Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa
File:                     323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa (raw, json)
Hash identifier:          6lL9BvpGH1aiFFXFsgTc82XygdD4fucbTQRmKctiem4=
Subject key identifier:   7C:03:EE:76:88:A9:34:79:0E:62:2C:48:02:E1:B7:D7:8B:0C:3F:B9
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       5C5190F19803381567F67134BE25A3D1A42D4E21
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa
Signing time:             Tue 17 Oct 2023 16:20:21 +0000
ROA not before:           Tue 17 Oct 2023 16:15:21 +0000
ROA not after:            Tue 15 Oct 2024 16:20:21 +0000
asID:                     48103
IP address blocks:        2602:234:fe::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 26 Nov 2023 17:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:51:90:f1:98:03:38:15:67:f6:71:34:be:25:a3:d1:a4:2d:4e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Oct 17 16:15:21 2023 GMT
            Not After : Oct 15 16:20:21 2024 GMT
        Subject: CN=7C03EE7688A934790E622C4802E1B7D78B0C3FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:06:45:e1:61:ad:74:b2:56:4b:9d:10:b6:83:
                    1b:b1:c8:aa:4f:be:1e:94:a4:ce:40:ec:17:ba:7c:
                    39:de:a5:6f:79:45:77:88:18:71:95:9b:ea:33:ad:
                    e5:45:32:8f:16:02:82:54:c1:81:38:c3:21:11:b2:
                    dd:24:f5:b2:ac:a7:ce:65:ce:1d:5e:0e:83:55:29:
                    f9:d6:99:7c:d0:40:d9:f7:39:c7:e2:01:de:0e:62:
                    69:78:1c:ba:1d:0c:05:64:6f:bc:d1:60:39:06:95:
                    d1:ad:3b:29:62:2a:3f:bc:3c:50:9d:f2:a3:0d:4f:
                    39:0a:a1:a4:8e:45:82:ec:63:e7:0c:3f:32:6b:26:
                    09:f5:10:95:b5:1a:25:31:c3:5f:44:bc:de:48:83:
                    cc:cc:b4:c1:be:51:6f:f5:05:06:c0:e7:d4:2a:ba:
                    05:bf:2c:65:38:c6:80:46:61:f4:d5:59:61:a7:08:
                    5c:4e:7b:e1:0e:c5:44:9d:fc:49:12:70:c5:72:06:
                    12:9c:41:71:de:3a:64:6a:c5:b5:26:59:5a:84:06:
                    48:21:6a:c4:d4:8b:75:ab:ef:b7:d4:4f:b5:fe:aa:
                    1b:a1:dc:c4:c2:1b:58:76:7c:cb:59:35:b4:b5:59:
                    b3:4e:90:8b:0d:12:ba:ad:6b:eb:e7:f3:75:60:78:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:03:EE:76:88:A9:34:79:0E:62:2C:48:02:E1:B7:D7:8B:0C:3F:B9
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/323630323a3233343a66653a3a2f34382d3438203d3e203438313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234:fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:8b:74:67:90:ac:22:1b:6a:18:14:03:50:59:9c:f6:c2:e3:
         97:9d:b7:ca:32:c4:e4:d8:8b:45:fb:eb:fa:e0:fc:68:ad:d4:
         d2:43:59:f4:cd:0b:6c:12:24:4c:bd:0a:96:10:78:1b:1e:dc:
         60:77:3e:7a:f9:0f:32:ff:ff:20:3a:c3:a5:a1:a5:a8:ab:68:
         ca:dd:68:1f:c0:b6:5b:ba:1b:e1:05:2e:a7:fb:fb:ec:17:0a:
         4a:70:67:25:c4:51:9c:f3:6f:7e:d8:a3:44:b2:44:8d:e2:da:
         d4:08:fd:69:d0:e4:6e:48:f4:f1:fe:72:bf:82:5c:2f:40:37:
         5d:a7:6c:30:48:a0:74:68:c6:4e:ea:02:a6:f3:5c:93:20:62:
         36:f9:02:27:47:06:87:f4:83:cd:4c:65:48:00:c6:4b:42:81:
         21:94:d3:d6:51:08:dd:00:5c:b1:c7:c2:f8:d3:bf:2b:fd:c0:
         f0:0f:87:1d:ce:aa:9e:71:9a:44:cb:47:1d:17:e2:4a:5c:16:
         2a:3f:be:35:9a:16:d6:79:f4:0f:ee:55:58:89:fa:b6:fd:7a:
         20:1e:17:a9:8b:6b:22:e1:07:23:31:68:84:d0:46:70:9f:ed:
         c9:23:47:b2:58:e1:cb:ad:d8:62:2d:72:9b:d2:87:44:69:54:
         ed:3f:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----