Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/x2Hy3qq4ABprKCSgiSA3PuI51ZU.roa
File:                     x2Hy3qq4ABprKCSgiSA3PuI51ZU.roa (raw, json)
Hash identifier:          9DA5gLEKM2ZAbtFKAePhTViOl6r4E+9uJNf/hHGUzOE=
Subject key identifier:   C7:61:F2:DE:AA:B8:00:1A:6B:28:24:A0:89:20:37:3E:E2:39:D5:95
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A6
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/x2Hy3qq4ABprKCSgiSA3PuI51ZU.roa
Signing time:             Mon 20 Feb 2023 08:05:32 +0000
ROA not before:           Mon 20 Feb 2023 08:05:32 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.56/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:32 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C761F2DEAAB8001A6B2824A08920373EE239D595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7b:e4:cb:5a:bf:8e:ae:5b:e0:cd:6b:6d:42:
                    7d:48:36:a3:a4:81:b0:ce:56:d9:f7:07:f8:26:67:
                    80:78:0f:36:4a:9b:bf:c3:48:c9:c2:23:f1:21:68:
                    22:ff:2b:38:d8:77:a8:81:6d:64:e8:66:99:4b:df:
                    08:cd:06:2d:23:af:68:72:0e:47:5c:d9:d9:7b:bb:
                    b6:a5:7a:89:98:89:d6:b4:28:b6:12:ac:5e:b3:eb:
                    61:89:33:55:5c:07:9e:3d:ae:7d:f4:fd:c3:4c:3e:
                    32:9a:94:77:95:e2:5b:d2:54:d2:52:72:e2:a6:69:
                    1b:57:2a:e3:c0:dd:46:be:9f:3b:a8:f6:59:fe:f5:
                    63:63:c8:b8:c7:e7:b0:5b:3e:f8:6d:69:ee:af:b4:
                    d1:cb:ee:fb:14:bc:06:14:f8:84:41:e1:7c:f0:6c:
                    59:c4:cb:d8:6b:c2:cf:1a:01:d2:d1:7f:8c:50:f7:
                    f9:3f:8f:f4:13:12:60:a5:d4:0b:1d:ea:7c:28:d6:
                    60:ee:75:88:a9:2f:8e:d4:18:5d:2a:99:35:4b:9c:
                    41:6a:b8:b2:b6:0a:de:99:f4:a0:d9:b3:87:ed:c6:
                    66:af:be:9a:25:b3:07:07:aa:e9:a6:6a:04:f9:62:
                    e7:be:c6:81:59:c0:2f:0e:d8:85:c7:35:fb:b1:69:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:61:F2:DE:AA:B8:00:1A:6B:28:24:A0:89:20:37:3E:E2:39:D5:95
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/x2Hy3qq4ABprKCSgiSA3PuI51ZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.56/32

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:ff:86:7f:c9:7c:ef:ef:c3:48:74:d5:d0:1e:6f:ef:ab:
         08:f7:29:d6:3e:8a:a3:57:f1:37:a5:ba:92:b2:06:c5:90:3e:
         e8:20:0b:49:e7:36:54:d1:4f:d7:45:05:df:b5:1c:20:5e:a7:
         0a:5a:b0:b1:c1:e9:85:6d:3d:20:e6:c3:12:9b:79:6f:4b:da:
         4b:62:7d:99:19:82:3d:b1:b0:d7:6b:29:1b:33:e9:a9:18:c0:
         73:ae:3b:d0:33:33:2c:5b:81:d4:c5:c1:37:6f:f9:cd:88:07:
         ed:4b:53:7a:9d:4a:ed:2b:b6:f1:b9:64:e8:4f:01:7e:44:bd:
         68:2e:5a:b2:b4:16:07:8c:ad:b7:92:cc:7d:ad:5f:83:90:c1:
         1c:d1:eb:73:69:85:ca:9c:98:46:38:da:7f:e8:2f:86:7a:07:
         72:ee:4d:df:19:23:d6:19:2f:f9:50:a3:26:65:fa:47:b5:47:
         9c:5d:de:de:b8:ab:9e:fd:07:e6:d3:1a:fb:bf:4c:0b:9d:fb:
         9d:b6:b8:2d:e3:c2:14:28:40:9c:0f:a3:a2:2c:66:45:c7:88:
         d8:84:31:64:ec:49:6a:2c:1a:73:f8:13:04:aa:9b:01:a3:76:
         a3:f1:f5:d3:6c:0a:e2:b1:6f:e9:b7:6b:f1:ee:7e:77:6d:ec:
         74:27:cd:cb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzJaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM3NjFGMkRFQUFCODAw
MUE2QjI4MjRBMDg5MjAzNzNFRTIzOUQ1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDne+TLWr+OrlvgzWttQn1INqOkgbDOVtn3B/gmZ4B4DzZKm7/D
SMnCI/EhaCL/KzjYd6iBbWToZplL3wjNBi0jr2hyDkdc2dl7u7aleomYida0KLYS
rF6z62GJM1VcB549rn30/cNMPjKalHeV4lvSVNJScuKmaRtXKuPA3Ua+nzuo9ln+
9WNjyLjH57BbPvhtae6vtNHL7vsUvAYU+IRB4XzwbFnEy9hrws8aAdLRf4xQ9/k/
j/QTEmCl1Asd6nwo1mDudYipL47UGF0qmTVLnEFquLK2Ct6Z9KDZs4ftxmavvpol
swcHqummagT5Yue+xoFZwC8O2IXHNfuxaUILAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUx2Hy3qq4ABprKCSgiSA3PuI51ZUwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My94Mkh5M3FxNEFCcHJLQ1NnaVNBM1B1STUxWlUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcODANBgkqhkiG9w0BAQsFAAOCAQEAZZz/hn/JfO/vw0h01dAe
b++rCPcp1j6Ko1fxN6W6krIGxZA+6CALSec2VNFP10UF37UcIF6nClqwscHphW09
IObDEpt5b0vaS2J9mRmCPbGw12spGzPpqRjAc6470DMzLFuB1MXBN2/5zYgH7UtT
ep1K7Su28blk6E8BfkS9aC5asrQWB4ytt5LMfa1fg5DBHNHrc2mFypyYRjjaf+gv
hnoHcu5N3xkj1hkv+VCjJmX6R7VHnF3e3rirnv0H5tMa+79MC537nba4LePCFChA
nA+joixmRceI2IQxZOxJaiwac/gTBKqbAaN2o/H102wK4rFv6bdr8e5+d23sdCfN
yw==
-----END CERTIFICATE-----