Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/z55AdGruoQe4PMAY71yl7qN4erQ.roa
File:                     z55AdGruoQe4PMAY71yl7qN4erQ.roa (raw, json)
Hash identifier:          2F2lGr4cFOu6Dm+nm68gMdCJaCgaHg+RJe1Nazo8EvU=
Subject key identifier:   CF:9E:40:74:6A:EE:A1:07:B8:3C:C0:18:EF:5C:A5:EE:A3:78:7A:B4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       49
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/z55AdGruoQe4PMAY71yl7qN4erQ.roa
Signing time:             Fri 10 Feb 2023 07:41:24 +0000
ROA not before:           Fri 10 Feb 2023 07:41:24 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.244/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:24 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=CF9E40746AEEA107B83CC018EF5CA5EEA3787AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:d1:98:ea:64:ab:87:93:0f:cf:4d:70:91:
                    54:2b:8f:6b:6a:fc:07:f6:c8:9c:27:5a:01:68:e4:
                    d1:1b:fb:09:8a:12:1f:f3:a7:c6:94:5a:38:62:b6:
                    ee:e6:da:c3:5e:08:49:02:9b:9c:5a:82:57:0b:1d:
                    38:80:1d:77:74:c1:74:c6:9a:37:60:40:93:67:78:
                    2f:d4:08:27:b1:2d:ea:31:a4:09:59:d7:ec:e2:2d:
                    a9:fb:75:d3:65:6d:f4:7b:a8:a9:e3:92:78:bc:80:
                    ba:9e:77:e1:19:dd:5d:29:58:f2:f1:98:dd:bc:11:
                    35:f0:72:94:d3:67:80:bf:3b:d1:20:f9:59:06:c6:
                    d3:f0:c5:8d:b3:e1:94:3f:16:ca:7c:b5:55:b4:08:
                    54:54:aa:40:89:9f:71:8d:89:a0:af:56:da:9b:82:
                    bd:a4:63:ab:c8:3c:e6:01:27:94:77:80:22:f6:cf:
                    a5:e2:ab:d4:95:d4:22:0f:20:03:23:90:6b:ee:b7:
                    da:53:87:cf:ce:af:a7:2a:e6:c4:58:24:89:0c:9b:
                    8c:b8:4d:02:52:ef:fd:2d:a4:db:ef:bb:ad:5e:4f:
                    c4:3d:10:e4:f7:56:63:e9:25:b1:d9:c7:51:87:58:
                    62:45:43:2b:f8:4a:74:45:92:d3:d1:45:ba:b7:dc:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9E:40:74:6A:EE:A1:07:B8:3C:C0:18:EF:5C:A5:EE:A3:78:7A:B4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/z55AdGruoQe4PMAY71yl7qN4erQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.244/32

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:00:95:aa:4a:f8:e3:b3:db:20:8a:e7:e2:14:c8:3d:a8:
         fc:4c:7d:34:90:0f:cf:06:96:16:8d:ae:15:6e:f4:0e:f0:d0:
         f4:a9:f4:0a:15:78:dd:4d:dc:5f:6d:a6:28:eb:a2:5c:e4:e3:
         e1:4a:40:d3:ea:46:f1:f4:e1:47:f1:5d:6b:a3:f4:39:a7:72:
         01:55:33:b2:30:ac:ef:ee:de:95:84:01:fe:9c:1f:f0:b6:da:
         40:39:ba:42:03:d2:ad:1d:92:a2:5a:b1:5c:56:a4:18:3d:e6:
         9b:88:8a:2a:d9:5c:b0:72:6f:fe:56:fd:dc:08:ad:3a:e8:84:
         95:92:79:65:64:5f:0e:ea:37:1d:23:6e:92:7d:22:93:f9:29:
         f1:3e:02:c1:a4:5c:41:fe:c1:49:9e:9c:7b:b5:46:a6:83:71:
         44:52:d6:b5:03:be:b1:5f:6c:28:c1:f0:1e:56:33:41:53:e0:
         64:d9:85:0d:45:9a:4e:e5:0e:9c:3f:d6:97:4a:bf:97:a5:da:
         a9:4d:b9:14:66:1d:9f:69:70:c7:3f:ce:36:2c:6a:88:9c:ac:
         6f:24:84:d4:db:8b:5f:be:e1:65:14:69:09:f3:7b:ef:e2:2e:
         c0:64:7a:76:99:0c:dd:60:10:ca:ef:2d:07:06:6f:49:78:37:
         64:cc:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----