f1:5a:ee:b0:
                    59:bc:e0:34:b3:dc:3c:d2:34:bc:1d:b2:c0:88:10:
                    9f:f3:be:db:d2:c1:72:f9:9c:1b:f6:17:1e:e5:23:
                    e3:ea:77:b9:16:58:87:19:50:e2:dd:50:d6:44:5a:
                    ea:68:86:ca:d0:8b:c6:c7:5f:2e:68:d5:bb:03:20:
                    44:26:29:be:c5:8a:b9:45:1d:28:b9:51:43:bb:9c:
                    bd:84:67:43:bf:19:ca:f7:c7:7a:f6:7b:50:9a:0c:
                    c8:0f:4a:df:b0:a9:7f:40:08:77:b4:56:8f:92:f5:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:97:D7:79:A4:99:8C:64:54:45:4C:E3:9D:FB:54:F3:60:57:82:B4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PpfXeaSZjGRURUzjnftU82BXgrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.85/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:33:1d:43:d6:10:49:5f:b0:c1:65:28:24:1b:d8:77:52:
         3e:43:27:25:ad:66:d1:0a:fd:04:0c:cc:fd:b2:68:dc:85:bd:
         a8:fe:e9:22:1a:9e:cf:5b:4a:fa:7d:6f:e2:4c:c9:83:cb:68:
         58:0e:47:ca:e0:37:78:bd:9e:c2:ef:fc:55:47:8a:ac:24:61:
         cd:64:0a:2d:ff:94:fb:22:74:b4:4b:5c:e5:2b:24:db:a6:40:
         af:d8:d3:73:49:0b:d4:2a:df:af:c3:87:7c:05:6b:12:89:65:
         55:4d:3b:61:ae:4f:70:09:8b:a4:ef:e6:2c:9d:89:c0:37:3e:
         10:49:a7:35:dc:57:78:f4:33:d4:5e:54:0c:7a:14:aa:c8:f1:
         29:15:fb:f1:38:fd:0b:11:fe:d1:d6:fc:ae:52:d3:73:03:39:
         93:cb:85:61:81:46:64:3a:b0:26:14:48:83:57:97:1e:2f:d5:
         00:05:5f:aa:11:e1:bd:23:6b:16:63:8a:e7:51:11:82:ac:b7:
         a2:14:fb:a0:b5:a0:f2:3e:cf:d3:99:e9:35:c1:03:d6:dc:dd:
         20:e4:75:d4:19:f6:a7:c9:ea:b0:ef:e0:8b:3b:37:00:3c:cd:
         c0:0a:9d:db:12:83:a5:04:2d:f6:d8:78:2f:a7:78:fc:e8:12:
         4d:5a:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----