Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Wdr4NOFW8kMNG-EZeQi_tVXpS94.roa
File:                     Wdr4NOFW8kMNG-EZeQi_tVXpS94.roa (raw, json)
Hash identifier:          q22je5NQU2lKF1A7PbKbooy+hgRW1XVgURc3A6JbZ3Y=
Subject key identifier:   59:DA:F8:34:E1:56:F2:43:0D:1B:E1:19:79:08:BF:B5:55:E9:4B:DE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02C3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Wdr4NOFW8kMNG-EZeQi_tVXpS94.roa
Signing time:             Mon 20 Feb 2023 08:07:25 +0000
ROA not before:           Mon 20 Feb 2023 08:07:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.26/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=59DAF834E156F2430D1BE1197908BFB555E94BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:3d:27:f7:cc:46:bd:ca:e5:09:02:dd:21:
                    83:d6:d5:43:8c:c7:12:03:8b:b1:ec:3f:f5:3e:a4:
                    49:f1:d7:8a:0d:d6:99:57:ef:e9:76:3a:e8:29:04:
                    bf:45:59:de:45:9c:de:48:b6:4d:9a:ce:53:88:69:
                    f1:c1:4c:7e:bf:ee:bc:54:dc:33:eb:dd:93:b1:b6:
                    6c:ec:8c:5b:10:dc:b3:a6:ba:17:e8:5e:80:1d:c9:
                    e8:c8:4a:55:cd:e8:3d:ad:21:69:e8:03:63:47:47:
                    b2:c6:7a:4b:64:47:f5:c6:eb:02:0b:c4:85:da:b1:
                    f6:a1:d3:c4:30:02:94:5d:1b:02:b8:58:f0:84:62:
                    63:fd:30:62:75:c1:74:23:52:be:94:34:29:fc:15:
                    37:94:8e:ce:44:c7:57:ff:77:91:fa:4e:aa:89:9d:
                    6a:9f:31:5f:aa:5b:1f:64:ad:cd:bc:36:b1:39:69:
                    4d:b2:e8:e3:29:8c:70:40:9b:e9:85:d8:21:ab:30:
                    21:6a:dd:81:2d:12:ac:9b:f6:1f:b7:c0:40:8a:48:
                    65:c6:f5:51:57:7c:c8:03:c1:19:26:61:bf:2f:af:
                    4f:bf:d8:2a:3c:89:89:45:dc:5f:ee:d2:5d:d7:38:
                    65:3a:eb:ca:f5:79:8a:34:8a:e0:59:ba:cc:4f:b6:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DA:F8:34:E1:56:F2:43:0D:1B:E1:19:79:08:BF:B5:55:E9:4B:DE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Wdr4NOFW8kMNG-EZeQi_tVXpS94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.26/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:a5:46:30:f4:23:9f:bc:b6:2f:16:94:b5:2c:9b:5e:5f:
         4a:d0:f6:22:cd:74:34:61:bf:3e:5c:f2:02:15:db:90:7b:ba:
         0e:bb:0f:de:e1:8b:e8:3b:b7:45:52:cf:61:cf:df:86:ae:f3:
         22:aa:f0:ef:89:b9:2a:59:69:68:ae:8e:aa:a6:eb:57:db:39:
         9f:06:e3:b8:f3:df:dd:5f:7c:68:9c:c6:0b:52:8d:07:57:05:
         4a:79:58:0b:a2:2c:a2:60:4d:20:7a:c3:82:69:b7:26:b1:82:
         1a:e4:b2:3b:e1:c2:1a:52:1f:c6:46:88:91:e4:27:ee:60:f7:
         92:d9:2f:c9:c8:dc:ff:28:3b:0a:35:a8:94:d5:cb:2e:1d:4c:
         41:71:76:df:80:20:b0:70:1c:d8:a6:a8:6b:55:e3:32:a2:4b:
         64:b5:3f:09:d9:76:08:de:b3:12:c0:74:d6:a3:e7:04:4b:bc:
         0c:3d:60:50:5b:a0:5b:0c:15:a4:6f:cb:a3:3b:cd:82:5c:dc:
         86:28:3a:e8:c7:e2:09:d7:65:12:e1:6d:99:32:f3:c5:b6:70:
         e4:10:0c:b9:fc:da:0e:04:86:d6:dc:a9:c8:b5:33:b4:6e:d8:
         63:c7:fd:18:ac:54:e3:f4:f3:a0:5c:c1:f6:56:7e:38:cb:47:
         91:19:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----