Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mFPPth5D3tlAPjiqvRBmY0LPmnk.roa
File:                     mFPPth5D3tlAPjiqvRBmY0LPmnk.roa (raw, json)
Hash identifier:          a8C5EZVd4rgWShPUzcpHQyhho3XwpqR+JaOlNXIRz+o=
Subject key identifier:   98:53:CF:B6:1E:43:DE:D9:40:3E:38:AA:BD:10:66:63:42:CF:9A:79
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01DF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mFPPth5D3tlAPjiqvRBmY0LPmnk.roa
Signing time:             Mon 20 Feb 2023 07:55:30 +0000
ROA not before:           Mon 20 Feb 2023 07:55:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.85/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=9853CFB61E43DED9403E38AABD10666342CF9A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:89:ba:5a:0f:1e:87:87:ce:91:93:84:a4:
                    84:49:88:54:e3:9e:8a:7e:fc:86:8f:f6:0a:73:70:
                    60:96:91:11:fb:1d:8d:55:89:6e:78:56:d6:d7:34:
                    c9:29:c4:5e:a1:a1:3e:21:d6:c8:1a:ec:0f:bb:ce:
                    9f:af:f3:bb:22:1c:91:c2:02:be:82:a6:a3:16:b8:
                    c4:d9:74:07:4d:55:b5:95:12:62:55:60:ca:83:ee:
                    e4:3d:4e:12:38:4e:16:c3:f6:ac:66:72:30:23:6c:
                    eb:d9:bb:39:ad:fd:43:ec:ed:23:d1:7a:97:f2:04:
                    e0:42:98:11:d5:02:d4:e8:96:d5:5d:77:9f:9a:08:
                    8f:4a:72:7e:57:eb:8d:f9:8f:f9:97:66:c8:8a:f7:
                    22:97:a0:20:a6:ab:dc:93:25:78:cf:a5:67:bd:35:
                    9c:68:82:57:d0:61:5f:6a:34:c5:ef:10:d4:3f:6a:
                    12:79:42:fc:23:c6:fb:8e:69:74:77:d3:a6:e3:c4:
                    ab:3a:2c:87:4c:ab:6f:47:3d:4a:b2:5c:89:17:df:
                    93:2c:fa:3d:0d:ef:84:91:30:24:c6:51:9a:fb:d0:
                    bf:f4:db:bf:eb:29:3b:ed:bc:2e:86:83:bd:24:04:
                    9f:75:cc:d9:38:c9:a3:57:bd:86:bd:53:fc:e4:f3:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:53:CF:B6:1E:43:DE:D9:40:3E:38:AA:BD:10:66:63:42:CF:9A:79
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/mFPPth5D3tlAPjiqvRBmY0LPmnk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.85/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:29:8f:27:44:52:de:45:47:a6:0b:7c:6e:9d:14:13:81:
         61:58:3e:c9:57:8e:3e:ea:bb:5d:77:64:cf:28:df:dd:ac:76:
         f5:45:d0:7d:b5:88:88:33:93:0a:8a:6d:cd:a0:47:03:14:b9:
         32:bb:ea:49:1f:b8:78:1e:73:2c:97:8f:e5:56:30:85:99:48:
         e7:b7:dd:15:6e:ed:e4:84:80:56:70:0a:81:af:38:f5:19:c4:
         1a:20:d7:9d:b6:32:b5:33:df:44:f2:6d:ac:a3:a1:4e:f9:ba:
         dd:3e:7a:2a:5a:c7:00:2d:3b:e7:91:9c:38:6a:92:06:2f:05:
         86:d5:48:98:63:eb:08:21:1b:41:f4:58:a5:34:8e:09:a4:4e:
         0b:86:f1:ef:ef:e8:01:15:aa:52:79:36:9c:17:86:10:2d:4f:
         a3:a6:b3:37:ec:ca:1a:98:5d:d7:a8:b2:15:15:a6:90:0a:91:
         6e:e1:c5:de:32:67:2b:27:7e:53:b9:2d:06:e8:96:78:47:38:
         b4:da:ee:9e:04:8c:1e:b2:c2:3e:3d:b8:bd:6c:00:32:f0:92:
         a5:d6:a6:13:f5:78:d3:ee:d4:33:d6:af:3b:d5:fb:02:73:39:
         a3:b2:2d:ee:f9:e7:7f:8b:42:65:d8:77:d2:f9:9c:a8:73:8c:
         93:b9:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----