Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xsaM29BHNGw2dV-OIZSYWIBUVQg.roa
File:                     xsaM29BHNGw2dV-OIZSYWIBUVQg.roa (raw, json)
Hash identifier:          93IXKA1J2mSB0jRZr+fHyeFL66ZcF23XsxTTajR1LVE=
Subject key identifier:   C6:C6:8C:DB:D0:47:34:6C:36:75:5F:8E:21:94:98:58:80:54:55:08
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01CA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xsaM29BHNGw2dV-OIZSYWIBUVQg.roa
Signing time:             Mon 20 Feb 2023 07:55:21 +0000
ROA not before:           Mon 20 Feb 2023 07:55:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.225/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C6C68CDBD047346C36755F8E2194985880545508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:eb:75:88:28:56:5a:2a:e1:72:46:1f:fe:
                    00:19:4e:ad:58:f5:a1:34:3e:90:b2:29:7d:18:fc:
                    be:c0:28:d7:ea:62:cc:ba:0f:db:c2:fc:aa:ab:9a:
                    80:8b:a0:85:37:9d:4a:f2:2c:86:04:82:7b:13:23:
                    71:7c:39:ad:9b:4d:b1:ac:c2:16:f4:83:4d:db:50:
                    ac:a3:8d:a2:77:1e:43:e8:60:60:07:c7:91:87:aa:
                    ec:aa:3d:48:be:8e:77:10:75:93:33:1b:05:d4:1f:
                    19:aa:f0:fb:5a:a9:f4:72:f4:15:12:01:84:6d:37:
                    f4:9f:81:ad:26:9f:c4:62:e0:f3:ad:35:27:cf:26:
                    12:12:fa:d3:f4:e9:aa:8b:25:6e:d4:ae:10:fc:52:
                    f4:56:d8:46:93:dd:ce:51:72:8b:ea:47:40:1e:ee:
                    7b:6b:cf:4a:dc:ae:86:eb:d0:97:69:da:2a:43:18:
                    d8:bd:7b:cc:a1:ce:f4:c2:98:66:d2:a2:5e:60:e7:
                    28:5d:92:b3:8a:fc:8d:44:68:dc:04:b8:39:83:4b:
                    cd:4f:74:53:71:f6:67:7f:bc:ca:c4:d9:6d:16:7b:
                    6a:1f:a1:dc:da:56:0c:a0:e4:e2:73:cc:86:f3:20:
                    ea:3e:82:4d:58:ce:af:82:1d:b6:37:f6:c5:41:71:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C6:8C:DB:D0:47:34:6C:36:75:5F:8E:21:94:98:58:80:54:55:08
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xsaM29BHNGw2dV-OIZSYWIBUVQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.225/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:44:09:d6:15:db:3e:9d:7c:ce:8d:1e:40:1a:78:c0:19:
         11:24:91:96:24:84:5f:94:6d:d1:9a:4c:a8:66:5e:5f:cd:67:
         56:f6:c8:01:53:2a:67:9c:bf:df:c5:6b:47:0a:c6:6f:2c:8d:
         59:27:8c:bd:69:6b:45:c4:02:74:aa:be:aa:24:f3:c1:5d:e6:
         73:4e:b9:88:a5:8c:65:48:81:da:45:67:13:da:91:22:b7:b1:
         db:eb:46:82:74:67:54:15:a3:5e:e6:53:5a:d8:71:30:0e:f0:
         8c:4b:ad:d1:3e:b2:ad:d5:c5:3a:5e:0f:fc:65:f3:e3:b3:d8:
         b4:d5:ea:45:d3:98:0f:f0:65:1a:7a:97:5f:f8:fb:f7:d6:fe:
         dc:7c:6c:9a:59:d2:f5:35:5a:e9:a1:45:5b:68:37:d4:39:6a:
         17:ab:b6:ac:b5:2e:21:bc:a9:f1:c3:2f:03:53:8a:ad:40:42:
         23:7f:7d:b4:ee:25:22:c7:5b:aa:60:0e:88:0b:58:5e:ba:8e:
         c5:ce:78:f7:a5:dd:80:6c:ca:44:b8:ee:8f:59:62:43:69:fb:
         4e:10:10:fb:07:3d:e7:fc:f4:ee:87:59:0e:5a:3e:ab:ee:0e:
         fe:65:88:e9:8a:5a:6f:65:81:2c:22:48:6a:03:a1:1c:e7:3f:
         03:fc:d1:65
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MjFaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM2QzY4Q0RCRDA0NzM0
NkMzNjc1NUY4RTIxOTQ5ODU4ODA1NDU1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMZut1iChWWirhckYf/gAZTq1Y9aE0PpCyKX0Y/L7AKNfqYsy6
D9vC/KqrmoCLoIU3nUryLIYEgnsTI3F8Oa2bTbGswhb0g03bUKyjjaJ3HkPoYGAH
x5GHquyqPUi+jncQdZMzGwXUHxmq8PtaqfRy9BUSAYRtN/Sfga0mn8Ri4POtNSfP
JhIS+tP06aqLJW7UrhD8UvRW2EaT3c5RcovqR0Ae7ntrz0rcrobr0Jdp2ipDGNi9
e8yhzvTCmGbSol5g5yhdkrOK/I1EaNwEuDmDS81PdFNx9md/vMrE2W0We2ofodza
Vgyg5OJzzIbzIOo+gk1Yzq+CHbY39sVBcSxLAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUxsaM29BHNGw2dV+OIZSYWIBUVQgwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My94c2FNMjlCSE5HdzJkVi1PSVpTWVdJQlVWUWcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxa4TANBgkqhkiG9w0BAQsFAAOCAQEAK9pECdYV2z6dfM6NHkAa
eMAZESSRliSEX5Rt0ZpMqGZeX81nVvbIAVMqZ5y/38VrRwrGbyyNWSeMvWlrRcQC
dKq+qiTzwV3mc065iKWMZUiB2kVnE9qRIrex2+tGgnRnVBWjXuZTWthxMA7wjEut
0T6yrdXFOl4P/GXz47PYtNXqRdOYD/BlGnqXX/j799b+3HxsmlnS9TVa6aFFW2g3
1DlqF6u2rLUuIbyp8cMvA1OKrUBCI399tO4lIsdbqmAOiAtYXrqOxc5496XdgGzK
RLjuj1liQ2n7ThAQ+wc95/z07odZDlo+q+4O/mWI6Ypab2WBLCJIagOhHOc/A/zR
ZQ==
-----END CERTIFICATE-----