Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/flNZaTxYKAgCgep5A4VYih-tGvY.roa
File:                     flNZaTxYKAgCgep5A4VYih-tGvY.roa (raw, json)
Hash identifier:          kUzBuyYZVLnTntqR9PznzcimWOwWXfZvdwFDMRSG7VA=
Subject key identifier:   7E:53:59:69:3C:58:28:08:02:81:EA:79:03:85:58:8A:1F:AD:1A:F6
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       68
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/flNZaTxYKAgCgep5A4VYih-tGvY.roa
Signing time:             Fri 10 Feb 2023 07:43:36 +0000
ROA not before:           Fri 10 Feb 2023 07:43:36 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.195/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:36 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=7E5359693C5828080281EA790385588A1FAD1AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:88:f3:f7:cd:7d:4e:36:91:e7:f0:86:06:
                    a0:47:b1:90:8c:b9:da:2a:d4:09:b8:30:70:38:40:
                    ec:a2:ef:d9:f8:74:bf:29:0d:b1:d6:6f:d7:8d:a8:
                    0f:f3:90:bf:fc:14:95:6b:b6:7e:73:c2:b5:80:6a:
                    6d:41:62:4f:fd:6f:e5:4a:db:22:7b:08:10:83:1c:
                    c9:54:e4:80:21:1e:5f:ba:81:5e:34:e4:3f:7a:a8:
                    6f:0a:a2:64:df:a8:17:9d:49:b5:78:97:74:18:f2:
                    d6:3a:c4:cc:6a:a9:1e:a6:a3:36:a9:12:a8:7c:e2:
                    54:f0:49:10:61:fa:1e:47:3b:2d:2d:8b:19:e3:ad:
                    7b:14:3a:f8:27:dc:33:ce:ae:82:67:3f:a6:86:b6:
                    c7:63:a1:18:71:32:93:4e:fd:e1:86:f9:12:e4:45:
                    61:51:d5:b2:f2:f1:66:80:87:51:9c:84:1c:f1:1e:
                    e0:eb:cf:5e:41:2a:a4:6d:db:f9:f6:51:b7:ac:52:
                    2f:0b:39:41:0a:62:d6:e8:d6:2e:6c:d8:11:e2:83:
                    06:28:d9:3a:cc:5e:e8:56:9c:c2:94:aa:5a:21:6b:
                    4b:14:b3:42:c4:6c:39:dd:5c:9a:dd:ee:b2:e4:dc:
                    25:ef:a2:30:0a:b6:b4:97:ed:aa:bb:44:49:7e:e6:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:59:69:3C:58:28:08:02:81:EA:79:03:85:58:8A:1F:AD:1A:F6
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/flNZaTxYKAgCgep5A4VYih-tGvY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.195/32

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:fa:9f:0c:90:c5:47:5d:d2:2b:d6:f2:ae:cd:9d:bf:51:
         2d:d1:64:a4:df:2d:86:7f:55:66:6a:06:10:86:10:d6:77:33:
         b2:f0:05:bf:f4:42:a6:84:56:a0:62:64:7c:4b:6a:25:5c:7e:
         eb:5c:61:53:d9:c8:b4:bc:95:20:05:76:7e:c2:05:09:93:b1:
         1b:3e:4e:4e:a4:cc:bb:f1:e8:df:e2:3f:6a:d4:b3:95:70:68:
         67:f8:92:7f:fc:b7:5b:0f:f1:10:fc:a6:6a:25:5c:37:10:71:
         50:bb:22:e5:fd:1a:1b:7b:e3:79:53:a2:90:69:9d:10:9c:eb:
         f1:db:1e:5d:9b:24:84:2a:64:9f:d6:3f:48:97:74:21:dc:79:
         c3:2d:a2:b8:cd:dc:56:58:e1:32:45:9f:0e:be:6f:21:91:37:
         75:79:45:c5:cb:19:d1:76:01:bd:b5:d8:c5:96:fd:b5:1d:02:
         5a:8b:0f:14:00:8f:ec:cb:94:de:6d:fd:38:71:59:f4:47:62:
         ab:4f:63:4c:ad:4e:d8:c3:45:ca:de:4b:85:19:4b:90:02:70:
         19:34:3a:d8:ee:78:33:7c:be:74:b0:52:f5:ec:32:4a:b1:28:
         58:47:08:dc:48:f2:e3:d8:a9:cb:d9:1d:86:ae:e7:0d:d4:f8:
         2c:eb:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----