Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yEUuzxGcEVo_awvDY26Tv6c_aJg.roa
File:                     yEUuzxGcEVo_awvDY26Tv6c_aJg.roa (raw, json)
Hash identifier:          MwOScqJFvQMFZkdXFFppELOAzg5r7VFH29gHkhRW12k=
Subject key identifier:   C8:45:2E:CF:11:9C:11:5A:3F:6B:0B:C3:63:6E:93:BF:A7:3F:68:98
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0148
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yEUuzxGcEVo_awvDY26Tv6c_aJg.roa
Signing time:             Wed 15 Feb 2023 02:28:27 +0000
ROA not before:           Wed 15 Feb 2023 02:28:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.15/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C8452ECF119C115A3F6B0BC3636E93BFA73F6898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:3d:bc:2c:bd:57:f8:e5:7a:d8:89:f3:55:
                    cb:27:40:e7:23:8d:fc:c6:d3:85:a6:86:33:a6:0d:
                    4e:4f:90:31:7b:e9:3e:cd:29:20:f3:c8:64:b4:2b:
                    5b:f6:06:6b:32:c0:1b:2b:b5:6e:92:66:bd:db:0e:
                    1c:44:c5:c5:e6:71:47:8b:e0:4e:7e:29:1d:2f:0a:
                    4d:f9:22:bc:5b:4b:6c:0b:49:ba:68:e5:d0:48:00:
                    76:d3:ff:2b:dd:21:9e:d8:34:d7:58:b4:e2:99:7a:
                    f8:ca:03:eb:ca:6c:a7:cb:be:cb:b8:db:92:1c:05:
                    ae:6e:98:b7:91:d5:47:fe:34:a2:26:22:34:81:d0:
                    83:0b:28:30:9f:6f:92:52:38:eb:9e:c3:7c:98:c6:
                    ed:b8:df:89:93:ca:5a:78:7c:5c:68:45:0a:1b:d5:
                    7a:44:12:34:45:95:55:0e:08:b8:97:15:dd:18:02:
                    c0:85:ac:7f:4b:34:a4:db:56:0e:71:49:05:91:0f:
                    e6:fc:eb:90:b7:8c:1b:01:c9:95:8f:6a:47:6a:ae:
                    29:b7:40:4d:f3:3b:b2:83:ed:07:c3:9f:c9:e4:9a:
                    14:6e:cb:fd:e4:1d:f2:ec:16:20:a6:18:df:5e:84:
                    10:a8:57:50:97:d9:4d:f0:11:bc:00:9f:45:ae:96:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:45:2E:CF:11:9C:11:5A:3F:6B:0B:C3:63:6E:93:BF:A7:3F:68:98
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yEUuzxGcEVo_awvDY26Tv6c_aJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.15/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:65:95:e5:73:cf:71:b5:5f:2e:96:3b:4d:f7:cd:78:db:c8:
         e4:2d:09:a0:3a:3f:18:4f:5c:8e:98:07:ef:38:21:51:ee:d5:
         b9:11:75:53:31:a7:95:bc:05:fa:9e:37:d4:59:d9:f1:a4:c5:
         12:e5:f2:08:9f:c0:ce:dc:5a:e0:0e:66:35:14:07:9a:ee:de:
         db:b2:65:eb:6e:f9:0b:58:37:9f:58:7b:33:7c:5b:7c:43:8f:
         7f:1c:d7:b2:02:96:52:9c:db:e9:a9:63:a7:d4:ba:56:53:35:
         cd:c4:c1:d9:06:7a:ea:80:58:9f:e0:c5:c2:d9:bf:4f:ab:c7:
         ce:06:ad:64:ce:ac:b3:c8:04:9b:ed:ee:99:f1:60:4d:ca:73:
         ea:43:d9:3d:e0:1c:76:1a:77:cc:09:f7:e3:22:d4:72:16:44:
         81:f0:1f:3f:4a:bb:de:30:7d:ad:5e:72:5a:40:67:e9:ca:8c:
         85:58:e9:46:15:f8:cb:2d:99:86:c9:85:d1:2f:dc:eb:06:d2:
         65:78:fa:a2:6e:eb:bb:6e:be:a3:8f:a8:ab:51:19:84:21:43:
         57:41:57:f8:d7:a0:c7:c3:fe:38:62:79:a5:42:02:b5:d1:8f:
         80:a3:e7:b0:90:b1:94:6a:1f:6b:c3:39:09:b8:c0:d1:be:3f:
         18:f9:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----