Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QVklxhbquUpqj9dTJvU_JInRYos.roa
File:                     QVklxhbquUpqj9dTJvU_JInRYos.roa (raw, json)
Hash identifier:          NOm88iW1DyONXvRwZ+l1miHxsC66946IFCOcDajKQFk=
Subject key identifier:   41:59:25:C6:16:EA:B9:4A:6A:8F:D7:53:26:F5:3F:24:89:D1:62:8B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0290
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QVklxhbquUpqj9dTJvU_JInRYos.roa
Signing time:             Mon 20 Feb 2023 08:05:24 +0000
ROA not before:           Mon 20 Feb 2023 08:05:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.2/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=415925C616EAB94A6A8FD75326F53F2489D1628B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:bc:1f:13:97:97:3d:e5:3d:c4:af:e1:cf:
                    17:a9:1c:bf:1b:01:53:9c:17:75:1f:5e:9b:40:86:
                    cb:55:82:d1:3c:06:b4:e1:cb:fb:e2:86:6f:89:d0:
                    87:06:a2:ab:4e:4c:cf:c3:f6:0f:0d:d3:98:28:98:
                    a9:4e:12:a4:17:c8:dd:e0:be:ac:b6:41:d7:c6:ff:
                    0f:22:50:97:e6:fe:51:43:f6:41:a1:27:19:ca:66:
                    0d:19:9a:f0:84:64:47:6f:f7:5f:0a:ff:de:0e:fc:
                    30:2b:83:0d:c3:ef:4d:c5:1a:15:44:0b:80:97:8a:
                    1b:91:f4:0f:14:4f:03:ca:6b:c8:d9:c3:16:39:56:
                    b1:2a:e8:bd:e5:66:79:80:8e:e8:6a:e4:41:c5:8e:
                    6c:23:1c:31:ba:59:de:35:74:43:51:d6:68:6d:90:
                    59:05:d5:f9:97:a8:75:45:0d:b5:65:85:a1:d4:24:
                    da:03:9d:60:e4:72:5a:4e:00:5e:3c:f0:1d:db:ad:
                    f2:a2:24:59:97:ba:1b:3e:c5:fe:5d:32:5b:7c:13:
                    be:c0:c5:cf:3b:ca:d3:1c:a8:89:ae:5a:10:53:64:
                    e5:3e:ab:84:8f:d2:a4:93:ae:e7:e3:02:a8:e2:95:
                    dd:ac:35:91:43:fb:3b:a9:f0:b8:7b:fb:1e:21:a1:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:59:25:C6:16:EA:B9:4A:6A:8F:D7:53:26:F5:3F:24:89:D1:62:8B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QVklxhbquUpqj9dTJvU_JInRYos.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.2/32

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:ff:50:1c:c1:8d:ad:0e:28:9f:5b:ba:4f:08:8f:32:bd:
         52:25:7c:82:d6:56:5a:4d:4c:7d:7b:d4:34:83:81:a7:80:0f:
         bc:11:23:ea:25:47:13:f4:91:28:a4:44:3e:b2:92:09:d2:89:
         0f:40:9f:a8:66:c4:d3:9e:60:cc:91:b7:a6:94:75:d2:5b:24:
         84:45:a6:3e:f6:68:87:cb:46:00:2d:5b:4a:34:7e:03:18:70:
         75:de:d6:6a:60:3e:ed:7e:69:b0:5e:75:a7:63:2b:88:25:cd:
         ff:54:0b:6e:25:ff:d8:1e:e0:0b:3f:87:7a:9b:ec:7f:45:81:
         62:de:a3:06:2f:db:91:7f:db:74:88:ba:df:b2:80:6c:c1:4b:
         84:52:2e:d8:c9:e9:f5:c1:bd:a4:14:7d:70:6e:0c:cf:52:6e:
         1c:cb:4b:28:e9:75:5e:c5:ac:5d:a9:38:53:eb:45:2c:24:b2:
         a0:1e:69:a1:c2:e1:c6:85:9b:bc:19:90:59:1c:63:ee:22:9e:
         eb:d6:33:01:b7:0b:fc:e2:c1:62:79:c3:af:18:0d:26:d2:03:
         e6:75:bc:85:44:0d:79:e2:00:d1:e5:b0:65:1e:a4:f6:a8:d4:
         95:c4:4e:e7:0f:a5:97:0e:e0:99:a4:77:b7:45:b3:98:b6:6f:
         fd:30:66:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----