Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/vGkwjiEcaqE3GfB_koen43MkB7M.roa
File:                     vGkwjiEcaqE3GfB_koen43MkB7M.roa (raw, json)
Hash identifier:          nN7qTUIKC3hCRJujdOMXEB5wsIDoCMD++79o1gktDcw=
Subject key identifier:   BC:69:30:8E:21:1C:6A:A1:37:19:F0:7F:92:87:A7:E3:73:24:07:B3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       028B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/vGkwjiEcaqE3GfB_koen43MkB7M.roa
Signing time:             Mon 20 Feb 2023 08:03:39 +0000
ROA not before:           Mon 20 Feb 2023 08:03:39 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.35/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:39 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=BC69308E211C6AA13719F07F9287A7E3732407B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:4c:a3:fe:4d:bb:66:34:73:7a:29:a1:38:
                    1f:25:1b:e9:51:59:d1:b2:80:9d:98:aa:f6:48:45:
                    4a:db:b0:60:60:6a:d6:d4:0b:e7:fc:32:d4:1e:77:
                    e0:cd:ea:93:6b:46:19:24:03:33:8f:94:0f:7b:41:
                    d8:5a:89:82:4e:c1:f3:65:6b:2c:c5:e0:57:b1:9d:
                    b7:ff:3c:f1:e1:33:67:ce:8a:33:4d:2d:10:84:56:
                    c6:e7:8c:7c:be:c4:28:8f:d1:a8:2b:d1:a3:c1:7c:
                    8e:0e:a9:0b:df:9b:4e:c0:94:21:4e:09:e5:43:3d:
                    fe:7a:87:df:53:8d:27:3a:da:c3:a9:a7:07:2e:91:
                    ea:bb:49:e0:02:bf:9f:cc:f3:f7:41:c6:e9:f8:b5:
                    28:d7:01:0d:d8:2b:3a:1d:a8:b2:fb:bc:bf:82:59:
                    12:f3:9e:d7:a7:73:50:52:ac:f3:d5:d1:c7:ad:a9:
                    e4:49:6f:f2:fe:e0:6a:7f:28:7b:26:8b:84:6e:7b:
                    9c:33:d3:4b:63:c4:82:dd:6d:da:30:af:50:7f:24:
                    6f:8e:d8:12:95:0f:af:ff:12:61:c7:ec:7d:d9:d6:
                    9d:9a:b9:e4:b5:40:40:58:47:79:e0:90:a8:1f:55:
                    bc:a3:92:4b:e2:43:20:b6:c2:d3:32:75:14:4c:8d:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:69:30:8E:21:1C:6A:A1:37:19:F0:7F:92:87:A7:E3:73:24:07:B3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/vGkwjiEcaqE3GfB_koen43MkB7M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.35/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:4a:d7:af:12:89:f6:21:77:f0:36:d2:08:e6:9c:c8:42:e7:
         82:5e:11:bb:a2:c8:a2:3d:9e:01:31:d2:30:dc:ba:e0:0f:89:
         c3:5a:93:92:24:3c:ca:d3:7b:01:9e:6b:2c:70:6e:45:87:5e:
         e6:fb:09:63:48:3d:a2:df:7a:10:1f:df:24:5c:c2:1d:26:31:
         b7:43:af:58:ab:0b:06:f9:2d:45:33:0b:ee:c3:75:07:cb:8e:
         95:2b:c1:2a:82:cb:b2:b6:31:d1:28:7f:09:97:7e:dc:c7:db:
         75:d2:8b:16:24:74:5f:5c:8f:93:14:9b:d9:8e:e0:b3:53:37:
         08:11:0e:26:0f:2f:0b:ba:15:d6:b5:22:1d:3e:59:11:7e:93:
         5a:bf:79:61:0e:89:cf:d4:e6:ff:f2:18:78:fc:6e:f7:bd:dd:
         6d:bb:6f:9e:43:a9:e2:98:21:f7:20:aa:58:52:c9:e4:de:2c:
         71:66:4e:47:03:c9:94:99:b7:d1:6f:3c:4a:90:4d:0f:dc:2b:
         a7:a0:6a:a0:03:09:63:d7:27:34:12:2d:c5:53:4c:55:ca:38:
         f7:bf:1c:7d:4d:31:e3:9e:bf:a6:12:24:2d:30:b2:91:7f:4b:
         c0:8d:a4:4a:b1:5c:54:d1:51:b9:bb:9b:11:49:f9:ee:2d:9f:
         59:94:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----