Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/r8KWZkw7b0t-lceSbJcJFd3bZew.roa
File:                     r8KWZkw7b0t-lceSbJcJFd3bZew.roa (raw, json)
Hash identifier:          RGF8T+2DJ2ac3crvxfrBhyRgUvzEqVe0he0BwRmbN/M=
Subject key identifier:   AF:C2:96:66:4C:3B:6F:4B:7E:95:C7:92:6C:97:09:15:DD:DB:65:EC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0292
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/r8KWZkw7b0t-lceSbJcJFd3bZew.roa
Signing time:             Mon 20 Feb 2023 08:05:24 +0000
ROA not before:           Mon 20 Feb 2023 08:05:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.241/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=AFC296664C3B6F4B7E95C7926C970915DDDB65EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:c4:1b:cd:7a:8a:e9:c9:d5:cd:e4:43:de:
                    4c:6f:df:04:c7:a5:e9:7a:e3:81:45:9a:4d:46:3a:
                    1a:ba:87:93:c7:17:4d:81:55:20:6a:12:4f:8d:f0:
                    2f:69:a8:d6:09:18:62:68:a8:25:7c:cc:49:fc:e7:
                    f9:1f:60:87:5f:24:60:4b:29:63:9b:88:6d:e8:3c:
                    2e:36:a3:65:01:c8:c4:e7:36:24:e2:0d:fe:d4:04:
                    71:64:44:3c:a0:8e:46:d7:43:e1:a8:25:a5:3f:ef:
                    44:a7:bb:7b:04:f3:b4:ed:38:2d:f8:95:fd:65:eb:
                    44:30:72:bb:c2:92:35:00:fb:81:d4:c0:69:51:ab:
                    e3:ea:f3:03:c8:78:66:1f:a6:1f:02:36:40:d3:09:
                    6a:e5:8b:eb:af:30:80:d3:07:64:b5:bf:93:a2:df:
                    d4:34:e1:cc:19:77:cf:99:16:7f:2f:3e:73:10:3a:
                    0c:06:7f:5d:6c:bd:34:21:6b:de:cf:b9:1b:17:e0:
                    4b:23:c9:e2:ee:b7:ec:4e:40:e0:05:4e:a9:a5:a0:
                    54:0b:8a:6d:e1:98:f5:6c:dd:68:0a:37:c7:a2:03:
                    f7:67:cc:44:26:f9:73:2f:89:82:67:ef:bc:fe:f7:
                    8a:89:74:bd:0f:bc:7c:64:d2:9a:ed:a9:c8:33:fa:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:96:66:4C:3B:6F:4B:7E:95:C7:92:6C:97:09:15:DD:DB:65:EC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/r8KWZkw7b0t-lceSbJcJFd3bZew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.241/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:be:f4:a2:f3:26:bf:e2:a4:69:2e:4f:ac:da:f4:f0:48:de:
         58:af:0e:31:e4:b8:47:f4:ec:b2:96:89:b8:fc:17:8a:d9:2e:
         7c:76:6d:1f:58:a7:55:00:a9:31:1a:db:d1:63:89:a2:63:0c:
         4a:85:6b:49:e2:c5:cf:73:30:7d:9a:a2:9c:4d:3d:8d:57:b3:
         41:2b:73:5f:88:c2:5d:58:dc:fe:ca:41:fe:a3:7e:f1:09:3f:
         8f:f1:60:29:6d:e2:a1:cf:61:7e:e5:1f:f5:99:39:6c:6c:1e:
         8d:34:c8:35:db:7b:97:cf:5b:38:aa:12:5a:bd:19:c8:0a:4b:
         6e:8c:f9:cb:60:3a:07:a1:0b:68:11:85:e2:a6:10:bc:08:4f:
         95:99:f4:ac:b4:01:d8:0b:d4:10:6e:38:fb:b5:2c:ce:be:96:
         e7:65:ef:0f:0d:26:83:5e:30:ce:df:33:74:5a:96:fe:d2:8c:
         1a:ae:b2:a7:d6:ff:97:62:c6:1d:30:d2:c9:dd:21:4a:29:46:
         99:ef:b8:49:85:f1:d7:a0:1c:a0:99:6d:e0:a7:f6:8a:3c:99:
         f5:0e:32:e0:4a:54:14:63:b5:93:36:85:6c:46:49:b3:86:dc:
         bb:1c:a3:85:9d:f2:1c:96:e0:24:c0:2a:03:26:f8:1d:0f:47:
         86:db:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----