Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/323630323a3233343a363a3a2f34382d3438203d3e2031303132.roa
File:                     323630323a3233343a363a3a2f34382d3438203d3e2031303132.roa (raw, json)
Hash identifier:          4HGN1NT2SlfhMksiDD1j5e+fmu2LBcfI960/WCazuvQ=
Subject key identifier:   A4:86:E3:10:74:DC:6B:48:32:76:71:71:54:20:B3:24:1D:7D:3F:A2
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       557D8D2C319F2E91E84F9D616459B4CB04E89B17
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/323630323a3233343a363a3a2f34382d3438203d3e2031303132.roa
Signing time:             Fri 08 Mar 2024 08:57:52 +0000
ROA not before:           Fri 08 Mar 2024 08:52:52 +0000
ROA not after:            Fri 07 Mar 2025 08:57:52 +0000
asID:                     1012
IP address blocks:        2602:234:6::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 30 Mar 2024 08:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7d:8d:2c:31:9f:2e:91:e8:4f:9d:61:64:59:b4:cb:04:e8:9b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Mar  8 08:52:52 2024 GMT
            Not After : Mar  7 08:57:52 2025 GMT
        Subject: CN=A486E31074DC6B48327671715420B3241D7D3FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:67:4d:73:e7:ca:cf:82:c7:ae:92:46:dc:58:
                    28:27:a7:77:0d:05:37:37:4c:2b:70:f4:87:b7:13:
                    0b:30:78:7b:4d:34:c7:9b:77:34:af:c8:a3:3c:32:
                    de:b3:de:06:02:56:d0:aa:3d:f7:c8:13:de:83:b2:
                    d7:fd:85:c4:f7:2d:f3:d4:cf:46:3a:5b:f2:62:7d:
                    37:c8:f1:9c:8c:e2:d9:e0:23:df:40:cc:09:63:71:
                    d3:bd:42:4a:1e:fd:2d:0e:3d:e4:6c:ed:8c:b1:c4:
                    8e:64:30:07:59:8d:eb:99:cd:e0:a0:13:b2:16:f3:
                    9e:ae:39:c1:ae:19:51:b2:ec:d6:b5:eb:25:7f:67:
                    eb:9d:18:7d:28:08:55:70:ed:75:15:52:44:af:e1:
                    2e:b7:47:90:5e:bc:6e:e6:12:69:6e:84:65:36:d3:
                    e0:ba:df:b0:d5:bf:fa:75:f7:63:a1:bb:4e:35:45:
                    f8:0b:d4:66:d9:13:cf:d5:d3:80:ad:c7:4f:f7:3c:
                    40:21:14:1c:66:37:b1:5b:0e:b8:aa:31:0c:71:71:
                    32:ab:07:f4:e7:4f:fd:9e:9d:66:af:0b:d6:de:7e:
                    a1:3e:c8:d7:b4:6c:1e:93:b0:50:6d:eb:cc:a5:f5:
                    0a:ab:b1:06:f6:69:29:e1:7b:05:fb:1e:13:24:83:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:E3:10:74:DC:6B:48:32:76:71:71:54:20:B3:24:1D:7D:3F:A2
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/323630323a3233343a363a3a2f34382d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:43:60:09:c8:cc:95:bb:b7:61:a4:f3:f0:f2:0e:38:da:
         04:5f:db:57:2d:e0:5c:3e:e5:0b:30:2c:df:92:d5:01:43:ac:
         6d:b5:7a:1c:d7:6a:4b:92:b6:cb:ba:8f:1b:82:8b:97:66:b1:
         55:68:3f:50:5e:55:6d:6f:ce:96:c8:ee:17:aa:fe:e8:d9:3c:
         b9:4e:27:47:e5:80:6d:22:a6:a2:c2:46:0b:f1:f5:d0:3d:ac:
         ff:79:b2:09:e5:ba:7e:89:83:e2:20:9b:c3:c9:6a:69:8b:9b:
         0a:8a:78:6c:19:66:73:93:9a:04:55:26:46:b1:6c:f8:65:ff:
         d4:5f:10:22:eb:35:58:2c:23:a7:cd:11:43:65:8c:f3:7d:8a:
         68:db:71:e7:1b:e5:06:7b:9d:fd:3a:c1:8e:d1:5f:3c:af:c5:
         42:52:6c:d0:8a:7b:0b:01:d0:c2:db:57:f0:c4:ce:9a:f0:f9:
         4c:d3:77:e0:70:fd:95:65:19:19:69:51:ca:b7:91:45:b0:15:
         a2:46:1b:a5:93:ce:7a:4e:c9:26:26:70:f5:88:9c:dd:b5:08:
         ae:b8:ab:c3:f9:b2:87:e4:7b:98:63:6c:56:c6:f7:11:71:bd:
         e1:71:90:35:7f:de:f5:ca:d5:c6:cd:e1:57:6e:b0:07:df:e2:
         f7:95:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----