Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QnUs9aNbMfC_5dxZ8rIX8aRsx50.roa
File:                     QnUs9aNbMfC_5dxZ8rIX8aRsx50.roa (raw, json)
Hash identifier:          PpW06IvIM/z91GwebsPC9jyYnWQhQugzySKm2il+nYA=
Subject key identifier:   42:75:2C:F5:A3:5B:31:F0:BF:E5:DC:59:F2:B2:17:F1:A4:6C:C7:9D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       028D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QnUs9aNbMfC_5dxZ8rIX8aRsx50.roa
Signing time:             Mon 20 Feb 2023 08:03:39 +0000
ROA not before:           Mon 20 Feb 2023 08:03:39 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.34/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:39 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=42752CF5A35B31F0BFE5DC59F2B217F1A46CC79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:da:0e:41:ab:b0:f9:eb:9a:cd:0d:7b:c8:
                    32:f8:c3:72:0a:92:d2:64:9b:04:8f:95:79:d1:80:
                    8e:69:36:bc:c6:54:88:fb:b7:65:4d:47:43:20:82:
                    c0:a0:a8:7a:c2:90:6d:89:ad:c7:5a:b9:27:fa:ad:
                    89:08:4b:e9:ca:7c:d7:3a:0e:55:d5:18:74:e7:4a:
                    c5:5b:42:b2:31:70:a2:10:98:dc:11:9e:92:f8:d8:
                    fa:72:9a:71:5b:58:ae:48:83:67:db:06:17:81:b0:
                    9b:d4:c4:a7:b1:b6:5f:eb:91:23:fe:af:11:6e:3b:
                    9e:94:0a:56:0c:27:74:91:fc:37:8f:84:c0:33:b0:
                    ed:c9:7b:7a:dc:13:19:99:6f:b2:15:60:ea:bb:48:
                    e3:6b:6e:9f:ae:37:d5:c3:ff:f0:d9:aa:94:36:ea:
                    0b:ac:e4:62:43:ca:c6:91:40:57:41:82:9a:0e:ce:
                    f1:be:89:35:11:23:0b:72:3f:43:00:e7:de:77:25:
                    4f:9b:47:39:22:5b:2c:01:31:85:d4:4a:e4:a8:2d:
                    9f:76:68:b0:bf:e3:00:4e:b9:c0:12:5b:b0:f4:2a:
                    5f:86:af:07:9b:1e:62:c4:31:6c:02:70:d7:0f:d8:
                    53:38:11:56:12:bc:a3:be:9d:e0:f1:44:73:00:68:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:75:2C:F5:A3:5B:31:F0:BF:E5:DC:59:F2:B2:17:F1:A4:6C:C7:9D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QnUs9aNbMfC_5dxZ8rIX8aRsx50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.34/32

    Signature Algorithm: sha256WithRSAEncryption
         81:91:35:b9:69:b8:cd:3a:8f:45:52:a2:e6:fd:86:c6:c3:e1:
         8e:f5:f7:6d:bd:43:e7:c8:fe:56:0e:48:13:ed:bb:f6:62:40:
         f3:8b:d1:c9:14:05:68:2b:fd:05:ac:78:8e:f5:24:72:c7:5d:
         f4:ba:fd:26:27:06:2b:31:ea:b8:9b:14:ad:18:62:5a:75:eb:
         2e:17:82:c0:71:af:62:78:59:6a:7a:53:b8:b0:b6:97:f0:1c:
         73:9e:f2:5c:d9:62:01:34:c6:83:54:54:ba:46:0a:c7:36:63:
         e7:5e:9a:8c:c8:29:9f:20:38:ea:1c:83:78:29:9b:f8:83:ea:
         b8:42:48:0c:9b:eb:59:22:3e:3e:ca:32:fe:7d:55:82:fa:62:
         79:3e:86:ad:17:75:59:fd:3d:94:10:ef:0c:a3:68:23:88:bd:
         f8:06:77:66:4f:eb:c7:52:0c:f0:31:71:f7:95:e7:71:92:b4:
         54:e7:71:1b:0d:98:8c:1f:28:2d:e9:1c:1c:94:13:6d:67:5b:
         19:a4:17:70:c9:62:3a:9c:ff:88:65:2a:0a:df:0a:1b:a5:27:
         42:bf:60:e4:9a:b3:2c:c5:2f:f2:17:fa:8d:33:16:bf:0c:77:
         be:c4:29:83:45:09:db:4e:be:58:2e:b7:08:00:19:40:62:ef:
         14:11:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----