Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oo2MSLfwSvjMIfngV8hxr1oPzxg.roa
File:                     oo2MSLfwSvjMIfngV8hxr1oPzxg.roa (raw, json)
Hash identifier:          LxcEExmofKLZsBPOfS2q21GbNeNdFPgx88Uh9BlQLCI=
Subject key identifier:   A2:8D:8C:48:B7:F0:4A:F8:CC:21:F9:E0:57:C8:71:AF:5A:0F:CF:18
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01A4
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oo2MSLfwSvjMIfngV8hxr1oPzxg.roa
Signing time:             Mon 20 Feb 2023 07:53:10 +0000
ROA not before:           Mon 20 Feb 2023 07:53:10 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.211/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:10 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=A28D8C48B7F04AF8CC21F9E057C871AF5A0FCF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:23:55:ad:f4:83:d6:6d:6d:3f:29:c3:b3:
                    34:5a:b8:a0:81:a2:a0:ea:e7:60:a9:91:2e:76:2e:
                    d9:81:35:32:3e:f7:ec:9e:66:a3:32:15:c5:be:ef:
                    2f:66:88:bd:28:1d:69:ff:68:64:16:ad:43:4b:96:
                    60:e9:d4:c3:c7:53:9d:57:31:fc:0e:e0:b2:0a:2f:
                    bf:f6:af:3e:3d:13:7b:d1:d2:10:92:eb:ae:50:c8:
                    25:08:e3:57:4d:94:09:ee:0f:6a:49:0f:d9:f3:ca:
                    94:53:30:24:9b:0a:37:9a:2e:7f:c7:6a:b8:d7:4e:
                    7c:d8:0d:cc:85:6d:81:93:a4:1e:e8:02:4a:b2:5c:
                    fb:e4:78:3a:09:a9:fe:76:63:c2:af:60:79:29:75:
                    5f:40:30:67:92:f9:63:10:d3:4f:f4:6d:cc:a8:31:
                    b4:20:2c:cb:fd:d4:25:27:ee:6b:36:58:9d:80:69:
                    a3:e3:58:fd:3b:15:4d:71:47:b2:3d:ad:63:2c:e6:
                    5d:33:f2:d0:19:a2:e8:ad:9f:bf:37:25:8b:99:5c:
                    07:46:01:4d:88:26:70:ca:0c:c8:e0:59:f2:c5:b3:
                    c9:44:e7:ef:2b:be:ae:b3:51:0c:0f:1c:1e:93:30:
                    4e:3e:3e:0c:98:26:00:d1:3c:a7:c6:3b:f8:3c:22:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8D:8C:48:B7:F0:4A:F8:CC:21:F9:E0:57:C8:71:AF:5A:0F:CF:18
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/oo2MSLfwSvjMIfngV8hxr1oPzxg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.211/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:68:6b:ed:a8:5e:e8:50:e5:5a:f0:13:7e:97:0c:0d:3b:
         39:85:87:68:5d:24:78:66:b0:ff:e3:b8:58:ac:f0:df:74:22:
         ad:1f:c5:1d:53:34:02:02:64:ad:e2:d9:77:f3:c9:c2:f6:a3:
         df:d0:80:50:7d:5d:0b:ca:23:c5:ab:51:ef:ed:86:aa:3d:a6:
         4a:d1:0c:61:ec:55:c3:c7:b9:de:89:e5:bd:07:84:2d:30:e9:
         f3:8f:93:35:ee:23:79:83:b3:01:8d:52:1a:e9:1f:76:a3:63:
         1b:1a:30:8f:2b:02:02:41:0f:03:5c:75:f4:13:65:44:a4:59:
         83:e4:24:ff:c0:a0:8f:ed:cb:9c:98:f5:d0:a6:74:08:bf:72:
         ff:6e:28:35:2a:48:35:2e:83:2a:cf:04:36:a5:2d:ac:f8:c3:
         2b:3a:1f:e8:37:12:bd:b1:cf:f6:8c:1f:91:26:b6:e0:2b:bc:
         bc:1d:56:12:7b:7f:0c:13:a7:fb:43:33:79:b4:f3:77:50:e3:
         7b:46:34:bc:4c:8c:5f:20:2a:a9:08:30:1e:21:b9:2c:c4:7a:
         8e:a4:95:ef:6b:43:70:70:d6:65:51:62:a3:63:a5:90:fc:0f:
         ea:a0:48:d6:53:ab:3f:fb:27:81:f0:63:60:6f:a9:96:98:d5:
         fd:1c:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----