Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/3139392e3138392e3135362e302f32332d3234203d3e2039363633.roa
File:                     3139392e3138392e3135362e302f32332d3234203d3e2039363633.roa (raw, json)
Hash identifier:          aeHsC+ZnSz9kO8zZm9JexMdj+p9oWR9SUwbrhyi+6DA=
Subject key identifier:   C2:54:D9:30:D4:37:D7:D6:F3:42:58:E6:41:99:1A:D4:89:7F:41:1C
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       395D1B5926A3F2BD658A6EE643AEFB367A1FD901
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/3139392e3138392e3135362e302f32332d3234203d3e2039363633.roa
Signing time:             Tue 17 Oct 2023 16:14:07 +0000
ROA not before:           Tue 17 Oct 2023 16:09:07 +0000
ROA not after:            Tue 15 Oct 2024 16:14:07 +0000
asID:                     9663
IP address blocks:        199.189.156.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5d:1b:59:26:a3:f2:bd:65:8a:6e:e6:43:ae:fb:36:7a:1f:d9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Oct 17 16:09:07 2023 GMT
            Not After : Oct 15 16:14:07 2024 GMT
        Subject: CN=C254D930D437D7D6F34258E641991AD4897F411C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:8f:cd:37:98:b9:77:bf:13:68:b5:52:b1:
                    8e:92:5b:16:1d:7b:55:da:dc:75:df:f7:55:b2:74:
                    f3:01:ad:8e:9b:2c:8e:ef:f9:8b:12:aa:de:33:63:
                    79:35:17:7b:5e:d0:ec:41:b2:e9:14:dd:95:31:e0:
                    eb:be:5b:e9:fd:d2:75:8d:51:a2:c1:af:1e:19:93:
                    64:e4:4d:95:54:7a:4b:b3:e8:9a:94:22:82:01:8d:
                    bb:ad:fc:73:ef:9d:07:2e:a3:31:7e:72:4e:5f:32:
                    9f:81:7a:cc:30:01:8b:ac:ce:59:81:bf:9b:5b:87:
                    c1:f1:c6:b8:db:eb:47:41:1f:cf:17:cc:b9:91:7b:
                    27:1f:f8:cb:99:c7:b5:f5:40:f7:d6:57:0a:4d:c0:
                    0b:36:a2:35:76:07:42:2d:58:14:5a:10:59:73:61:
                    04:2b:95:34:39:a9:b4:55:3e:6f:36:52:05:6d:3a:
                    21:ba:11:2c:b9:22:1a:5d:9a:37:3f:20:77:60:ef:
                    7a:7e:13:81:9c:0f:6a:14:b7:3f:d4:3e:4e:2c:42:
                    d4:98:5a:3f:86:72:fc:29:d1:2a:86:10:72:8e:e0:
                    2c:09:fb:9f:bb:e0:dd:1e:0a:80:0e:16:30:35:e5:
                    1f:c7:06:c0:54:e4:b8:f3:b7:9e:40:33:31:ad:9d:
                    bc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:D9:30:D4:37:D7:D6:F3:42:58:E6:41:99:1A:D4:89:7F:41:1C
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/3139392e3138392e3135362e302f32332d3234203d3e2039363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:a6:15:c3:12:1c:79:66:69:60:67:d8:fe:97:f3:e1:6b:22:
         6f:1a:e5:ac:bb:16:6a:9f:e0:4d:85:29:d2:4c:95:08:4b:19:
         c4:5c:e3:7a:c7:5c:e1:79:67:01:54:63:59:3f:e8:df:ad:ab:
         62:41:4a:80:6a:51:4d:9a:8b:82:ac:23:18:09:44:f8:47:98:
         0e:63:19:ac:43:86:d0:db:0f:79:fb:00:b7:13:23:fb:d3:9d:
         ef:9c:70:9b:d3:fb:eb:ff:b2:a0:af:b4:1d:6f:6d:c8:f4:08:
         cf:94:60:15:ed:0f:8c:f3:03:b2:43:57:19:68:a7:13:f4:12:
         e9:a5:e9:02:c3:99:f2:7d:7d:93:d2:c0:2b:3c:85:66:bf:82:
         c8:2f:b5:71:ee:c6:9a:e8:91:85:08:bd:5a:d6:1a:f0:98:ad:
         6f:cf:85:b0:f8:71:54:f3:df:a5:68:be:a9:8c:b5:17:56:81:
         e0:13:4d:3a:84:97:fb:bc:fe:e6:8d:b1:4a:59:9f:63:42:e0:
         7c:87:79:94:a6:bf:21:8a:47:ec:bd:91:dc:12:c8:15:ad:2b:
         96:01:45:dc:e3:f1:91:ed:de:26:ea:1d:33:a6:10:2e:4b:ed:
         ec:9c:d5:59:8d:3a:ef:c6:63:33:39:6a:68:5d:07:d6:6d:dc:
         3c:23:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----