Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/323630323a3233343a333a3a2f34382d3438203d3e2031303132.roa
File:                     323630323a3233343a333a3a2f34382d3438203d3e2031303132.roa (raw, json)
Hash identifier:          couhUU5XWrY5gJdvtA+ZZ1OZTy+fyXJ79hTCm8PKMMw=
Subject key identifier:   F4:60:0A:B2:BC:86:03:55:8D:C3:CC:3D:CD:5D:87:44:50:89:DD:29
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       4F00EC659610DAB078B1061B23E5169A78381272
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/323630323a3233343a333a3a2f34382d3438203d3e2031303132.roa
Signing time:             Thu 22 Feb 2024 14:52:37 +0000
ROA not before:           Thu 22 Feb 2024 14:47:37 +0000
ROA not after:            Thu 20 Feb 2025 14:52:37 +0000
asID:                     1012
IP address blocks:        2602:234:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 30 Mar 2024 08:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:00:ec:65:96:10:da:b0:78:b1:06:1b:23:e5:16:9a:78:38:12:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Feb 22 14:47:37 2024 GMT
            Not After : Feb 20 14:52:37 2025 GMT
        Subject: CN=F4600AB2BC8603558DC3CC3DCD5D87445089DD29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:ac:2d:a8:b0:d3:09:c1:50:e9:d2:d9:f2:
                    b0:92:8d:c5:7c:c1:4c:40:54:f7:6f:54:64:33:1f:
                    a6:9b:06:f5:70:47:e3:98:7c:ba:ac:52:53:1c:c5:
                    7d:16:1e:ae:00:76:0e:67:8e:d7:82:75:4c:a8:30:
                    57:d6:42:0f:c7:21:9a:27:15:8d:24:c1:3b:8d:bf:
                    fc:0d:0f:bf:4e:d3:9c:ee:9e:58:ca:c2:75:20:27:
                    3c:e1:35:8d:d7:48:d0:84:a5:91:18:97:d9:9c:7b:
                    6f:c7:df:f0:e8:59:47:90:61:46:fd:f4:59:52:3a:
                    03:a5:e5:b3:c5:13:82:bf:7b:b3:ed:c9:43:8d:a3:
                    e2:94:18:3a:a4:5b:70:fd:c8:38:7a:29:db:3e:dd:
                    c6:36:58:64:76:65:09:62:33:b5:59:db:3b:40:b2:
                    fd:81:32:de:71:7b:b0:7f:0d:6c:07:d6:27:a5:8c:
                    ce:94:d0:f2:36:2d:2c:9d:a0:52:2a:7b:41:85:4c:
                    1d:61:39:e5:fb:81:28:28:7e:e0:aa:a6:1d:ee:f0:
                    ce:63:45:ef:ee:94:ce:50:c1:09:a2:7d:5d:1e:d7:
                    c2:d1:5c:4e:2b:92:aa:b7:7c:75:0d:51:28:f5:9c:
                    f9:9e:6c:0f:2c:81:90:44:ab:06:41:99:dd:22:14:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:60:0A:B2:BC:86:03:55:8D:C3:CC:3D:CD:5D:87:44:50:89:DD:29
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/323630323a3233343a333a3a2f34382d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:19:7d:1d:43:f2:2c:3a:90:12:a4:c6:f5:91:5f:19:6c:33:
         f6:5b:71:f4:c7:bb:4a:80:72:22:36:25:22:a6:66:7c:52:43:
         d5:c1:31:e0:9a:06:c8:f1:07:cc:e0:cc:bf:5d:6c:08:ab:9e:
         32:9c:36:d1:c9:6d:71:29:bb:b9:93:a2:04:55:22:0f:30:04:
         99:85:84:25:ff:48:28:fd:31:1e:b7:b4:25:70:5f:fa:4b:18:
         6c:f6:31:66:f7:1d:15:9c:d4:0c:ab:54:24:67:52:78:f1:29:
         e1:84:cd:c9:40:df:34:52:cb:cd:6d:42:59:17:67:d7:d7:75:
         f5:14:76:52:1e:9a:6f:1c:e6:58:f0:1e:81:6a:15:94:47:59:
         ea:fe:f9:78:dc:72:18:df:b1:88:88:e1:82:90:59:2b:8f:bd:
         55:2d:e1:18:53:5f:2c:85:f5:1c:de:10:63:bf:88:4b:1b:37:
         cc:71:be:3d:bc:d2:2c:db:9b:48:d4:4a:1f:2c:60:14:b9:8e:
         ae:7c:94:eb:80:1c:62:ae:50:59:ab:49:b9:d8:73:10:30:7b:
         d8:c7:f9:db:00:56:f2:9f:ae:4f:b0:0b:bf:e5:02:4b:8a:1e:
         19:f3:8d:52:74:05:4a:00:83:dd:0c:0b:ab:ad:0a:e4:fc:cf:
         b0:00:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----