Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yJ-W6zr4OagQ7t8Jzq_GkjxDmN0.roa
File:                     yJ-W6zr4OagQ7t8Jzq_GkjxDmN0.roa (raw, json)
Hash identifier:          N/7XlhM3AY4nMw+VRK3mU3MdWo5b+TWOUgMI6QaqCws=
Subject key identifier:   C8:9F:96:EB:3A:F8:39:A8:10:EE:DF:09:CE:AF:C6:92:3C:43:98:DD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0229
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yJ-W6zr4OagQ7t8Jzq_GkjxDmN0.roa
Signing time:             Mon 20 Feb 2023 07:59:26 +0000
ROA not before:           Mon 20 Feb 2023 07:59:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.40/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C89F96EB3AF839A810EEDF09CEAFC6923C4398DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:4b:34:ee:ca:7e:52:c6:d7:34:33:9e:b6:
                    d6:05:10:0d:06:ca:01:5e:12:e2:ac:34:18:66:23:
                    f1:fc:f9:35:91:c5:3c:80:5c:74:b8:05:5f:27:27:
                    7b:aa:15:b2:c3:b5:6f:0b:4a:28:fe:8d:c0:a2:49:
                    9c:39:12:89:b8:9d:48:f9:a9:ac:6b:de:3c:8a:51:
                    c0:5d:54:76:a7:03:98:b7:4f:28:2f:69:1e:0c:85:
                    18:6f:65:ee:ee:c7:b1:89:60:db:de:39:dd:26:a6:
                    93:39:ba:5f:1a:22:fa:77:ba:1e:10:2c:c3:3d:7f:
                    5e:c0:ec:47:98:a5:90:b3:bd:3b:de:95:84:72:fa:
                    77:ff:f9:a0:0c:5d:71:15:74:bf:3e:2f:f4:3c:32:
                    8a:ee:51:31:81:94:78:20:07:ce:25:63:22:d2:4a:
                    c8:69:26:65:8e:70:79:02:b2:dd:f6:c1:7e:0b:00:
                    3e:f4:f7:c8:b1:8f:07:9f:17:b0:fa:88:16:a2:5d:
                    ef:3d:25:b8:fd:a4:d9:a2:11:e0:7d:db:a2:4a:94:
                    17:44:0a:33:4a:85:50:88:1c:bc:45:fe:4b:b9:d3:
                    b2:45:6a:9c:39:13:77:7b:6e:34:db:f0:b4:f2:85:
                    6e:69:4d:ff:96:e8:f3:e0:cf:eb:b7:b0:5c:cf:2f:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9F:96:EB:3A:F8:39:A8:10:EE:DF:09:CE:AF:C6:92:3C:43:98:DD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yJ-W6zr4OagQ7t8Jzq_GkjxDmN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.40/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:ae:ff:83:59:7a:05:4d:7e:2c:ca:62:fb:7f:81:ce:d3:82:
         8c:c8:0f:35:2a:67:b3:5a:bc:0b:4e:79:40:31:a4:e7:dd:8e:
         71:be:3e:5c:fb:75:8a:be:cb:45:fe:18:eb:4d:44:ee:42:8b:
         cd:d0:59:e7:8d:50:f7:d9:de:40:7d:09:25:d4:16:f7:3f:8a:
         01:81:b5:09:8a:9d:31:31:02:04:1f:77:e3:25:5f:2e:44:60:
         b4:b3:db:b3:79:dd:03:0a:6f:d7:72:f3:e6:9c:62:b2:a7:42:
         d9:34:20:4d:f1:51:08:b0:61:39:b3:8b:4e:19:b1:19:de:62:
         7e:6d:9a:23:b0:38:e7:f7:d9:15:fb:6b:71:75:e9:18:d3:3f:
         9a:3b:80:ac:df:df:00:6b:76:ca:a1:40:c6:2a:ab:c6:cb:cc:
         c1:e5:81:dc:d8:3c:db:7c:18:4d:4a:a9:8d:bc:8b:00:59:4d:
         23:9c:5c:af:d0:00:77:a3:37:df:9a:4d:be:6f:e4:9c:c4:9e:
         f0:8e:2c:ab:b9:f6:a9:66:4d:5c:51:71:e8:33:27:39:22:e4:
         bb:4f:45:72:1f:01:c1:b7:56:2a:bc:cf:c6:26:f4:24:b1:03:
         98:fd:a7:aa:4f:70:92:91:87:ac:e9:1a:cc:d9:a8:06:ad:93:
         b8:75:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----