Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a3230303a3a2f34302d3438203d3e20313531333338.roa
File:                     326131323a646434373a3230303a3a2f34302d3438203d3e20313531333338.roa (raw, json)
Hash identifier:          Rc/LtUrhGIdvgwZh4L1UahE9423ZV5VgnSlLvD6R0bM=
Subject key identifier:   82:92:DF:69:30:50:3C:B2:CB:32:EC:28:EB:CB:AE:D1:26:2E:8C:9C
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       46FE9010E37B06DCD2C3C5B4AA5726323955E3D1
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/326131323a646434373a3230303a3a2f34302d3438203d3e20313531333338.roa
Signing time:             Tue 17 Oct 2023 16:13:24 +0000
ROA not before:           Tue 17 Oct 2023 16:08:24 +0000
ROA not after:            Tue 15 Oct 2024 16:13:24 +0000
asID:                     151338
IP address blocks:        2a12:dd47:200::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fe:90:10:e3:7b:06:dc:d2:c3:c5:b4:aa:57:26:32:39:55:e3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 16:08:24 2023 GMT
            Not After : Oct 15 16:13:24 2024 GMT
        Subject: CN=8292DF6930503CB2CB32EC28EBCBAED1262E8C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:80:47:38:49:c9:f1:26:b5:c6:72:fe:25:
                    82:d4:c4:75:58:00:10:6d:c8:ad:7f:60:29:60:f3:
                    85:a5:d0:c4:d7:e7:f7:fc:24:35:cf:91:79:b3:6d:
                    60:d9:c1:e2:2e:07:3f:cb:9f:08:94:99:02:a1:23:
                    bb:5d:99:c8:6a:a8:69:26:b2:2b:a3:aa:eb:85:02:
                    30:c7:63:82:d4:43:83:4f:82:4c:3d:70:e5:74:19:
                    06:aa:a5:d3:8a:eb:ce:27:9d:01:94:61:c1:4c:f1:
                    f2:10:75:07:ca:dd:d2:92:9c:37:49:d2:14:fc:c1:
                    eb:57:5a:24:7d:34:d9:f0:c7:e6:21:23:df:a9:43:
                    42:f7:8d:c9:d1:ec:04:f2:9b:e7:3f:76:6b:0f:b7:
                    99:e8:49:22:64:63:75:62:95:94:e3:5b:e9:27:72:
                    29:3c:88:1a:ef:b8:8f:c1:55:e1:4c:38:9b:96:0b:
                    71:77:9d:e4:c8:60:1b:e9:ed:07:4d:fb:e8:f7:8c:
                    d5:5b:52:e8:51:11:35:b3:7e:f7:1e:1e:34:64:b0:
                    6b:f0:ca:87:6b:cf:5b:5e:b5:32:bf:4b:b3:be:58:
                    08:b6:a5:72:ea:66:49:0d:47:18:c8:01:63:51:f1:
                    cd:46:3a:b3:4a:3b:95:29:c0:18:e2:c9:cc:40:01:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:DF:69:30:50:3C:B2:CB:32:EC:28:EB:CB:AE:D1:26:2E:8C:9C
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a3230303a3a2f34302d3438203d3e20313531333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:f4:19:80:f4:27:1f:12:0a:b3:0a:66:87:3a:18:1f:12:42:
         37:8e:1c:1c:08:7f:f1:b5:7f:16:06:ff:1f:7c:5e:9c:51:06:
         46:ce:ba:52:75:aa:8b:88:e8:0d:13:fa:76:b7:f5:b6:59:7b:
         06:81:c5:e4:15:d7:53:e7:04:73:d9:3c:3b:e3:4e:25:ae:c6:
         58:63:f8:74:f6:01:28:da:93:3e:50:2f:9d:21:f1:38:79:b9:
         ae:5c:18:9a:83:96:d5:47:dd:9d:ff:6a:8f:01:92:67:59:f2:
         8b:b1:79:86:37:5f:3c:37:91:f1:c1:ef:1b:2a:3d:27:fe:df:
         08:b4:92:c7:90:8a:3a:9f:55:c6:22:25:68:5b:5c:6c:10:57:
         2b:0e:51:6d:be:f6:24:97:63:4c:82:4e:8c:c5:39:79:f4:d2:
         a6:3d:3b:4d:6b:a3:8f:49:08:25:70:33:ac:08:4b:a5:b8:95:
         64:4c:ca:9d:ed:ae:76:5a:a8:6d:9b:b0:d7:e6:0f:e2:ea:d7:
         4b:d0:08:3e:fd:71:83:fb:00:1a:b4:84:51:96:23:d1:2e:b0:
         59:8e:74:8e:17:5b:ca:01:29:e2:60:cc:f1:04:db:19:6e:56:
         a5:ab:60:d3:11:2c:f2:e2:57:00:d2:a4:e9:7c:42:50:15:08:
         2c:41:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----