Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/0/323630323a666266363a3a2f33322d3438203d3e20393435.roa
File:                     323630323a666266363a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          2eC2pxtXhVT9QLtvijfb6hyI04ZnrAzVJNYT8ZPSw2I=
Subject key identifier:   90:B0:EE:08:6E:59:7C:7E:79:2E:DA:5C:3B:F5:48:29:15:19:A6:18
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       56994B5B86D90DC1FA36C665F0E7AEDA0E7B0986
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Subject info access:      rsync://dev.tw/rpki/August/0/323630323a666266363a3a2f33322d3438203d3e20393435.roa
Signing time:             Tue 17 Sep 2024 17:13:51 +0000
ROA not before:           Tue 17 Sep 2024 17:08:51 +0000
ROA not after:            Tue 16 Sep 2025 17:13:51 +0000
asID:                     945
IP address blocks:        2602:fbf6::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 10:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:99:4b:5b:86:d9:0d:c1:fa:36:c6:65:f0:e7:ae:da:0e:7b:09:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Sep 17 17:08:51 2024 GMT
            Not After : Sep 16 17:13:51 2025 GMT
        Subject: CN=90B0EE086E597C7E792EDA5C3BF548291519A618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:0d:f8:d8:df:54:b0:0c:cb:84:2c:8b:bc:
                    75:7f:b7:64:ab:2d:a4:da:57:3d:dc:77:a5:03:c7:
                    01:35:af:7f:86:af:52:70:52:fb:3a:6f:9b:22:96:
                    d3:96:1b:f6:ce:3f:99:a7:bb:38:de:4d:d3:47:d8:
                    8a:6e:e1:64:f1:30:75:06:4e:3e:1f:29:28:b9:c9:
                    2f:ae:1f:88:e3:b3:8e:a8:fc:91:3c:33:64:c0:d9:
                    aa:ed:de:89:b6:f7:4b:de:38:45:1c:e0:c1:58:ef:
                    86:da:c5:8f:0a:a3:b2:41:92:3a:18:5c:68:f5:8e:
                    19:60:32:93:2f:8d:03:cd:c3:7a:2b:a6:3f:c2:77:
                    6e:bf:0c:fa:1a:5a:ca:de:df:2a:e9:df:34:51:3d:
                    dc:d2:fe:ad:f7:c7:d5:ae:85:a9:29:71:6b:a6:c5:
                    55:d9:f6:29:8f:4f:70:d9:28:ee:b6:93:71:de:a5:
                    73:e8:83:f4:80:2c:51:3a:ca:a3:e9:6a:25:73:44:
                    50:b1:85:97:9f:af:08:df:4a:33:50:41:c7:44:a2:
                    9c:56:05:fd:be:a2:37:3a:16:14:b9:b2:d6:59:7d:
                    99:96:7d:84:d1:24:f5:39:a3:f0:8c:0a:3d:65:77:
                    45:89:aa:1e:d9:8d:eb:bf:6c:03:f7:2c:3a:bc:75:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:EE:08:6E:59:7C:7E:79:2E:DA:5C:3B:F5:48:29:15:19:A6:18
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/0/323630323a666266363a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:5b:cd:5d:3a:3c:43:e4:52:94:c6:30:36:c7:ab:b9:99:92:
         b4:6f:a3:f4:2f:00:5b:57:d6:c9:ba:3a:3c:df:f8:78:2e:04:
         06:e7:9b:46:dc:f3:b4:71:ce:f6:12:3b:96:da:cc:10:d5:25:
         f8:59:31:7c:e9:54:cd:fa:d3:0f:31:00:9b:61:0a:a4:9f:fe:
         bf:2d:29:c6:a0:77:ad:5d:ae:ed:29:2f:50:84:64:09:1a:f6:
         91:e3:02:79:38:4a:71:0f:41:5b:e1:e6:c2:54:ab:d9:fc:c9:
         9b:29:5d:07:1d:80:48:fa:24:d7:62:8c:9a:4e:7f:d7:8c:75:
         56:eb:1c:f4:cd:2b:61:b8:0e:7d:35:43:31:e3:d3:3f:91:05:
         8b:10:32:8f:79:5f:c0:0c:aa:85:6f:c0:a8:79:be:d2:f1:7c:
         8b:5a:ee:a7:1c:87:aa:f2:6e:be:a9:9e:20:b8:17:22:84:41:
         a8:53:2c:30:36:fe:e3:dd:c3:4e:ce:b1:02:f6:24:43:30:59:
         b3:01:3c:6e:05:12:b7:14:52:d8:aa:30:49:34:4a:91:28:dc:
         ec:67:f2:33:43:bf:f5:a1:8d:d1:8a:78:3c:9e:87:13:c9:ae:
         be:ab:91:fe:63:6f:fd:60:22:66:b4:79:18:77:d7:44:ae:bb:
         2e:4c:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----