Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/323630323a3233343a3a2f33322d3438203d3e20393435.roa
File:                     323630323a3233343a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          cZi5zkV9oYhb3OcuNclPCgGjXYD18zEhLSuy61jdHuo=
Subject key identifier:   73:EA:1F:44:1B:E8:9A:EC:19:34:8D:27:3A:21:C4:85:06:60:3B:D1
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       5C6AC79277744B8F9A1394D6D905EEFEBF4C7169
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/323630323a3233343a3a2f33322d3438203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:19:55 +0000
ROA not before:           Tue 17 Oct 2023 16:14:55 +0000
ROA not after:            Tue 15 Oct 2024 16:19:55 +0000
asID:                     945
IP address blocks:        2602:234::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:c7:92:77:74:4b:8f:9a:13:94:d6:d9:05:ee:fe:bf:4c:71:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Oct 17 16:14:55 2023 GMT
            Not After : Oct 15 16:19:55 2024 GMT
        Subject: CN=73EA1F441BE89AEC19348D273A21C48506603BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2b:18:9f:31:f8:ce:83:90:2f:68:f3:6e:21:
                    fd:5a:ed:54:d6:ab:7e:86:03:3f:72:e5:17:a4:fc:
                    ab:fe:14:a2:15:ab:15:fe:b2:ab:72:16:71:3c:a3:
                    8d:53:31:db:03:0e:18:9e:b4:c6:1c:ae:bd:45:56:
                    25:d0:2a:e8:41:18:96:0d:25:ce:29:f2:9a:ab:90:
                    f4:f6:5b:e3:98:26:1b:8f:23:9f:a7:18:c7:62:94:
                    31:fc:41:03:6f:3d:0d:a4:63:dc:74:df:3e:a1:7a:
                    17:4c:f9:f1:37:f5:b0:3c:89:55:af:b8:69:b8:51:
                    49:c9:1e:fc:75:bf:d1:55:cd:73:4c:1f:2f:43:f5:
                    0c:41:57:ee:d7:1f:95:a8:4b:df:e0:8a:d6:cc:c5:
                    59:b6:25:d9:c1:f6:42:7e:49:62:96:86:66:6f:79:
                    a5:ef:0c:c5:b6:23:6c:e3:90:f3:d8:cc:44:61:fd:
                    08:27:72:de:ff:78:ea:26:fa:f0:3a:ef:21:81:1b:
                    2e:2b:cb:3a:d8:1f:23:48:72:aa:00:a5:09:64:91:
                    04:9a:08:0e:01:47:10:ca:56:24:4c:c4:6a:d1:9a:
                    f1:86:7f:7e:f0:4c:06:6b:f4:10:ff:25:8a:44:6b:
                    93:d2:8b:9c:3d:ad:12:42:ae:d3:93:96:01:a9:47:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:1F:44:1B:E8:9A:EC:19:34:8D:27:3A:21:C4:85:06:60:3B:D1
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/323630323a3233343a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:f6:71:4a:b2:75:78:33:dc:85:b2:14:68:17:c0:9f:8f:50:
         d4:6f:cb:5b:08:d0:42:e2:42:c6:70:6a:c6:50:32:96:13:2d:
         cc:c1:15:05:aa:31:37:c3:f0:e3:8e:8b:cb:d9:21:2c:47:64:
         d7:c2:de:1a:22:1c:c8:8c:06:88:4f:6e:aa:3a:71:1e:1f:08:
         9c:08:40:23:8c:e1:9d:56:a1:c7:bd:24:2a:a4:46:5c:ff:e8:
         70:19:3a:4c:f3:93:57:79:da:f5:54:25:de:04:8e:b4:9d:76:
         61:84:8a:e1:14:03:07:f1:f6:b3:cf:d9:30:2e:9f:31:27:e6:
         1f:b1:e9:3d:91:55:25:2a:63:1e:8d:81:7f:6a:92:5e:8e:73:
         a3:ef:d7:f6:8b:d7:c0:e4:d0:82:62:77:14:26:08:b9:3c:9b:
         df:f1:34:4a:74:60:e8:91:53:28:57:40:70:d0:79:e5:db:16:
         6b:76:9d:dd:8a:07:27:5b:f6:74:7e:f4:77:05:38:95:6d:e0:
         56:c6:b3:dc:55:eb:4c:b5:9c:e9:76:5a:e8:ca:32:25:1a:28:
         12:ad:21:c7:18:88:7b:29:dc:f7:83:f7:44:cf:1f:68:24:a2:
         2e:23:42:20:2e:22:a2:b8:8a:f0:f2:b0:dd:77:b3:ce:cd:ef:
         86:db:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----