Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/W15ySyR8KGXrDm6kn8ht0ioNMzw.roa
File:                     W15ySyR8KGXrDm6kn8ht0ioNMzw.roa (raw, json)
Hash identifier:          SdPzKzttA7VBC1NLs5ZTLGjAIK2zZEU5tug7HJ910As=
Subject key identifier:   5B:5E:72:4B:24:7C:28:65:EB:0E:6E:A4:9F:C8:6D:D2:2A:0D:33:3C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0291
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/W15ySyR8KGXrDm6kn8ht0ioNMzw.roa
Signing time:             Mon 20 Feb 2023 08:05:24 +0000
ROA not before:           Mon 20 Feb 2023 08:05:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.196/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5B5E724B247C2865EB0E6EA49FC86DD22A0D333C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:05:5c:a7:b4:7a:0a:3f:1b:f3:55:9b:77:2d:
                    e2:25:76:6c:ce:22:38:65:69:38:3e:5c:25:09:db:
                    2c:89:c3:ca:5d:d5:6b:5e:33:18:7c:cf:78:30:4c:
                    4b:f0:05:53:fa:d8:70:45:bd:e4:7a:77:92:c6:e7:
                    b3:2f:ac:1b:24:47:7a:88:60:e8:a6:fa:aa:c9:85:
                    11:bd:6c:0a:c1:c8:1a:48:5a:5d:66:a7:b8:65:ff:
                    e6:fb:0e:92:bb:2c:b7:0b:3a:c1:92:48:be:5e:6b:
                    cf:61:81:f7:de:2f:a3:89:78:c4:68:42:a1:3b:8c:
                    c8:a6:b6:62:ec:d2:b9:4c:af:9c:d4:a4:80:cd:17:
                    ed:be:2a:d0:c9:a2:dd:eb:93:27:8a:5c:da:67:88:
                    3b:79:65:18:bb:db:20:9b:86:ce:58:f0:e7:02:45:
                    16:3c:30:d9:58:c0:4a:d7:3b:ee:bb:dc:5e:83:dd:
                    be:c2:d9:cc:60:3a:d9:b5:19:e0:06:a2:03:cc:fb:
                    a4:47:cf:7a:50:9c:7a:a6:1b:6e:4b:3b:60:19:d9:
                    47:b3:d6:97:88:af:93:10:55:27:72:2b:14:cc:93:
                    23:a2:72:97:a5:f5:f8:34:88:a3:c0:83:6d:b9:0c:
                    0b:69:36:01:e5:85:10:97:68:e6:c8:a1:bb:17:8d:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5E:72:4B:24:7C:28:65:EB:0E:6E:A4:9F:C8:6D:D2:2A:0D:33:3C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/W15ySyR8KGXrDm6kn8ht0ioNMzw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.196/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:86:c1:04:09:79:5a:e9:d1:0c:9b:e7:72:5d:5f:e0:09:
         15:e8:9e:7c:1e:6c:03:97:2c:c3:c3:1b:6a:18:de:9d:30:8a:
         8a:7e:5b:da:47:85:0e:c5:9a:13:fb:01:27:4e:50:d2:87:cf:
         0b:66:29:77:61:3a:f0:08:ed:c0:12:06:cc:95:aa:96:67:a5:
         96:21:43:a7:e2:53:4e:98:51:9d:7d:59:9d:79:f5:30:67:e8:
         ab:9e:ce:23:7d:1a:01:6a:57:9b:c8:8a:ae:ff:c9:88:58:63:
         29:25:64:c5:f6:58:48:79:85:e2:08:ab:d1:c9:99:8a:85:f4:
         76:f6:6b:9f:28:74:3b:e7:18:52:0f:67:92:0c:bd:ef:b5:ed:
         d4:20:fe:a9:7c:ce:77:a7:0a:3a:89:eb:ca:24:e0:b6:60:59:
         f5:1c:04:5b:2f:23:8d:d4:e3:22:62:5e:45:5e:88:62:c7:d1:
         67:c4:cc:d6:3f:16:3b:a8:e5:6e:16:0e:a7:11:17:a6:3c:49:
         02:d7:87:b7:e2:2a:a0:aa:ec:e9:91:51:89:c1:9b:c1:38:e9:
         c9:f3:c1:95:62:26:ad:f2:23:e3:8c:3a:3e:e7:de:5d:c1:ae:
         af:56:12:27:62:f2:cf:94:be:97:7e:31:fa:12:53:e7:cd:35:
         2d:06:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----