Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SA-QXTRx2DqCIaHara87cEGbv4c.roa
File:                     SA-QXTRx2DqCIaHara87cEGbv4c.roa (raw, json)
Hash identifier:          KWtxTi5JTuUhxhaIlbHMfW7bYbEBl9roLD7hFC0UIqA=
Subject key identifier:   48:0F:90:5D:34:71:D8:3A:82:21:A1:DA:AD:AF:3B:70:41:9B:BF:87
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0208
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SA-QXTRx2DqCIaHara87cEGbv4c.roa
Signing time:             Mon 20 Feb 2023 07:57:35 +0000
ROA not before:           Mon 20 Feb 2023 07:57:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.112/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=480F905D3471D83A8221A1DAADAF3B70419BBF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:f1:bb:a3:5a:3d:c2:43:18:35:52:72:34:
                    b2:46:6f:b8:9b:45:72:97:a0:db:e5:73:29:61:dc:
                    00:67:c3:d5:d0:06:92:a1:e6:d9:cf:bb:45:41:4f:
                    b8:ef:b5:7b:34:7f:dd:98:65:22:99:bd:94:65:fd:
                    20:70:b2:bd:e5:6d:c8:c6:e6:a4:46:02:19:de:c9:
                    a2:09:3f:62:06:e2:45:35:49:f1:ea:d1:91:62:24:
                    c4:34:95:cb:be:00:97:66:5e:b8:54:8c:69:19:eb:
                    eb:07:55:88:a0:29:54:a4:90:c5:d5:3c:d6:19:aa:
                    a6:4e:75:de:ac:1d:39:d1:60:54:cc:65:fa:9d:57:
                    75:99:7d:2a:0e:88:9a:09:9e:c3:d3:37:e0:b5:20:
                    18:b3:88:35:d8:ab:cf:fd:2a:71:08:ef:1a:ae:23:
                    45:13:14:cb:ab:a5:99:61:51:45:eb:64:5f:7d:f0:
                    87:33:b6:d9:74:5b:a6:8c:42:e9:01:3f:62:bd:3f:
                    42:8d:34:a0:75:3d:c6:36:7b:76:72:4c:22:35:8a:
                    25:1b:d8:52:b6:b5:d3:dd:b2:e4:5b:b6:65:db:eb:
                    65:7b:a3:13:0e:c1:bd:0f:3b:89:0e:68:b3:f7:16:
                    48:a9:13:ef:87:f4:e5:1b:f7:64:aa:fd:b5:f6:a2:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0F:90:5D:34:71:D8:3A:82:21:A1:DA:AD:AF:3B:70:41:9B:BF:87
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SA-QXTRx2DqCIaHara87cEGbv4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.112/32

    Signature Algorithm: sha256WithRSAEncryption
         43:e5:11:a4:2e:59:71:bb:ad:06:93:ac:e8:59:7f:37:23:04:
         a6:6a:66:41:33:25:43:8c:07:26:62:a2:10:eb:8b:6e:11:db:
         94:05:c0:d4:c5:ae:19:f4:69:51:35:86:dd:9b:d4:14:9e:85:
         5d:cb:c4:59:27:04:43:e2:93:92:76:c8:04:4c:e9:f0:7a:86:
         cd:ee:64:a8:ff:31:f5:cb:44:4c:ce:69:50:dd:62:d7:e3:4d:
         15:ef:d0:d7:dd:7e:44:35:14:48:2a:7f:e2:02:d5:b8:cf:75:
         6f:e1:2a:95:71:a6:8d:c4:8e:6a:b7:c7:9d:f5:16:81:b0:e7:
         4b:fb:66:10:1e:7c:31:9c:f5:fa:66:50:7d:0f:85:68:ad:71:
         bc:ca:f8:ca:a3:d7:c8:01:4b:89:cd:f9:97:e4:9c:4c:76:16:
         9f:67:41:44:5d:28:11:3d:89:b5:a0:e7:45:9d:ee:a1:d1:ba:
         bc:fc:f4:04:11:8a:e0:c3:12:00:28:78:23:6b:a8:64:f7:38:
         85:ca:fc:bc:ab:73:db:55:74:47:f8:7c:fa:76:8c:d6:6e:62:
         0f:ce:76:d9:28:1b:33:b5:66:99:92:1e:4c:b5:e9:11:de:04:
         1c:52:81:6e:a0:bd:9b:b2:25:dd:8d:eb:b0:d4:72:a7:14:43:
         4f:5e:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----