Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PxC43S4iF0JShdskLEYpFT1aA7I.roa
File:                     PxC43S4iF0JShdskLEYpFT1aA7I.roa (raw, json)
Hash identifier:          sE8gkPxJGHIO4ZGUMG+TQv8I/ZLzV0+N9yfk+PJWeJQ=
Subject key identifier:   3F:10:B8:DD:2E:22:17:42:52:85:DB:24:2C:46:29:15:3D:5A:03:B2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       020D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PxC43S4iF0JShdskLEYpFT1aA7I.roa
Signing time:             Mon 20 Feb 2023 07:57:37 +0000
ROA not before:           Mon 20 Feb 2023 07:57:37 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.154/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:37 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3F10B8DD2E2217425285DB242C4629153D5A03B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:da:96:bc:b5:eb:72:d9:fa:a2:1b:62:c0:
                    da:36:66:f6:46:81:42:74:da:0c:72:8b:d9:bf:8b:
                    24:a3:2c:75:f4:27:df:c5:5b:9b:88:5b:f4:58:6a:
                    db:d5:ee:d6:6a:03:24:a2:47:79:3a:2d:6e:7b:69:
                    ae:91:bc:41:f8:b1:8f:54:29:ef:f3:36:08:98:8f:
                    3e:1d:ac:0c:8a:42:ec:7d:a6:f2:6b:43:92:d9:27:
                    8b:51:1d:6b:34:15:a5:c3:9d:9a:3a:53:26:9b:cf:
                    d9:1e:79:1f:37:a7:3d:4b:32:48:60:6f:c0:11:93:
                    15:cd:00:0b:d1:14:86:34:1b:d4:29:82:b0:77:31:
                    d6:ae:3b:8b:bf:36:07:0b:13:f5:15:d3:73:5d:a4:
                    74:00:31:d2:54:6b:8c:a0:02:47:3e:6c:e9:61:e3:
                    7c:38:6f:b0:a7:a7:c5:11:89:7b:e9:c8:21:fb:3d:
                    2c:de:7f:67:00:22:a0:8d:16:21:11:51:d6:a0:8b:
                    ee:68:11:c3:8e:86:54:ca:a9:52:e8:48:cf:6e:a7:
                    72:1b:96:f0:e3:16:42:ae:ea:64:b7:3c:75:fb:f6:
                    dd:8d:98:8f:0b:a4:7e:c2:91:21:8a:3b:47:1e:be:
                    bf:48:3e:e9:39:ab:30:fb:57:0f:e0:61:82:e8:6a:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:B8:DD:2E:22:17:42:52:85:DB:24:2C:46:29:15:3D:5A:03:B2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PxC43S4iF0JShdskLEYpFT1aA7I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.154/32

    Signature Algorithm: sha256WithRSAEncryption
         08:1b:c4:cc:8b:24:87:f9:38:a5:4e:61:93:0c:0e:90:84:5a:
         15:81:ed:2a:06:10:d8:dc:2f:03:0c:3a:bd:9d:b2:d0:5f:1f:
         4a:fd:f3:23:63:0b:49:e1:f0:8f:28:53:ec:b6:9d:d2:3c:32:
         97:ef:5f:7e:b3:03:47:61:2d:22:95:1c:83:59:f3:b8:9e:ad:
         cc:dc:fc:22:c0:e8:8b:85:10:1f:72:36:d2:d6:70:5a:99:db:
         08:21:6e:ee:db:d6:1b:0f:83:de:df:f3:1b:18:82:48:ab:49:
         bb:d3:fe:4b:9b:81:71:84:d5:c1:2a:fa:27:13:f7:84:32:fe:
         a9:24:27:91:4b:40:75:95:10:37:6e:72:d1:01:c8:9a:8f:9f:
         f6:af:26:7f:10:e7:3a:dc:6a:fb:33:fc:09:98:72:13:bc:87:
         7f:69:26:48:4c:a6:05:38:6c:f8:73:eb:b4:47:b3:4e:d6:5f:
         be:6b:72:52:d1:c9:1e:78:93:b4:fd:08:2f:0a:7e:d2:9d:e0:
         0c:a3:07:12:eb:5d:70:c5:88:9a:7d:1a:6b:8e:fd:21:64:0a:
         c0:7a:22:a5:30:4a:d8:1e:e5:91:1f:25:1d:8f:a2:5d:d5:6b:
         52:f2:cf:b1:65:1d:99:7a:a3:6d:41:18:11:b7:46:b2:23:8a:
         4d:f0:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----