Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/sTnzYdkWR688ggyZBWEZIrjfG4k.roa
File:                     sTnzYdkWR688ggyZBWEZIrjfG4k.roa (raw, json)
Hash identifier:          +1zx9VeZT18WDclUQEjLWaQYA6D+t51Xj7lgw7Ivd9w=
Subject key identifier:   B1:39:F3:61:D9:16:47:AF:3C:82:0C:99:05:61:19:22:B8:DF:1B:89
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0263
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/sTnzYdkWR688ggyZBWEZIrjfG4k.roa
Signing time:             Mon 20 Feb 2023 08:03:25 +0000
ROA not before:           Mon 20 Feb 2023 08:03:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.45/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B139F361D91647AF3C820C9905611922B8DF1B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:9d:06:7b:fe:88:a1:cf:9d:70:c7:7e:31:
                    b7:9c:ac:70:90:02:a0:c7:4b:4d:75:36:ec:db:65:
                    90:8f:8e:e5:2a:29:cc:71:01:b5:17:bb:8c:bb:81:
                    4b:7b:ed:53:9d:b7:fd:73:eb:d1:8b:88:e7:ff:3c:
                    57:fb:09:38:c0:1d:4c:83:10:dd:6e:46:f8:93:b6:
                    03:44:d7:07:3b:49:d7:5a:3a:e5:17:95:10:38:79:
                    ba:fb:e5:57:a4:d5:b7:b0:76:4a:9f:4a:c7:2f:11:
                    39:bc:85:40:9f:60:2f:09:23:22:86:6a:b9:0e:45:
                    55:32:dd:12:9f:01:c3:5d:73:ff:3c:a9:82:fc:fc:
                    8e:e9:dd:d9:b9:24:91:98:34:f9:ff:e6:ad:69:b2:
                    51:1a:aa:5f:15:f1:30:4c:d1:68:98:b5:69:7e:8b:
                    e7:cd:06:e5:2d:9c:ba:ca:23:78:20:a9:f8:50:93:
                    f5:af:5b:dc:32:e1:7a:dd:6c:62:fc:db:cf:e9:cf:
                    19:18:c1:8d:ce:d0:c4:dd:4f:43:93:e0:48:f1:e8:
                    a9:c1:56:26:43:f2:11:17:ca:c3:04:15:e8:8d:04:
                    e0:c4:2b:60:2b:46:3e:30:61:74:16:47:3c:08:20:
                    5f:3c:65:1b:0b:8b:ca:32:60:5e:11:0e:3d:7f:2e:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:39:F3:61:D9:16:47:AF:3C:82:0C:99:05:61:19:22:B8:DF:1B:89
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/sTnzYdkWR688ggyZBWEZIrjfG4k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.45/32

    Signature Algorithm: sha256WithRSAEncryption
         55:0f:f1:29:b6:4c:78:9c:f1:27:d0:31:7f:4a:a8:1c:b8:04:
         5e:8e:95:0e:37:2c:3e:c8:79:25:61:ca:fb:34:70:f4:a8:83:
         10:48:28:9f:df:b8:46:10:8b:5c:8b:09:7d:d5:78:c7:b2:34:
         73:d4:41:0f:8a:66:ef:66:1b:c4:dc:ad:c8:82:09:6e:6a:aa:
         db:2e:ca:49:8a:f3:f3:70:f8:db:f0:12:ef:26:f0:53:99:29:
         38:35:de:b6:e4:31:ad:85:b7:6f:39:cc:51:a2:35:7e:85:9c:
         f1:5d:16:57:5e:0c:61:bd:ee:d5:69:8a:30:7b:09:bd:06:78:
         6a:b0:a4:ce:36:ed:0a:99:11:aa:0a:48:b7:9c:21:b1:6c:08:
         a8:a8:7b:5a:d5:3c:15:ee:37:3f:cd:5a:58:02:2c:38:04:eb:
         e6:06:88:65:02:78:57:00:e1:f6:89:1c:d2:71:4c:b3:d5:f0:
         6e:60:41:85:54:c6:04:81:7d:fb:fd:16:0a:99:56:80:47:5f:
         47:e5:a1:29:3c:ae:07:51:87:1b:a1:cc:1f:07:03:30:2e:b7:
         a7:37:6a:0e:f4:3a:c4:dc:3c:7f:6e:36:81:99:26:f8:5d:8d:
         74:b9:a2:eb:fb:55:6b:7d:fa:5a:19:75:64:ac:70:57:3c:86:
         2b:27:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----