Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XkhztqHNGeV3DW28XWl2VhT7v7U.roa
File:                     XkhztqHNGeV3DW28XWl2VhT7v7U.roa (raw, json)
Hash identifier:          3VxoZwr7oYM4ubDo7TMQkBcgtWGLTEsBkn9apcR7/JI=
Subject key identifier:   5E:48:73:B6:A1:CD:19:E5:77:0D:6D:BC:5D:69:76:56:14:FB:BF:B5
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       028E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XkhztqHNGeV3DW28XWl2VhT7v7U.roa
Signing time:             Mon 20 Feb 2023 08:03:39 +0000
ROA not before:           Mon 20 Feb 2023 08:03:39 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.94/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:39 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5E4873B6A1CD19E5770D6DBC5D69765614FBBFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:82:80:22:43:4d:5d:d5:16:20:b2:f0:a7:
                    46:fa:ab:7e:38:0c:86:5e:c5:fa:19:a4:37:72:9d:
                    0f:03:0a:5b:63:bc:ee:36:f1:74:a0:fc:fa:d7:8f:
                    c7:c6:39:c1:fe:14:22:fa:84:46:f8:eb:65:e0:17:
                    64:9f:bb:51:2a:fd:e0:6f:f7:40:24:49:0c:8a:89:
                    9d:29:fb:f3:10:35:7e:f3:8e:ba:d2:ac:ee:7e:0d:
                    c6:90:45:4f:d3:e2:61:de:57:fc:13:a5:e2:ce:ee:
                    c0:09:98:89:81:26:39:e0:60:73:a2:1f:e9:92:83:
                    b3:84:2c:2f:9f:9c:ce:3a:d6:c6:a0:aa:7d:1f:69:
                    92:ec:86:b6:1b:d0:74:cc:2b:d4:13:06:41:fd:fa:
                    9c:b6:2f:69:96:ec:0a:72:34:d3:64:b1:74:10:2d:
                    f3:73:0b:49:26:ef:0b:db:50:1d:7d:ae:37:c8:d9:
                    7b:d1:18:d3:d8:e8:9c:db:38:b6:c0:39:c6:f3:84:
                    e0:71:8e:92:53:ae:d2:ef:94:70:b1:34:37:63:be:
                    ac:5e:2a:90:8a:c8:dd:10:32:bc:57:fa:82:81:cc:
                    30:d1:a7:58:b2:48:03:f2:c5:bb:99:af:26:56:e9:
                    64:30:ce:af:70:c8:30:3d:90:c7:71:57:f8:1f:95:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:48:73:B6:A1:CD:19:E5:77:0D:6D:BC:5D:69:76:56:14:FB:BF:B5
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XkhztqHNGeV3DW28XWl2VhT7v7U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.94/32

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:15:70:4b:97:19:3a:ab:4d:52:6c:02:b1:ed:54:78:01:
         8e:67:ba:bb:dc:05:cf:98:bf:9d:b1:da:59:1a:86:d4:28:b8:
         af:9d:26:1f:29:f7:02:99:fd:56:ad:e8:c4:43:47:58:4d:d0:
         7d:eb:6c:49:7f:10:25:b8:d3:8d:41:7f:08:9f:66:e8:cf:9a:
         dd:8d:3d:0c:7a:c2:e1:9a:cc:b3:38:ed:87:b9:15:ab:f0:2b:
         85:a9:b1:7d:ab:6a:4c:63:35:6c:17:60:fd:5f:12:44:4a:3a:
         63:f8:c3:a6:53:e4:c2:92:21:46:6d:5b:67:b1:b8:c1:1f:45:
         05:35:a6:72:72:32:d4:6e:24:27:5c:10:6d:3c:74:ae:06:b8:
         01:88:75:a5:92:e6:bc:d0:b2:ec:00:ad:1d:f2:aa:d2:77:83:
         69:eb:1c:11:07:a9:07:5b:e3:a7:f8:cd:e1:aa:61:d4:a3:67:
         68:d1:3a:7c:b0:1d:81:ab:89:92:87:81:25:e8:f4:d8:08:a4:
         df:84:44:d0:8e:7b:7c:2f:75:0b:ab:1e:21:5d:3d:b3:1b:af:
         ee:52:13:8b:be:45:57:14:d9:a2:ac:03:79:29:5d:1f:69:08:
         9c:02:63:01:52:3e:b9:68:26:04:a8:ff:09:53:4c:f6:37:27:
         2b:36:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----