Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa
File:                     kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa (raw, json)
Hash identifier:          UxO4uPAqiubdQ0FkkQM5cwjYti8NkC08KRfDH+tpE2Q=
Subject key identifier:   92:99:31:A3:65:79:0E:78:DB:32:4D:65:41:9C:1F:E8:04:1C:B2:A4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       90
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa
Signing time:             Fri 10 Feb 2023 07:45:38 +0000
ROA not before:           Fri 10 Feb 2023 07:45:38 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.84/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:38 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=929931A365790E78DB324D65419C1FE8041CB2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:45:4e:8f:ca:b6:8d:4e:66:34:1c:2f:31:
                    79:90:ec:c5:f9:01:c3:34:a1:7e:f3:73:09:91:09:
                    f3:35:f9:eb:68:56:b5:58:0a:02:b4:56:e6:b5:7a:
                    cc:5f:a2:4d:f1:0a:d1:fd:67:b5:26:ab:60:d1:e1:
                    56:32:4c:5b:8e:bd:5a:45:df:a3:01:ca:8b:86:ba:
                    4a:26:29:b4:0a:48:6c:50:a7:dd:a3:58:9f:03:9b:
                    a4:d1:c9:c2:d0:41:ac:83:3e:ae:64:8a:ea:d1:7e:
                    2e:80:21:c5:4c:7e:10:47:42:de:5a:1a:4d:7a:57:
                    2f:4b:80:ed:78:4f:57:72:c4:6e:51:c3:2d:61:a0:
                    de:69:1f:69:9a:2f:12:8f:d8:ce:7a:96:67:fd:48:
                    bb:75:e1:a3:97:3d:29:a7:a1:5f:ff:fe:7e:4b:0d:
                    f2:c0:7a:2e:af:fc:52:bb:df:02:7b:fe:c5:f8:45:
                    e8:36:79:71:3a:28:1a:69:09:9d:07:ee:b6:42:95:
                    6a:a7:2c:25:4f:0e:9b:4d:ab:b6:3e:a5:16:09:8a:
                    43:aa:33:c3:d7:25:d8:6c:55:53:c5:86:e3:78:40:
                    a7:67:00:ab:50:ff:6a:8d:5d:db:c3:16:f4:73:8a:
                    e9:d6:5b:ca:9b:44:23:1e:23:b2:6b:cd:de:b9:f5:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:99:31:A3:65:79:0E:78:DB:32:4D:65:41:9C:1F:E8:04:1C:B2:A4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.84/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:39:48:21:a5:cb:3b:a8:48:57:2b:7f:98:ea:0d:9c:49:5c:
         43:93:8d:93:e7:9a:97:ea:bd:14:8b:ea:fc:ec:73:f0:69:0a:
         d9:ed:c1:5b:30:da:2e:26:d1:ab:23:db:42:7e:d4:bc:33:84:
         3f:09:b9:0a:ff:2c:11:67:11:17:a0:df:e6:cc:51:7d:e9:42:
         5b:f7:e3:b4:fd:24:8d:3e:8d:99:05:49:f7:2b:24:06:65:2f:
         79:b8:88:a1:b9:b0:5e:74:14:bc:77:a8:c1:3e:f2:45:3c:4e:
         fe:54:2d:15:a8:c2:25:1c:04:a7:47:5a:be:f2:25:d7:50:64:
         f0:b4:68:82:f4:fe:2e:76:e5:22:d8:6d:ad:bd:88:9d:f4:ca:
         ee:8a:5c:9d:b4:b3:f4:f7:9b:a4:b1:a7:fb:43:fd:21:e7:4b:
         eb:da:e1:13:93:c2:05:94:44:3a:6e:ab:7e:e7:fd:ad:74:f1:
         88:05:8e:1e:2d:d2:d2:b9:3f:56:5b:40:1c:5b:90:93:47:fb:
         4b:ad:d6:4b:79:ac:76:b2:90:25:41:8b:72:e6:a2:d4:cd:ff:
         57:0c:41:53:f1:5a:1c:cb:ab:f5:9d:2e:18:d4:11:51:b2:54:
         f4:ba:7e:1d:d0:83:58:d5:a9:19:50:37:52:04:86:c8:dc:48:
         71:a5:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----