Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/32332e3133392e34302e302f32342d3234203d3e20313937353337.roa
File:                     32332e3133392e34302e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          Lu3CYDwT+K6dyEjzn3Hy8vA41iDKPGadkFsffvtjQZk=
Subject key identifier:   9C:71:C5:2A:CA:0F:B1:F7:C7:85:4A:E6:C6:68:F0:AB:F2:97:CC:5E
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       4BC4CAD26243FCC79C13DCBCC18A3612894E5279
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/32332e3133392e34302e302f32342d3234203d3e20313937353337.roa
Signing time:             Sat 09 Mar 2024 08:34:49 +0000
ROA not before:           Sat 09 Mar 2024 08:29:49 +0000
ROA not after:            Sat 08 Mar 2025 08:34:49 +0000
asID:                     197537
IP address blocks:        23.139.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Apr 2024 18:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c4:ca:d2:62:43:fc:c7:9c:13:dc:bc:c1:8a:36:12:89:4e:52:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Mar  9 08:29:49 2024 GMT
            Not After : Mar  8 08:34:49 2025 GMT
        Subject: CN=9C71C52ACA0FB1F7C7854AE6C668F0ABF297CC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:d8:d8:e7:24:3d:fa:fa:6e:65:87:34:09:
                    c4:16:ce:52:6f:68:be:c5:3c:be:07:a7:72:ff:00:
                    66:16:26:88:5b:e9:27:9a:35:ed:78:7c:dc:a6:89:
                    d1:f4:cc:5a:85:dd:0e:25:b9:67:d0:c4:cc:62:22:
                    b7:0c:d0:00:68:2a:1f:1d:d8:b7:ed:05:90:e4:74:
                    55:db:f4:f5:b8:3c:ff:eb:ae:74:9d:f7:31:6c:01:
                    a7:0d:19:f0:31:34:b3:f0:00:80:c9:ce:b0:30:2a:
                    9e:1c:31:3f:76:9b:66:1c:ad:b5:2a:93:40:5e:90:
                    0a:7d:0a:38:a1:ff:0d:85:ee:2a:2f:49:6b:87:9f:
                    4c:85:f5:3e:95:f9:d4:60:7e:41:d7:17:22:ad:08:
                    3a:e2:48:b1:02:e4:5f:46:24:60:b9:15:d8:09:af:
                    30:2e:4b:5a:d5:8d:23:45:a8:3b:94:e0:8e:9c:a3:
                    d7:9b:1c:96:c9:ff:c2:9e:47:66:d5:7f:59:c9:e3:
                    db:02:75:19:5e:ae:83:bc:80:50:2d:a7:5e:cc:6f:
                    7e:5d:ac:01:73:4c:af:06:ec:e2:82:3a:1b:52:fb:
                    87:ac:8d:8b:e1:d9:62:46:21:c9:da:dc:5e:ec:5c:
                    0a:04:22:0b:ec:92:7a:d7:4a:43:83:18:6f:f8:e2:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:71:C5:2A:CA:0F:B1:F7:C7:85:4A:E6:C6:68:F0:AB:F2:97:CC:5E
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/32332e3133392e34302e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:1c:71:26:08:e3:65:5c:be:2a:44:8b:98:c6:32:ff:49:
         97:12:cf:5e:58:0a:f5:b9:6b:c3:42:58:3a:d5:bb:5b:27:47:
         b5:28:89:a0:ac:28:f2:fb:d6:f2:d0:d9:8b:90:38:73:28:b2:
         d6:f1:e8:2e:df:61:96:61:04:4d:73:e2:86:8e:fe:c3:f8:8c:
         b1:f4:81:4c:1b:ea:f7:71:5f:83:b8:a6:c3:f8:fe:b5:b4:04:
         e6:2b:c9:74:13:75:0a:96:ca:6e:35:82:80:02:6c:68:b4:3c:
         dc:49:ac:8e:ae:06:27:5f:a1:4e:fa:63:e7:13:26:2f:76:57:
         46:82:8e:c9:6a:74:da:90:cc:e2:f2:a8:86:b7:71:6d:92:d9:
         c8:a1:05:38:e7:12:cc:53:23:ad:6b:06:22:27:52:11:12:3d:
         12:65:73:06:4d:f0:7d:e0:de:2c:03:40:05:de:6e:ef:38:99:
         ee:03:77:e5:b2:f0:15:5b:fa:0d:65:cc:fe:44:62:d3:e8:1a:
         e9:85:19:be:8a:52:1b:69:da:8f:06:6c:da:32:a3:5a:22:ac:
         82:55:bf:ca:b9:bb:4a:71:39:2e:c1:c3:6c:b8:81:b3:5a:98:
         44:ec:da:4e:9a:bd:40:a1:26:5a:b3:b3:4f:56:b8:c5:a9:43:
         07:f4:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 22:09:05 2024 by rpki-client on console-ams.rpki-client.org