Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZGBBQR5jEffDD9f9vtyDtjRJA80.roa
File:                     ZGBBQR5jEffDD9f9vtyDtjRJA80.roa (raw, json)
Hash identifier:          O/raaF3RpLC4BYVCnsycz6x+sMUdz+hYXmqJlKeXtBI=
Subject key identifier:   64:60:41:41:1E:63:11:F7:C3:0F:D7:FD:BE:DC:83:B6:34:49:03:CD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       024D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZGBBQR5jEffDD9f9vtyDtjRJA80.roa
Signing time:             Mon 20 Feb 2023 08:01:28 +0000
ROA not before:           Mon 20 Feb 2023 08:01:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.54/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=646041411E6311F7C30FD7FDBEDC83B6344903CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:61:16:a6:65:83:10:f5:ea:f0:52:e3:31:
                    5f:b1:82:a3:1b:e2:e0:09:cf:6c:12:bd:b0:d8:c3:
                    0c:98:de:84:9f:c2:4c:46:ab:31:86:d2:50:ab:0c:
                    e7:88:bf:ab:2c:21:c4:6d:19:68:37:03:04:ce:19:
                    f9:9e:21:5c:a9:6d:a7:3b:e4:86:80:27:8e:28:97:
                    72:c7:95:9e:27:43:fe:29:fc:12:1b:a9:a6:be:d8:
                    74:1a:87:2e:5d:78:bb:ba:29:d5:b0:0b:c6:e6:b3:
                    89:60:f6:80:1c:18:3d:de:e6:31:b8:3e:72:6c:0a:
                    45:26:89:16:b9:4d:d6:80:ff:d5:b9:fc:d8:01:35:
                    1f:15:28:8d:92:27:29:16:4d:3e:9b:33:e1:14:45:
                    14:e1:77:aa:10:69:ba:01:17:82:6f:9c:40:63:4f:
                    22:be:ed:09:f4:fe:96:38:32:2c:10:b0:f5:da:83:
                    66:5d:77:ac:41:ce:42:dd:27:f8:12:1d:d7:38:30:
                    54:ff:5b:08:44:a3:c2:86:e0:76:41:0e:a8:ec:de:
                    37:c2:86:ed:f3:a3:ee:08:fe:47:33:60:03:f8:a0:
                    28:ad:82:e6:d9:ac:38:65:43:96:55:7f:8a:6b:ca:
                    42:67:67:51:76:f6:64:02:ee:e3:49:3d:28:9f:e7:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:41:41:1E:63:11:F7:C3:0F:D7:FD:BE:DC:83:B6:34:49:03:CD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZGBBQR5jEffDD9f9vtyDtjRJA80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.54/32

    Signature Algorithm: sha256WithRSAEncryption
         31:70:d3:b2:81:59:bf:c2:63:d1:e8:63:09:8f:aa:78:2f:74:
         45:3c:b5:18:f4:1e:46:68:88:f9:49:5f:59:80:f4:4e:14:94:
         04:bc:7f:78:06:90:e5:d7:b1:ad:df:68:0a:24:c7:95:fe:2a:
         2e:95:12:bd:01:ae:3c:32:37:04:c5:a6:73:dd:1d:39:95:e4:
         f9:d4:6a:ac:98:5f:6c:69:57:c0:b8:10:8f:04:ae:c1:ab:a5:
         1d:45:0d:49:7d:d3:0c:5e:22:14:42:f8:7c:89:c9:13:a9:81:
         fb:31:78:8a:47:02:b0:d0:6f:fb:77:75:24:55:5d:e4:6d:87:
         2f:58:12:ae:76:a3:8c:10:1a:5e:00:f7:b0:82:02:97:2b:28:
         63:3b:80:a0:f5:8d:83:56:75:85:50:e0:a2:43:41:4b:b0:8a:
         e6:0a:af:c2:1f:8d:63:42:57:b8:f1:bb:52:d1:25:12:bb:26:
         31:1c:17:6c:db:75:f0:7f:0c:cf:3d:35:c6:21:8c:b9:60:1b:
         f0:0f:51:f8:d4:42:ce:8d:55:23:0b:f8:8c:fc:98:0a:8f:1b:
         3c:c7:93:67:8e:a9:ca:b1:7b:05:27:c4:56:80:b3:ac:99:1f:
         30:3e:c8:fb:8d:4d:47:14:3f:12:89:e0:da:62:cd:aa:8a:7a:
         0c:f9:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----