Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uZ1X1-j0s3BDbZ86JGWLf9I0Elg.roa
File:                     uZ1X1-j0s3BDbZ86JGWLf9I0Elg.roa (raw, json)
Hash identifier:          SXJ7bkX25W/o93kNFlAzGFpfvqSOWDENOKMEG8loYzI=
Subject key identifier:   B9:9D:57:D7:E8:F4:B3:70:43:6D:9F:3A:24:65:8B:7F:D2:34:12:58
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       023C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uZ1X1-j0s3BDbZ86JGWLf9I0Elg.roa
Signing time:             Mon 20 Feb 2023 07:59:33 +0000
ROA not before:           Mon 20 Feb 2023 07:59:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.29/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B99D57D7E8F4B370436D9F3A24658B7FD2341258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:8e:3a:6e:8b:b8:09:70:48:fa:2e:d9:c0:
                    d2:40:d3:44:f2:42:d0:52:b7:fc:dd:bc:21:ba:d5:
                    1b:fc:92:5f:71:06:f5:23:d5:f8:b9:dd:03:72:05:
                    f6:a0:8a:2f:0b:d0:b1:bd:64:4d:b4:39:23:be:12:
                    0b:8a:25:2c:d7:61:46:ad:c0:f6:cb:1d:c8:e8:80:
                    98:55:50:81:37:e6:a1:62:f9:b5:1d:e0:2d:2d:cf:
                    1a:3d:50:05:29:62:5e:da:51:d8:31:af:41:b8:b6:
                    6e:bc:bf:15:73:3c:ec:45:90:4f:f0:45:94:a9:f4:
                    34:6b:db:49:f8:f6:97:dd:07:de:42:3a:68:35:e8:
                    2f:21:36:63:f1:15:4d:f6:36:de:96:65:47:bb:d9:
                    b3:3d:8a:44:ec:9e:7e:6f:2d:d2:2f:d0:2b:88:c6:
                    59:23:62:26:bc:cc:43:43:80:96:95:7b:a0:19:b2:
                    40:da:44:9b:99:76:76:b1:c0:72:00:97:99:0a:49:
                    4e:77:f8:ca:dd:2a:80:21:74:a8:9c:8d:dc:65:0f:
                    46:43:3d:56:5c:0a:e8:7b:61:48:34:c9:d4:55:e8:
                    4d:ad:51:c4:2c:eb:50:77:7b:4c:e1:cd:3d:ff:8c:
                    80:7b:75:76:d5:24:a6:58:b2:87:76:be:9b:1c:9c:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:57:D7:E8:F4:B3:70:43:6D:9F:3A:24:65:8B:7F:D2:34:12:58
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uZ1X1-j0s3BDbZ86JGWLf9I0Elg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.29/32

    Signature Algorithm: sha256WithRSAEncryption
         50:50:92:56:34:14:ab:1b:4a:64:95:2d:0b:9e:bf:e3:72:7c:
         0c:2b:e6:76:59:a9:35:7e:a2:94:60:8c:ab:29:49:9c:4c:ba:
         40:17:93:25:6f:34:bc:1e:2a:21:59:7a:12:97:ab:39:e4:90:
         23:da:00:ca:4c:f7:91:ab:5f:e2:48:b9:13:45:c4:74:b3:c1:
         02:af:1d:c1:9d:b6:00:83:90:18:08:b0:6f:8e:3f:dc:35:44:
         87:db:9a:28:cc:cd:11:43:1f:60:02:5c:94:09:0d:6e:f9:d8:
         19:a0:33:9f:ff:8e:37:4f:d4:b0:ac:2c:15:9f:a5:55:f1:e7:
         bb:9d:93:b1:e6:92:c2:02:9a:9e:81:c2:59:e3:94:78:bb:ce:
         40:3d:27:80:e2:58:7e:f9:c5:6e:21:17:29:95:8c:4d:7c:cd:
         e5:8a:15:28:0f:cb:48:fa:63:71:79:7e:74:28:9f:34:a2:8f:
         21:62:87:c2:bb:f7:da:35:af:03:a7:1f:20:94:2c:99:31:46:
         35:cf:56:14:d6:27:d8:5c:b8:9c:df:9f:1b:b7:04:36:cf:ca:
         a5:29:d3:74:e3:66:6b:d6:c1:ff:1e:a6:1f:42:44:9e:55:db:
         86:d5:8d:8b:ed:e1:97:94:c0:ff:97:0c:2f:c1:c7:5c:24:ae:
         d6:b4:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----