Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/1/326131333a633030303a323030303a3a2f34302d3438203d3e2037373139.roa
File:                     326131333a633030303a323030303a3a2f34302d3438203d3e2037373139.roa (raw, json)
Hash identifier:          39JR24HRWo/+m4F5UubktTht3OyEBN+/wVB3JonNZew=
Subject key identifier:   FA:8C:5C:26:F9:01:1F:F6:E4:5B:2F:1D:97:54:29:9E:76:45:95:55
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       6023D1723A105B38B4C1DE1D110748E1D8C46213
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Subject info access:      rsync://dev.tw/rpki/August/1/326131333a633030303a323030303a3a2f34302d3438203d3e2037373139.roa
Signing time:             Tue 17 Oct 2023 16:17:58 +0000
ROA not before:           Tue 17 Oct 2023 16:12:58 +0000
ROA not after:            Tue 15 Oct 2024 16:17:58 +0000
asID:                     7719
IP address blocks:        2a13:c000:2000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 05:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:23:d1:72:3a:10:5b:38:b4:c1:de:1d:11:07:48:e1:d8:c4:62:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: Oct 17 16:12:58 2023 GMT
            Not After : Oct 15 16:17:58 2024 GMT
        Subject: CN=FA8C5C26F9011FF6E45B2F1D9754299E76459555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6c:b2:d0:10:25:1a:31:5d:18:58:60:cb:40:
                    ba:3e:ca:34:cf:a5:55:15:8d:0f:23:c2:31:01:6c:
                    0d:ab:82:6c:fd:cd:10:3a:ff:57:e1:ff:4a:28:16:
                    5c:b8:04:1f:82:12:81:f7:e0:c5:cd:a2:34:b0:04:
                    3c:96:3c:d0:bf:79:45:e8:dc:96:9b:98:96:b2:b6:
                    da:3a:32:84:ee:9b:8d:98:a3:0d:34:ea:2f:3d:0d:
                    5c:c4:54:78:e0:3b:ee:58:a7:63:9d:c6:16:0c:08:
                    34:84:1d:58:1b:8b:ea:a7:5b:33:39:8d:01:bd:2f:
                    e1:c3:79:4d:84:42:43:e4:4f:10:ee:ef:86:64:7a:
                    70:fb:a4:3f:90:76:63:14:05:02:f2:a4:b7:94:df:
                    3c:11:20:c6:55:cb:cf:8c:2c:93:c7:5a:34:c2:1f:
                    4e:f3:85:7e:14:4c:26:db:60:be:bf:ce:9e:a5:86:
                    d4:6a:a0:49:db:76:15:73:19:20:48:ba:a0:ab:52:
                    9e:ed:14:8c:03:87:06:5a:6a:2d:bc:01:9a:a0:54:
                    dc:23:83:f9:dc:07:1c:60:3b:65:9a:2e:80:e6:83:
                    e3:59:00:de:9f:1d:1f:67:8b:0a:5c:dd:e9:96:cf:
                    19:fd:b3:1e:00:37:f2:6d:33:26:66:60:2c:eb:14:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8C:5C:26:F9:01:1F:F6:E4:5B:2F:1D:97:54:29:9E:76:45:95:55
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/1/326131333a633030303a323030303a3a2f34302d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:14:42:df:91:bc:dc:bd:c7:4d:e1:3d:70:76:56:16:b0:26:
         04:ad:e4:d9:52:8f:fa:7a:22:ae:7a:7a:0b:11:e7:90:f4:55:
         f9:8a:82:a1:14:55:4b:ea:8c:30:12:d8:52:b4:c4:bd:0f:bb:
         f6:f7:8b:15:39:a6:bd:31:e6:32:4e:37:98:4d:81:76:9d:79:
         ff:85:ba:8d:ad:b4:70:ec:e3:2a:ae:87:ce:8c:82:9c:dd:05:
         c6:ba:fe:d1:39:8e:4f:1d:f4:5b:59:96:b6:47:c9:0f:30:73:
         d8:a5:83:2e:bf:ac:c6:0d:fb:4a:51:26:1e:1d:af:4f:58:f7:
         50:fa:0c:9e:46:84:bc:a7:fb:6a:dc:59:52:56:cd:dd:ac:68:
         64:ef:46:5b:4c:f5:8a:3d:9f:1e:77:4e:a5:ae:fe:a4:dd:b0:
         be:b0:ce:f0:09:34:bf:ab:cd:35:f5:13:59:2d:96:2b:b9:2e:
         a0:0c:4e:e3:78:01:50:a4:58:73:dc:24:3c:42:4e:db:ec:e9:
         11:ce:51:ac:e9:bf:9c:db:3d:0f:d3:51:83:67:4f:66:16:98:
         55:57:49:eb:9b:b2:67:97:3b:c6:f7:1f:c0:2d:9d:19:35:1b:
         c4:e3:dc:4b:85:8e:ff:22:fd:97:af:e1:32:51:21:d5:f2:43:
         ed:4d:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----