Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tXmhoQTKK75R6wAh9_9LzF5hyCc.roa
File:                     tXmhoQTKK75R6wAh9_9LzF5hyCc.roa (raw, json)
Hash identifier:          wfVAmzBgXqOQjeMfe3UyOAWQicXRrfNCknGf477Tr3E=
Subject key identifier:   B5:79:A1:A1:04:CA:2B:BE:51:EB:00:21:F7:FF:4B:CC:5E:61:C8:27
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0135
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tXmhoQTKK75R6wAh9_9LzF5hyCc.roa
Signing time:             Wed 15 Feb 2023 02:28:21 +0000
ROA not before:           Wed 15 Feb 2023 02:28:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.32/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B579A1A104CA2BBE51EB0021F7FF4BCC5E61C827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:21:56:78:76:38:63:7f:9c:21:ac:1e:66:
                    85:1b:d6:57:9a:d7:26:6d:06:1e:92:13:85:e0:a0:
                    43:78:36:4d:3d:2b:cc:8a:57:11:aa:f7:ed:3d:3b:
                    a4:40:d6:8b:cc:a5:36:6d:91:65:3c:15:5d:9e:ef:
                    cf:a1:95:f3:75:1e:ab:e1:4b:d0:2b:a0:2e:67:f3:
                    b4:c4:8b:6c:ce:e3:6c:21:a6:8b:f9:89:2b:b5:bf:
                    2f:45:48:87:5c:e1:c9:df:9b:ff:b6:25:23:2d:ff:
                    c4:da:86:1f:07:62:72:5e:38:b1:cc:d8:29:5a:fc:
                    d8:2b:a4:55:00:44:3e:7c:8d:cd:f6:2b:c4:49:78:
                    97:29:33:36:05:df:e7:09:6f:b4:60:51:a2:a0:1c:
                    e0:b5:9a:9a:82:c5:0b:54:ec:ac:c3:e8:1d:08:dc:
                    91:dc:c9:f5:ed:42:d5:8b:71:dc:ab:9d:96:c1:dc:
                    01:0f:33:ee:ae:7b:9a:83:37:ac:28:09:62:5e:68:
                    b2:7e:54:cb:d6:17:82:93:d4:cd:b6:5f:9f:d0:7d:
                    60:18:de:2d:e0:9e:a4:2b:43:f8:21:6e:99:09:04:
                    65:2a:f5:87:b2:79:dd:ff:91:03:db:f1:ae:6b:59:
                    91:bc:63:3c:5b:2a:9d:27:68:dd:9c:f8:8f:e6:e2:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:A1:A1:04:CA:2B:BE:51:EB:00:21:F7:FF:4B:CC:5E:61:C8:27
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tXmhoQTKK75R6wAh9_9LzF5hyCc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.32/32

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:e2:07:11:47:20:d0:40:e4:24:1f:24:29:d8:29:0e:be:
         cb:e1:fb:6b:83:08:26:df:a7:e2:7d:21:cf:81:ff:a2:84:5b:
         78:8a:4b:86:15:bd:25:ef:6a:90:6b:86:25:8a:c6:94:b8:f9:
         80:9b:d2:95:ae:4a:44:62:15:ea:7e:6e:c6:bb:31:61:bf:c3:
         e5:3b:be:d6:c5:08:07:01:04:23:5d:58:b9:53:6a:08:16:04:
         54:f7:47:60:c4:11:7b:cd:aa:6b:e5:08:9c:18:6d:9a:1d:f7:
         8f:92:8b:94:10:98:74:f7:45:46:b1:8d:98:3b:da:a1:96:1f:
         a1:f9:98:39:0d:7d:06:3f:41:d2:d5:b6:a9:94:b8:e2:15:f7:
         0f:9d:c7:68:ae:2c:6f:c6:2b:4e:68:2d:55:1b:32:30:09:a1:
         e7:0b:c0:84:c5:0b:02:06:b6:e0:80:3b:58:db:dd:1f:07:1e:
         be:74:dd:13:59:5b:07:2d:b2:11:b1:fc:80:71:37:de:fd:34:
         f1:45:c3:df:57:86:59:ff:d0:8a:6e:3b:f4:e3:5d:56:47:b3:
         02:83:49:4c:c0:34:02:2f:db:f0:17:0e:80:c0:7f:0f:14:b3:
         ae:a4:04:3e:8f:99:c2:8e:46:c0:6b:e1:93:f8:d2:72:f8:b9:
         d4:dd:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----