Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cvj95rQOH9-mMKF-Dzapp_uOv4s.roa
File:                     cvj95rQOH9-mMKF-Dzapp_uOv4s.roa (raw, json)
Hash identifier:          B6/OrMrrirGrdzyJAtA4nmEKk7zULXwlQxr0WSyOTpg=
Subject key identifier:   72:F8:FD:E6:B4:0E:1F:DF:A6:30:A1:7E:0F:36:A9:A7:FB:8E:BF:8B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       014A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cvj95rQOH9-mMKF-Dzapp_uOv4s.roa
Signing time:             Wed 15 Feb 2023 02:28:28 +0000
ROA not before:           Wed 15 Feb 2023 02:28:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.8/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=72F8FDE6B40E1FDFA630A17E0F36A9A7FB8EBF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:fe:af:a4:23:ae:2c:ff:54:80:57:90:72:
                    e2:11:99:5a:cc:a0:ab:6d:42:ae:a5:c5:c1:bb:40:
                    3c:44:f3:2c:de:af:46:91:60:6e:00:69:ee:84:ed:
                    18:ff:81:8a:1b:e3:3e:cf:b8:b2:c1:ba:01:24:22:
                    4e:44:81:a1:17:b0:0a:6a:6f:4c:9e:55:87:af:e0:
                    a6:a0:24:14:d5:8c:e3:f5:97:7b:b7:0c:8a:84:fd:
                    49:cc:38:99:e4:9c:6a:ef:c9:95:c5:99:78:b7:43:
                    6c:ad:44:c7:55:04:69:c3:7b:b2:f3:1b:01:43:3c:
                    22:56:17:ee:1a:04:30:82:21:00:14:5a:7c:e7:7a:
                    9d:9d:77:d4:36:26:5c:8f:56:5e:ba:ab:5d:d3:a7:
                    91:4c:4f:da:0b:f8:99:fc:0a:c4:1e:67:f5:d1:2e:
                    3a:e9:27:e6:e5:76:81:21:f4:46:c7:da:c7:ed:0d:
                    35:ab:e5:48:6d:30:ec:92:b1:83:68:db:f1:1a:1e:
                    ae:fd:d3:23:f6:98:5b:71:86:79:2f:bc:c4:39:da:
                    96:4f:07:e1:e0:c4:02:1e:99:fa:4b:b7:f7:26:f5:
                    48:09:63:29:6e:28:a7:f3:91:6f:19:70:4a:b9:76:
                    45:11:91:8a:4a:c0:25:e7:a9:af:e6:1b:3f:f0:d6:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F8:FD:E6:B4:0E:1F:DF:A6:30:A1:7E:0F:36:A9:A7:FB:8E:BF:8B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cvj95rQOH9-mMKF-Dzapp_uOv4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.8/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:4e:44:83:3d:70:f0:f5:a3:ea:b1:11:cc:b7:f0:0a:5f:
         6e:50:52:9b:47:03:42:d0:a7:a4:85:ba:dc:02:d3:34:25:6a:
         12:1d:40:2c:6c:01:d1:44:60:4e:b2:37:84:de:b8:62:9c:bd:
         57:8a:99:e9:d6:d1:a3:c1:37:e6:3d:06:c8:7d:49:25:27:9c:
         7a:0b:35:c6:bc:0a:d3:99:78:37:a5:a6:4f:fe:32:8b:17:de:
         75:e3:a8:3f:db:90:aa:96:07:fa:ed:e6:04:0d:11:d4:b4:58:
         93:50:ea:79:3d:08:e7:6d:51:9c:76:1f:61:a2:cb:f0:dc:5c:
         0a:83:45:f2:0d:df:45:bf:27:87:b9:a3:44:d2:ba:ff:7b:ae:
         e1:81:12:d9:bf:df:49:f2:a9:f3:70:dd:37:49:75:2e:19:50:
         dc:9b:f2:b5:6a:17:b9:3a:c0:94:5d:5e:f9:0f:45:a3:50:5c:
         71:fd:2c:b5:31:dd:ad:5e:65:89:4c:4b:1c:b1:78:2f:48:e9:
         76:10:53:d5:35:a8:a5:1f:9d:2f:88:a4:0d:a2:85:22:ec:48:
         33:e4:28:b5:b6:d6:23:55:6a:2d:8d:88:35:e6:85:6b:65:cc:
         a3:97:1f:b1:4c:4f:2a:a2:a8:34:2b:30:c6:d6:30:71:d5:98:
         e4:4f:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----