Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/1/3138352e302e31392e302f32342d3234203d3e203531383138.roa
File:                     3138352e302e31392e302f32342d3234203d3e203531383138.roa (raw, json)
Hash identifier:          XOps5xKbGJuMKUWU9WRY53+k1qpZ8FjcmrVgjZljjvU=
Subject key identifier:   2E:AB:88:E3:F0:13:48:FE:A8:26:E5:9F:FA:66:81:20:E2:16:E0:08
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       763AC0AE9688151A941CBE5EB31453D2F4FDC42D
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Subject info access:      rsync://dev.tw/rpki/August/1/3138352e302e31392e302f32342d3234203d3e203531383138.roa
Signing time:             Sun 15 Sep 2024 04:13:27 +0000
ROA not before:           Sun 15 Sep 2024 04:08:27 +0000
ROA not after:            Sun 14 Sep 2025 04:13:27 +0000
asID:                     51818
IP address blocks:        185.0.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 20:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3a:c0:ae:96:88:15:1a:94:1c:be:5e:b3:14:53:d2:f4:fd:c4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: Sep 15 04:08:27 2024 GMT
            Not After : Sep 14 04:13:27 2025 GMT
        Subject: CN=2EAB88E3F01348FEA826E59FFA668120E216E008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:50:c0:8f:a5:9e:7d:3d:0d:ad:8e:18:e2:
                    ae:53:25:0c:8d:2f:e3:94:b5:37:5c:f5:05:2a:9c:
                    02:63:df:33:88:ce:21:a6:bb:03:ca:16:48:7a:6f:
                    96:ed:88:1e:66:ca:22:02:13:c7:ea:ab:6c:3b:10:
                    e9:df:93:8c:94:ed:e1:78:6d:20:b3:78:84:bb:ec:
                    33:8d:89:0a:4b:75:66:b3:22:8b:9b:08:40:fa:b4:
                    21:46:7f:77:16:43:ad:a4:c0:bc:ed:7e:71:0c:bf:
                    e5:da:c8:d0:f1:7a:87:1b:e0:f1:d1:ca:bd:3f:6d:
                    25:18:c6:be:8c:35:a3:43:74:ac:4b:77:44:41:0a:
                    ab:da:fd:f0:1f:47:54:31:78:d5:06:dd:a1:46:e1:
                    80:10:b8:2c:64:44:4c:31:99:83:c9:43:87:ac:ba:
                    01:27:db:22:f1:1f:b8:48:74:42:81:47:d3:69:a3:
                    76:ae:e1:60:be:c6:bf:d1:64:72:fc:82:eb:0e:b8:
                    3c:8e:3e:9f:f0:e8:61:b0:0d:b4:9a:c8:a0:72:f7:
                    07:0f:5e:55:9e:0f:80:28:0f:21:94:b7:73:4a:3e:
                    8c:63:48:76:41:23:c3:70:81:ad:eb:c1:95:fd:92:
                    c2:a8:07:5a:c6:91:ca:58:74:35:8a:be:03:f5:01:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:88:E3:F0:13:48:FE:A8:26:E5:9F:FA:66:81:20:E2:16:E0:08
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/1/3138352e302e31392e302f32342d3234203d3e203531383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:fb:de:d8:09:4c:b7:27:4c:b3:08:e2:7e:1b:3e:34:25:
         90:ec:b9:74:cd:e4:88:95:9e:f5:f1:5b:04:82:05:bb:19:3b:
         12:4a:0a:f7:79:bc:6c:a8:da:71:f8:72:27:4a:93:16:db:a8:
         23:b0:60:c0:96:7e:63:98:1a:e5:f4:bf:57:a4:3d:70:77:c0:
         06:0c:99:82:8c:75:de:45:ad:99:f2:48:8b:f8:54:de:9f:cd:
         6a:d8:ef:e2:22:7f:5d:38:c2:5e:de:98:83:86:ad:3b:a2:50:
         37:ad:9d:51:27:58:66:7b:51:01:d9:0a:1b:57:5a:c3:56:2f:
         44:f5:66:07:28:0f:71:22:cd:2e:7a:ea:01:b7:f1:66:05:56:
         bf:64:ee:33:9f:0c:b9:eb:9e:26:9f:d4:6b:c2:f8:48:c0:b1:
         b2:67:cc:ae:94:ce:e7:50:1e:d4:51:e0:71:89:38:88:a2:58:
         8b:09:26:71:ac:f4:35:cf:2a:1e:ce:5e:2f:82:f9:42:6f:cd:
         53:25:15:75:35:c0:1f:6f:ef:90:d3:1e:b6:a4:4a:25:51:a2:
         3a:08:49:51:4f:20:17:da:a3:74:d7:90:f8:7c:b6:c2:47:c7:
         5c:c5:14:37:38:0e:d5:18:1b:5e:3b:32:19:ca:78:7c:f0:1d:
         89:9f:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:28:32 2024 by rpki-client on console-ams.rpki-client.org