Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hDJ96rWzrOe-_T22tbdV4N0pm-o.roa
File:                     hDJ96rWzrOe-_T22tbdV4N0pm-o.roa (raw, json)
Hash identifier:          ElG+qxmyO1e2i+Juwjba6W1V+PyDNPqobz+cb7cMS/g=
Subject key identifier:   84:32:7D:EA:B5:B3:AC:E7:BE:FD:3D:B6:B5:B7:55:E0:DD:29:9B:EA
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       026D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hDJ96rWzrOe-_T22tbdV4N0pm-o.roa
Signing time:             Mon 20 Feb 2023 08:03:28 +0000
ROA not before:           Mon 20 Feb 2023 08:03:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.128/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=84327DEAB5B3ACE7BEFD3DB6B5B755E0DD299BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:67:c5:2d:f4:c5:c9:ae:63:cc:0f:ec:46:01:
                    6a:64:e3:1a:db:c7:68:b3:7a:74:6f:98:66:74:07:
                    1c:d5:d9:18:0d:cd:0e:02:59:6e:cc:16:42:d3:e8:
                    f2:2f:a9:aa:9c:d6:8c:36:71:14:f8:78:48:5c:ca:
                    17:66:eb:7f:d9:71:8e:b2:62:aa:9f:4e:b1:fe:af:
                    b5:21:4f:fd:ae:8c:e4:df:82:e0:63:b8:ba:fd:e7:
                    31:63:67:8a:0d:50:5f:dc:e5:1d:f9:80:69:6b:32:
                    96:f1:2e:49:ed:9e:f5:69:2c:80:c1:4f:ed:4f:c9:
                    70:e1:4e:05:e5:53:36:3d:43:ad:2a:c3:3a:39:92:
                    a2:9c:bd:a8:41:3c:46:6b:71:69:cc:af:68:a5:6b:
                    34:1c:f9:fc:ba:b1:5f:1d:90:37:dd:75:28:12:18:
                    26:27:4c:f6:8b:ca:4a:01:8c:17:a0:c1:06:f3:14:
                    a9:93:f5:0d:7a:56:7c:bc:03:9f:8d:8a:46:fe:47:
                    c5:b6:95:06:c1:c8:71:b0:9e:6e:3f:fa:c3:4b:0a:
                    62:5c:36:bd:7d:76:53:b4:e1:0b:de:11:e6:e4:1e:
                    b3:7a:91:97:9e:ac:57:52:a3:ab:a6:13:d8:52:25:
                    df:48:12:73:d9:ba:85:79:ce:82:e7:b8:4e:2f:ed:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:32:7D:EA:B5:B3:AC:E7:BE:FD:3D:B6:B5:B7:55:E0:DD:29:9B:EA
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/hDJ96rWzrOe-_T22tbdV4N0pm-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.128/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:4b:f6:05:32:22:47:cb:92:9a:58:3d:8f:72:c9:4a:b8:6c:
         90:88:a4:7d:24:83:0b:48:f8:16:cb:79:87:46:34:63:0a:24:
         60:f4:e4:42:38:18:49:7a:44:34:ee:a4:61:86:a4:4c:1e:1b:
         cc:49:e1:16:b0:3e:cb:d0:5e:ff:fa:88:f4:f9:11:e0:36:13:
         9f:01:80:00:f7:6b:af:23:7b:fa:48:cc:40:7d:6a:17:c1:bb:
         bb:ae:19:e3:a0:66:02:8d:b6:40:ce:fe:37:ac:69:77:60:48:
         00:44:d1:c9:01:15:5b:c9:2d:a3:f2:9c:51:21:00:9a:e3:2f:
         90:80:8b:3c:db:69:6a:28:e0:aa:81:33:79:85:b7:d6:85:de:
         75:cd:1d:0e:f8:5c:96:e8:5a:16:ff:27:79:53:cc:f0:02:9d:
         9e:5e:9f:1d:0d:e8:26:c6:e9:54:7c:04:01:35:e7:a2:fe:18:
         47:1c:0e:1c:3b:bf:29:87:5d:7f:b2:c0:19:68:21:49:82:53:
         ef:77:f4:0c:f7:7c:fa:bb:39:de:5a:8e:6f:6c:23:f2:fc:a6:
         ff:cb:f5:b9:58:02:08:ed:28:5c:08:60:a1:ca:18:72:7c:2d:
         26:74:8e:90:3c:ba:17:b6:5e:82:59:6e:1f:4f:f5:3e:96:29:
         8f:f0:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----