Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/323630323a3233343a353a3a2f34382d3438203d3e2037373139.roa
File:                     323630323a3233343a353a3a2f34382d3438203d3e2037373139.roa (raw, json)
Hash identifier:          rOwA6Qt/J06sU3uFd035WmyIN7EJTgVg9VoWAZudKek=
Subject key identifier:   98:23:81:EC:13:B0:41:85:74:9A:A4:01:FB:A6:C8:BF:4B:EA:3E:BB
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       7EC4072F739B324D0056CC050057434626A440B6
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/323630323a3233343a353a3a2f34382d3438203d3e2037373139.roa
Signing time:             Thu 22 Feb 2024 14:52:15 +0000
ROA not before:           Thu 22 Feb 2024 14:47:15 +0000
ROA not after:            Thu 20 Feb 2025 14:52:15 +0000
asID:                     7719
IP address blocks:        2602:234:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 10 Mar 2024 10:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:07:2f:73:9b:32:4d:00:56:cc:05:00:57:43:46:26:a4:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Feb 22 14:47:15 2024 GMT
            Not After : Feb 20 14:52:15 2025 GMT
        Subject: CN=982381EC13B04185749AA401FBA6C8BF4BEA3EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:50:81:6c:55:a0:57:60:d8:59:31:73:40:
                    81:ec:fa:75:b3:c6:0a:83:85:8d:8b:01:cd:8c:ff:
                    cd:de:a9:29:3e:16:c1:fc:87:c0:87:85:1b:8d:7d:
                    42:8f:06:47:d7:ad:a1:a3:e3:76:bb:68:19:a3:ca:
                    d1:54:df:51:9d:c0:2d:ee:e5:9f:df:aa:69:6a:0c:
                    b4:58:4c:03:af:1c:26:2d:28:e4:9a:01:17:9c:0c:
                    48:3e:99:6c:d2:fd:97:30:e9:5b:70:c7:70:b9:3c:
                    24:f3:2f:79:b0:20:51:34:cd:0e:9c:28:b8:d1:e3:
                    ee:b5:10:38:68:cb:86:75:4b:87:4a:1a:f5:1e:1d:
                    3f:6a:92:74:d8:b2:56:44:01:c8:5c:f9:bf:e4:9c:
                    b2:8e:d1:33:de:b7:9d:4f:53:19:b1:f5:c0:1a:10:
                    52:b9:57:d4:7d:18:53:3c:1a:7a:0c:b3:7b:05:55:
                    5e:d6:7d:97:53:d4:2a:dd:17:1a:f8:3a:50:0c:4f:
                    3a:cc:e2:6f:73:ca:10:0a:2c:c1:a1:c1:18:2d:33:
                    12:85:40:51:71:15:f3:4a:75:47:66:7e:2c:93:2d:
                    ab:69:6e:6d:68:48:b2:50:5d:1b:bb:bf:fb:b7:4e:
                    32:54:55:f9:2d:e7:bc:19:85:d6:96:55:5a:64:73:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:81:EC:13:B0:41:85:74:9A:A4:01:FB:A6:C8:BF:4B:EA:3E:BB
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/323630323a3233343a353a3a2f34382d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:08:a6:1f:7e:bc:8a:b3:31:7e:12:fb:0f:e0:99:ea:f0:b2:
         55:6f:b3:23:99:ed:f0:56:06:4b:89:8a:61:45:fa:3a:cc:ee:
         0f:26:83:58:e3:70:05:5c:cb:35:3a:e2:b9:ce:3d:27:ac:a8:
         95:07:d9:56:7d:ce:d4:6a:9a:08:68:33:90:c5:73:9d:b0:29:
         63:eb:e3:41:db:15:2a:a8:97:c9:60:37:fd:eb:a9:63:fb:4d:
         a8:d6:75:ae:be:34:3e:29:57:3b:65:4e:a4:10:00:23:48:6a:
         83:97:ac:a2:ff:f4:46:75:f0:83:b9:32:9f:b2:ec:b9:97:eb:
         25:b3:28:33:f9:52:f6:e7:28:4e:4b:16:bb:0c:32:1c:8f:7e:
         53:c6:92:81:ac:2c:3f:9d:d2:c1:06:c4:6b:f0:e7:c0:07:87:
         57:da:af:ac:24:dd:7d:47:6c:c0:33:b1:e4:07:68:13:33:e7:
         fb:cb:03:fb:5b:c9:31:12:37:4b:c7:38:be:13:da:d1:93:b8:
         7a:51:17:a7:db:37:67:5b:f5:42:08:8c:96:9b:e6:52:4c:96:
         7a:c6:04:65:b8:2f:a9:cf:d9:e3:97:db:69:9c:33:2f:24:8c:
         c9:31:b8:1c:31:7a:db:7e:fa:f0:a5:1a:98:77:80:bb:39:9c:
         35:3c:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----