Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/u99VwNmDvt-r_qe-ym1X2cyOMXY.roa
File:                     u99VwNmDvt-r_qe-ym1X2cyOMXY.roa (raw, json)
Hash identifier:          VDnP7wQ4p/eOFvbeDjjtcuhloRWFdyzRYDfK4X4ZIls=
Subject key identifier:   BB:DF:55:C0:D9:83:BE:DF:AB:FE:A7:BE:CA:6D:57:D9:CC:8E:31:76
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01E9
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/u99VwNmDvt-r_qe-ym1X2cyOMXY.roa
Signing time:             Mon 20 Feb 2023 07:57:25 +0000
ROA not before:           Mon 20 Feb 2023 07:57:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.184/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=BBDF55C0D983BEDFABFEA7BECA6D57D9CC8E3176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:61:a7:46:46:f6:ad:74:2e:a3:7d:68:ff:
                    f5:8b:1f:dc:25:d1:eb:b4:2a:dc:15:70:ce:a3:d5:
                    ed:40:b6:f7:a1:59:85:01:ec:5e:72:f5:b5:6e:95:
                    65:30:ac:6c:55:17:c9:b8:e4:32:19:a1:35:7d:e2:
                    f9:89:3b:a6:a6:25:e8:de:01:b1:4e:71:91:90:06:
                    15:71:0c:2e:7e:a1:de:37:7a:16:9a:cf:96:84:51:
                    7e:c0:87:13:66:6b:ec:27:c6:96:ac:3c:89:44:1a:
                    4d:26:bb:64:77:76:5f:61:6a:3d:bb:4d:5d:4b:08:
                    b4:29:c1:28:ba:6f:ed:41:45:f5:25:b9:53:0f:47:
                    b1:52:e5:e7:16:c0:87:ca:91:1f:d4:a4:93:c7:26:
                    46:da:e0:cb:73:2c:e2:7f:71:e8:33:97:96:83:ec:
                    c9:9d:3d:80:49:18:1d:8d:f3:7f:cb:0e:d1:e3:e1:
                    83:f6:1e:61:ec:6a:59:7a:c3:32:21:ef:14:86:a3:
                    7e:e8:a4:76:94:06:92:a7:65:ed:c7:57:1c:65:e1:
                    d6:fe:e7:e7:23:a5:4c:4c:74:25:9f:07:8c:55:de:
                    e0:62:a1:97:3f:b4:ef:17:f8:89:be:4e:0f:c0:09:
                    e4:95:d5:3c:38:5b:2a:37:5e:fa:9f:56:4c:13:a9:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:55:C0:D9:83:BE:DF:AB:FE:A7:BE:CA:6D:57:D9:CC:8E:31:76
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/u99VwNmDvt-r_qe-ym1X2cyOMXY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.184/32

    Signature Algorithm: sha256WithRSAEncryption
         18:de:c1:f8:4f:9f:e2:df:e1:8a:cf:9a:37:7f:0a:3f:c6:8a:
         82:28:ab:af:32:3e:c9:c3:ff:72:57:77:96:78:a3:92:d6:fa:
         f1:17:9d:00:f9:f8:6d:35:32:05:70:a4:70:e9:d9:d2:a1:a1:
         6f:1f:c8:d1:77:05:00:d5:6a:b0:3b:80:2c:8c:93:8c:3c:3c:
         6f:29:6c:a2:1b:c1:c9:64:3c:46:21:d9:0d:2b:57:10:ff:86:
         cb:3c:8b:52:53:e0:b6:57:7c:ba:95:3c:1d:c9:79:d6:6f:f3:
         19:eb:1e:99:4e:7d:6a:4e:64:98:50:d0:97:1b:03:73:2e:14:
         4a:47:21:12:83:0a:7b:c7:ba:0f:21:76:e2:31:6f:b6:a6:2a:
         7e:95:00:79:9c:90:b8:8d:47:65:71:98:54:58:c9:ae:a2:67:
         fc:7d:53:29:b9:6d:d1:2f:4e:40:04:84:a9:f8:6a:79:b7:e3:
         c6:56:22:5d:54:05:9e:43:5a:5b:a5:70:1e:20:95:6e:db:31:
         c7:63:3b:45:6d:37:10:5f:61:30:f6:f7:0b:a9:be:d6:84:1f:
         0c:07:73:e4:ac:3d:4d:6c:24:52:c5:59:0c:b6:e6:bd:e1:01:
         6a:9e:5f:ed:46:2f:c9:f7:63:2c:63:e5:5c:d4:eb:97:f4:f0:
         75:4a:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----