Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/l-x8kv2LJIBl2XGvWrNh7LBkoGw.roa
File:                     l-x8kv2LJIBl2XGvWrNh7LBkoGw.roa (raw, json)
Hash identifier:          xQKdR+vR77yiVNFEX3U2pYl3aYMtxsaLiDzi+1FCdNo=
Subject key identifier:   97:EC:7C:92:FD:8B:24:80:65:D9:71:AF:5A:B3:61:EC:B0:64:A0:6C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0218
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/l-x8kv2LJIBl2XGvWrNh7LBkoGw.roa
Signing time:             Mon 20 Feb 2023 07:59:19 +0000
ROA not before:           Mon 20 Feb 2023 07:59:19 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.82/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:19 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=97EC7C92FD8B248065D971AF5AB361ECB064A06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:6b:eb:8d:10:e3:2a:f7:c5:46:03:00:7a:
                    f9:3b:bb:0f:43:b1:b7:bc:23:9a:d7:af:ba:00:8e:
                    2b:be:c4:11:d8:e1:9d:d3:24:d5:6d:0f:73:1c:e4:
                    ef:93:1f:72:39:c8:21:a4:c9:39:ce:22:b5:b2:33:
                    0e:60:6a:05:3a:df:8a:68:69:df:e0:ad:bc:c0:44:
                    23:33:ca:e5:72:37:d7:d8:8c:cb:85:6e:f6:4b:8a:
                    02:65:e3:09:18:a5:88:9d:4b:a4:11:28:d5:c7:de:
                    7f:93:f5:03:39:3b:29:5a:f0:9f:96:c1:9b:bc:82:
                    70:d2:3e:99:26:2e:b9:21:da:cd:95:14:cd:c9:88:
                    dc:d7:43:59:39:f4:38:40:f3:0b:7b:56:5a:25:a5:
                    db:05:7d:4d:cf:5a:e5:65:9c:d0:49:e9:d2:2e:b1:
                    30:cd:49:6d:67:f9:26:23:16:9f:51:b7:eb:40:22:
                    ea:c3:74:dd:a4:35:79:62:e8:8c:a8:3d:26:0f:97:
                    93:2e:16:3a:e3:89:8a:8d:bd:12:ce:f9:42:4d:0f:
                    86:c4:f7:e2:65:32:00:c3:81:0f:66:55:71:f2:e2:
                    2e:1c:db:dc:b6:13:1c:5e:3f:9f:ac:c5:a8:2b:11:
                    4d:bd:36:2b:81:d1:86:e5:44:9a:4b:fe:6d:57:42:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:7C:92:FD:8B:24:80:65:D9:71:AF:5A:B3:61:EC:B0:64:A0:6C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/l-x8kv2LJIBl2XGvWrNh7LBkoGw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.82/32

    Signature Algorithm: sha256WithRSAEncryption
         80:ca:90:ee:be:e6:bf:b5:cb:3a:de:8f:fe:c7:d1:36:a8:cf:
         82:4a:f9:36:eb:92:25:58:44:04:98:35:a2:e1:b8:32:fb:81:
         42:2c:30:b8:ed:af:27:f3:8c:4d:cb:b8:d9:09:3a:e6:b0:de:
         de:7b:a9:3f:9a:51:fc:62:e1:f5:92:25:8d:cf:12:87:69:20:
         5e:b8:d6:1e:35:69:9a:24:af:f0:30:a5:db:bc:8c:41:40:b7:
         da:10:65:ab:42:38:ca:5a:b0:f1:75:e1:07:39:fe:52:af:76:
         c9:db:a5:df:fe:33:51:f8:83:d5:c0:60:b7:36:80:41:94:31:
         8b:1f:50:56:43:b1:5f:bd:98:d9:60:3c:6c:e4:9e:fd:0c:cf:
         40:3e:5d:3f:44:7b:a9:e2:ad:db:75:80:e1:26:7f:47:45:e0:
         28:53:27:1c:dc:f8:5f:e9:67:23:19:75:1a:c7:dd:63:53:e9:
         8a:d0:5f:4e:58:30:59:f1:ae:32:b3:aa:31:e6:15:9b:34:8f:
         27:38:3c:0d:03:f3:a0:34:16:d8:4d:8e:7a:14:02:94:35:08:
         f5:f6:56:58:67:03:5f:85:1c:a0:b8:34:91:68:10:91:db:42:
         98:fc:94:69:62:31:30:e7:07:e9:c2:ed:fa:66:cb:35:93:7b:
         a4:4d:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----