Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa
File:                     4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa (raw, json)
Hash identifier:          9GleTcukzE0rgRIyG/PYFag54ZZ9qvRnBqNk6hH+5WY=
Subject key identifier:   E1:88:75:6D:93:A8:E2:9D:BE:57:60:D9:C8:36:4F:4A:BD:A7:C2:91
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       07
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa
Signing time:             Thu 25 Aug 2022 08:28:34 +0000
ROA not before:           Thu 25 Aug 2022 08:28:34 +0000
ROA not after:            Fri 25 Aug 2023 07:39:18 +0000
asID:                     9615
IP address blocks:        202.224.112.0/20 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 25 08:28:34 2022 GMT
            Not After : Aug 25 07:39:18 2023 GMT
        Subject: CN=E188756D93A8E29DBE5760D9C8364F4ABDA7C291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:b7:0e:8a:89:2d:4d:cc:bd:e9:ad:7b:df:
                    a1:87:04:03:85:86:1b:11:86:d8:9a:aa:dc:2a:90:
                    97:35:c4:7a:32:d2:52:2e:14:82:85:0e:c9:2b:2f:
                    b4:9e:a1:11:6e:0c:3d:0d:cb:c6:02:88:84:de:69:
                    44:fd:5f:8c:ea:5c:db:e9:ba:3c:b7:df:34:f8:36:
                    fb:14:03:b0:3c:88:8c:0b:dd:c1:63:ac:a3:57:98:
                    67:f2:48:61:0d:84:d4:7c:2b:e0:a9:cc:d1:56:d9:
                    8f:c1:fb:6d:da:6a:1a:6c:f1:fc:92:5a:3e:09:77:
                    3f:6f:10:61:27:b4:c3:aa:02:5c:13:98:ce:a7:2e:
                    c5:64:29:9b:24:af:70:4b:be:9c:5d:cd:1e:aa:68:
                    40:a8:64:a4:d9:74:88:1e:85:9c:3c:16:aa:db:79:
                    0e:b5:d8:df:37:e4:c2:13:2e:c6:cb:cd:d6:9f:5c:
                    29:8f:b7:68:c6:29:b5:4a:80:80:d6:c5:84:64:83:
                    25:ea:d9:50:f2:a1:a3:a5:8e:fa:b2:1e:2e:54:19:
                    1a:1c:ae:5e:01:78:04:41:2c:fb:08:4e:d3:fa:af:
                    fd:1c:27:5e:18:8a:32:56:ad:c4:2f:75:b0:45:83:
                    59:e3:88:32:d0:aa:98:d2:2e:1a:51:05:2e:88:82:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:88:75:6D:93:A8:E2:9D:BE:57:60:D9:C8:36:4F:4A:BD:A7:C2:91
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/4Yh1bZOo4p2-V2DZyDZPSr2nwpE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:7e:33:41:ad:49:9c:44:1f:fa:63:c2:74:d6:23:7a:fa:
         19:a0:08:74:d5:b7:69:21:f3:d0:b3:12:4b:63:0b:51:27:44:
         22:2d:cd:84:b8:5f:f5:31:5c:c8:8a:15:1c:7c:1c:46:db:90:
         69:48:3b:e8:f7:8e:e5:04:70:4a:54:39:36:a0:fc:49:38:1e:
         0b:64:87:6c:e2:d1:b1:ac:a8:62:dc:ef:f4:52:76:97:86:23:
         9a:0c:a1:69:e2:fd:e1:d0:0b:2c:45:27:8a:01:6f:36:f3:75:
         08:d7:ab:f4:47:97:cc:f2:3a:38:d7:66:e9:18:db:84:b2:58:
         22:fe:6e:0b:0d:ab:c8:f4:60:ca:89:89:7f:9b:dd:f2:c5:ee:
         63:da:ac:83:d5:d7:e4:6b:b2:2c:ca:32:16:98:5e:9c:a3:ba:
         6b:69:7a:c4:1a:a4:72:27:3d:a6:4d:2b:f2:2b:ff:6c:18:de:
         c5:a6:e6:24:46:18:96:4a:f1:e9:cd:69:1c:18:b5:de:72:8e:
         bf:d5:ac:85:62:8a:c3:58:b7:93:8f:10:f0:8f:c9:f3:0c:b9:
         ee:bb:72:16:dd:c1:63:aa:b2:f7:12:93:15:80:e2:13:0c:a5:
         92:d9:c7:dd:91:b9:8e:3f:29:46:78:26:c0:e9:3d:59:73:10:
         26:0c:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----