Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QX0KWnuxSG3CVFltqo6MI9zd2cM.roa
File:                     QX0KWnuxSG3CVFltqo6MI9zd2cM.roa (raw, json)
Hash identifier:          +BwXbr4gLLWvJ/QGQVgPgAXNR9rkSXtbGw03pstwP9A=
Subject key identifier:   41:7D:0A:5A:7B:B1:48:6D:C2:54:59:6D:AA:8E:8C:23:DC:DD:D9:C3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0201
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QX0KWnuxSG3CVFltqo6MI9zd2cM.roa
Signing time:             Mon 20 Feb 2023 07:57:33 +0000
ROA not before:           Mon 20 Feb 2023 07:57:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.70/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=417D0A5A7BB1486DC254596DAA8E8C23DCDDD9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:59:fe:d1:1a:fd:69:15:c8:19:87:f3:17:
                    3b:bb:1e:17:cd:82:e8:19:eb:1e:ba:c6:1e:ca:40:
                    d5:a6:3a:d0:e1:b6:f3:d6:6c:0a:ea:bb:0c:7c:a6:
                    8b:97:29:4a:7c:5c:d1:34:f0:3d:de:86:25:8b:40:
                    9c:13:9f:b8:5c:f0:5a:0c:44:30:1e:9c:ef:48:c1:
                    cc:82:9d:78:d9:37:2f:ed:87:af:12:2e:8f:c7:2c:
                    a2:4c:d5:2d:35:35:34:87:ea:5d:4b:59:f1:89:ae:
                    1b:e6:52:a1:ee:03:6b:67:f0:7f:9e:13:c3:e5:eb:
                    26:cb:57:b8:3d:63:9c:7e:ac:98:95:3d:7a:25:0f:
                    60:ab:55:91:ff:23:b1:e7:b5:1c:38:f6:d8:c4:a2:
                    14:ce:45:9b:09:e9:45:c1:74:02:94:0a:bd:61:d7:
                    40:b1:f6:26:53:03:93:d6:12:42:59:30:f8:46:52:
                    2a:a0:1b:c1:d8:79:7e:95:88:0c:f7:8d:f5:fe:19:
                    02:9f:a0:1b:73:4f:cc:26:71:f5:0a:ac:96:90:3a:
                    46:bb:c2:70:5c:ef:b1:49:ca:01:0b:5c:58:c6:30:
                    41:41:90:78:87:8d:7c:4a:a8:a9:29:9b:2c:70:a7:
                    28:11:b9:c5:c5:3b:70:d3:ab:58:3a:ba:e0:83:d3:
                    26:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7D:0A:5A:7B:B1:48:6D:C2:54:59:6D:AA:8E:8C:23:DC:DD:D9:C3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QX0KWnuxSG3CVFltqo6MI9zd2cM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.70/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:d6:24:af:80:04:0e:76:fb:78:5a:74:ea:44:dc:58:a9:
         72:21:e0:45:69:72:fa:92:b3:a3:61:7a:b6:c2:9d:84:5d:4e:
         83:ec:94:4b:e6:80:e3:dd:93:de:32:b9:39:4f:6f:69:49:a2:
         f3:8f:c7:a5:f5:50:d1:ca:fb:a7:76:9b:63:d6:60:46:a9:4b:
         54:75:39:8b:d7:e3:ca:05:2c:18:05:76:45:ff:c5:6f:a5:61:
         78:db:e1:ce:2c:c5:f2:9c:d2:94:29:36:d1:e4:78:a3:c7:ee:
         84:67:73:f9:e4:9a:08:0b:a1:35:92:a2:8c:a1:eb:e2:38:d4:
         a6:c0:a6:dc:60:4d:95:0b:6a:03:5b:cd:66:9f:21:06:9b:58:
         fe:6a:b7:8e:e7:c5:52:aa:fc:9d:c2:a6:22:81:ae:e0:01:50:
         d1:7c:d8:97:82:6c:27:1e:ad:a7:54:25:a6:75:93:35:8d:e7:
         69:b8:ed:a6:86:b5:d0:d4:ed:d2:38:2e:99:81:14:59:5e:2c:
         0d:d5:c9:e6:08:4c:79:3b:63:90:6d:55:0d:41:b9:1f:ad:c6:
         f4:2e:b6:87:92:1f:03:84:bd:0e:a0:ab:6b:57:ce:82:5d:d2:
         f5:33:3e:80:3b:96:81:84:cc:38:e7:ec:49:7a:39:25:46:a6:
         17:63:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----