Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y-envPrKRxkgDt5lB5qEZK0FAKI.roa
File:                     y-envPrKRxkgDt5lB5qEZK0FAKI.roa (raw, json)
Hash identifier:          nVaidWoHx/rDiEg8etpAwneCMUdQiUXvhwVBXR/u6dg=
Subject key identifier:   CB:E7:A7:BC:FA:CA:47:19:20:0E:DE:65:07:9A:84:64:AD:05:00:A2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       019A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y-envPrKRxkgDt5lB5qEZK0FAKI.roa
Signing time:             Mon 20 Feb 2023 07:50:59 +0000
ROA not before:           Mon 20 Feb 2023 07:50:59 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.96/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:59 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=CBE7A7BCFACA4719200EDE65079A8464AD0500A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:15:53:f4:ac:e4:2e:d1:5c:ac:f4:df:46:a9:
                    99:c7:0c:56:76:17:37:0d:04:fc:c3:75:13:c1:c0:
                    a0:02:b7:36:60:ca:0c:35:da:45:07:34:dc:65:e9:
                    fe:72:da:f3:ef:b6:f6:cf:a7:f8:90:26:a2:7e:ed:
                    ab:cd:22:54:ac:87:b6:29:3d:7e:ce:28:4a:74:e5:
                    2a:8d:c0:cb:81:be:42:8a:24:e3:ed:fd:90:63:30:
                    7e:b3:77:ea:13:3b:c0:df:4d:57:e9:e7:f5:37:5c:
                    ee:c1:9d:61:31:30:d4:02:82:11:3b:59:5b:34:8a:
                    70:5f:cf:73:b1:31:d8:9a:5e:d6:1a:7d:a6:89:bc:
                    61:5d:6b:84:49:1c:f7:65:8e:aa:0a:7e:a0:84:9c:
                    71:11:be:e1:e7:47:64:a5:84:e3:74:0e:a6:09:67:
                    0b:52:f6:bb:81:78:d6:4f:13:b8:5b:96:46:3d:b0:
                    fa:22:45:ac:2d:f0:0f:4a:39:38:41:23:05:e2:5f:
                    25:9e:03:1d:e8:ae:60:17:57:af:17:0a:2d:a0:c4:
                    28:2c:91:98:5d:ab:08:f2:1e:e5:f1:8c:a6:5d:60:
                    d0:14:64:9d:31:76:1c:25:b2:6d:7f:0f:b6:fb:c9:
                    38:de:23:f7:db:48:ba:26:2f:84:e9:53:6d:9d:3a:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E7:A7:BC:FA:CA:47:19:20:0E:DE:65:07:9A:84:64:AD:05:00:A2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/y-envPrKRxkgDt5lB5qEZK0FAKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.96/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:4e:c0:cf:c8:6f:c6:e3:9e:47:eb:49:a7:1a:c3:27:48:
         ea:66:3d:29:a0:5d:c2:27:f5:95:0f:7f:88:5f:54:4e:c1:5f:
         ab:d4:7a:63:34:a5:1e:43:1a:fb:3a:c1:54:38:b2:b9:1e:6d:
         93:6e:f9:fc:b8:d2:71:12:a2:31:b1:22:2f:4e:10:68:6f:e7:
         87:07:af:c3:cf:fe:aa:ac:59:ce:a2:f2:a9:5e:ce:bb:25:28:
         df:5f:e2:26:dc:b0:37:dc:7b:61:3a:be:89:84:b6:6b:24:40:
         7a:87:32:6c:09:a6:b3:e1:1f:b3:b5:97:e2:de:e6:2e:38:11:
         cb:bc:a1:f6:4b:d7:c4:68:b7:d3:b9:e4:19:a0:d3:db:1b:89:
         99:5a:c5:c6:9c:4a:9b:4e:76:90:c3:77:43:ae:27:79:84:6b:
         0b:4c:27:79:c0:5c:81:64:56:63:29:97:80:c2:55:9d:26:42:
         c2:f5:25:bb:7a:e5:57:0d:e8:4c:f1:f2:cd:19:1d:12:e8:60:
         78:9f:b9:8f:ec:e4:69:e8:f8:d5:61:13:1e:3b:35:08:6b:45:
         51:fb:97:60:12:a5:b1:90:46:65:75:59:7a:d6:91:a1:55:2d:
         04:aa:d2:a2:a2:37:c1:44:6d:92:a2:dc:49:97:91:d5:d7:14:
         ab:6c:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----