Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/3139392e3138392e3135362e302f32322d3234203d3e20393435.roa
File:                     3139392e3138392e3135362e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          vtPg8R/W2GS5cfA6NKkXh+Jx2YaTokm6NE/dCphq+VU=
Subject key identifier:   16:68:87:4A:6E:2A:C2:A1:B0:82:59:BC:E6:DF:0D:58:52:35:1E:1B
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       6A3D718905634CBAE95904E4F0A583763D25CBC2
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/3139392e3138392e3135362e302f32322d3234203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:20:39 +0000
ROA not before:           Tue 17 Oct 2023 16:15:39 +0000
ROA not after:            Tue 15 Oct 2024 16:20:39 +0000
asID:                     945
IP address blocks:        199.189.156.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:71:89:05:63:4c:ba:e9:59:04:e4:f0:a5:83:76:3d:25:cb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Oct 17 16:15:39 2023 GMT
            Not After : Oct 15 16:20:39 2024 GMT
        Subject: CN=1668874A6E2AC2A1B08259BCE6DF0D5852351E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:06:15:24:10:88:85:86:6e:48:90:67:82:
                    ac:a8:1a:9c:a3:dd:ca:6d:b1:f7:fc:05:cd:95:5a:
                    44:c6:c1:83:06:bf:ba:64:85:d1:30:4d:a9:60:3e:
                    6c:f1:0d:6c:53:81:08:46:e0:b5:e1:73:72:ca:47:
                    dd:5d:bb:8e:b2:68:15:b4:22:e5:b0:34:5a:6d:c9:
                    db:04:db:39:38:b4:f5:0c:20:16:58:c1:af:26:47:
                    a2:7d:38:88:ec:42:72:92:d8:cd:24:a5:6b:7a:85:
                    fc:b5:a2:6c:92:fd:88:ed:3e:85:29:9a:f9:0f:ab:
                    21:74:85:01:b4:01:0c:fd:f6:8f:84:08:78:2f:80:
                    08:6e:7c:22:29:23:de:b9:bf:96:3b:b0:c6:d0:95:
                    89:83:7f:83:d7:14:f0:7c:d5:b6:03:57:78:22:8a:
                    43:bd:91:60:64:44:71:49:b9:8e:7a:ac:de:e4:07:
                    90:26:fa:8c:d9:18:d4:ea:d1:01:1f:7a:30:b4:5a:
                    97:2f:08:7b:0d:ed:52:c2:13:e1:99:81:80:02:a4:
                    b4:72:d2:7b:e2:c5:c3:81:93:0c:52:30:da:01:f2:
                    a2:12:00:7a:ee:53:a1:16:9c:8c:25:05:af:cf:cd:
                    dd:11:b0:04:43:41:9f:2d:fa:34:9d:b3:42:de:7b:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:68:87:4A:6E:2A:C2:A1:B0:82:59:BC:E6:DF:0D:58:52:35:1E:1B
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/3139392e3138392e3135362e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:d2:36:72:50:51:9f:22:f6:43:ae:ce:4a:87:b4:5b:9e:ed:
         db:3f:a1:84:63:aa:d0:3c:d9:56:6f:b0:a1:f7:47:6f:01:16:
         15:40:9f:b2:9a:97:88:6a:47:b2:41:d9:75:fc:49:95:a1:7c:
         cc:00:02:d0:73:0c:06:64:1f:68:fc:3b:b1:ae:27:88:3a:92:
         92:0c:d3:0b:ce:f4:27:e1:f9:dc:fc:8a:e6:64:5e:b7:de:ca:
         7b:69:b7:05:6f:6a:25:1a:81:aa:9d:b6:89:39:35:b2:03:14:
         45:04:a9:a9:12:ef:90:a1:dc:5a:c2:cf:60:8e:10:2e:2d:37:
         5c:1d:28:33:3e:33:95:54:24:7b:e9:c0:6a:cf:7b:52:0c:ea:
         b0:5f:3b:4d:bc:e6:62:6f:3e:46:ff:58:f5:1d:b6:ad:78:43:
         f2:56:ce:6d:ec:6d:a2:3d:fc:5f:9c:ef:0b:65:f3:6e:11:5a:
         63:df:80:bf:01:9c:66:12:9d:b6:dc:46:de:73:e8:e9:b3:b5:
         0d:6b:23:99:93:3d:a2:2a:e3:71:82:f4:c6:aa:f5:1c:44:a7:
         8e:74:b0:9c:f5:57:2a:b7:da:9d:1c:2a:26:c8:09:ac:02:41:
         44:71:fd:9c:02:bb:80:e4:0a:a7:de:96:45:f9:d6:f2:d3:49:
         57:a4:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----