Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/BZAfovyFgeLxxA1g5nlunfpecZQ.roa
File:                     BZAfovyFgeLxxA1g5nlunfpecZQ.roa (raw, json)
Hash identifier:          /mUFMo5HqNwVgRiZQObtiglZhG1/MtEwX7g2fjZm2gs=
Subject key identifier:   05:90:1F:A2:FC:85:81:E2:F1:C4:0D:60:E6:79:6E:9D:FA:5E:71:94
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       02
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/BZAfovyFgeLxxA1g5nlunfpecZQ.roa
Signing time:             Tue 11 Oct 2022 04:37:02 +0000
ROA not before:           Tue 11 Oct 2022 04:37:02 +0000
ROA not after:            Wed 11 Oct 2023 04:31:36 +0000
asID:                     55376
IP address blocks:        27.118.0.0/20 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Oct 11 04:37:02 2022 GMT
            Not After : Oct 11 04:31:36 2023 GMT
        Subject: CN=05901FA2FC8581E2F1C40D60E6796E9DFA5E7194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:a9:81:89:d2:96:88:23:6f:e8:aa:b1:97:
                    32:f2:cc:2e:25:a6:d2:ed:2f:13:e0:8d:34:cc:48:
                    bb:b7:a6:ca:38:5e:80:46:e2:20:e4:62:ce:b3:e1:
                    73:9d:ef:c9:2e:91:df:43:70:a0:f1:f9:02:ef:47:
                    51:86:16:6e:0c:f4:c0:24:d0:3b:2d:ac:48:46:8f:
                    20:13:7b:ca:92:6e:ea:63:f1:a3:d0:c1:c8:7c:75:
                    e4:0c:07:9b:51:79:14:7b:4d:0f:4e:b1:65:df:b0:
                    28:01:3c:69:c1:1c:7c:a8:a9:ed:d9:29:bf:cd:db:
                    6f:d2:b0:94:cf:a1:ca:92:80:11:a2:5a:dc:9b:9a:
                    1a:46:c9:58:fc:39:3d:b9:aa:d3:e3:b8:3b:cf:08:
                    33:5c:fd:0e:04:3c:77:42:20:0c:99:cc:79:14:08:
                    7f:ac:54:44:66:11:a5:ee:d2:b6:90:72:2b:a6:03:
                    68:a4:a1:23:6e:26:c1:6b:90:74:9d:e3:24:26:c9:
                    ef:64:d2:45:4d:a4:a3:b2:f3:c4:99:b2:7c:5c:77:
                    cb:04:82:e0:1d:59:aa:bf:a1:80:d9:e1:68:71:20:
                    a9:66:1d:ea:62:d8:47:e9:1a:bc:cc:13:a1:0c:30:
                    b3:bf:2f:6a:ae:c7:44:83:8d:24:59:18:e7:25:49:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:90:1F:A2:FC:85:81:E2:F1:C4:0D:60:E6:79:6E:9D:FA:5E:71:94
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/BZAfovyFgeLxxA1g5nlunfpecZQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.118.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:09:2d:68:9a:fb:7c:d2:82:de:5b:6c:98:0a:85:31:6d:7c:
         09:0c:2d:b3:37:9b:d5:7a:2b:92:93:ac:69:f7:ed:ef:e3:70:
         0f:74:06:fc:f3:e2:76:c5:64:48:a6:b1:7e:db:e5:e7:65:cd:
         6c:67:12:b9:dd:ff:f7:b6:21:f1:27:e3:3e:66:08:3b:f4:c6:
         ff:07:58:5d:07:a8:aa:c8:4f:c2:0d:37:80:e3:ab:f3:a8:ea:
         43:13:a5:45:57:06:24:06:7f:15:47:4c:2a:48:0a:cf:28:d8:
         96:2e:92:aa:62:9d:85:4f:4b:98:20:e5:70:ea:38:2c:ea:50:
         6a:f8:47:0d:c5:0e:22:32:60:d1:2c:10:6e:45:27:ad:74:16:
         da:93:16:06:be:19:75:c0:2f:80:d5:1e:45:d5:94:03:49:2d:
         dd:2a:d2:b6:c5:08:14:5b:dc:da:3d:d5:e3:70:ff:23:d0:81:
         0f:cf:ef:32:bd:b0:4f:c2:ec:d0:61:db:df:de:71:b5:09:b8:
         ca:b7:cc:7e:c0:27:3f:7f:f8:24:8e:d6:34:2a:f8:b3:fd:4b:
         11:5d:90:46:47:26:0d:98:33:53:a3:fb:6d:8e:85:99:de:72:
         02:0d:c3:b6:49:eb:3c:93:03:41:c9:13:bc:cd:e7:2b:a5:18:
         3c:d1:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----