Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/7/32332e3134392e3233322e302f32342d3234203d3e20393435.roa
File:                     32332e3134392e3233322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          PP/+zdqB/ZT9VC3jxWpZY2jMFooAeW2bv4rqvp/FTt8=
Subject key identifier:   FF:FD:46:EC:6B:8D:22:01:F6:3B:D8:21:3A:8E:73:1D:FB:39:14:E3
Certificate issuer:       /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Certificate serial:       121D93AA532D5EF2EE3598AA698C3C081B21328D
Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject info access:      rsync://dev.tw/rpki/August/7/32332e3134392e3233322e302f32342d3234203d3e20393435.roa
Signing time:             Tue 17 Sep 2024 17:13:47 +0000
ROA not before:           Tue 17 Sep 2024 17:08:47 +0000
ROA not after:            Tue 16 Sep 2025 17:13:47 +0000
asID:                     945
IP address blocks:        23.149.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 10:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1d:93:aa:53:2d:5e:f2:ee:35:98:aa:69:8c:3c:08:1b:21:32:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
        Validity
            Not Before: Sep 17 17:08:47 2024 GMT
            Not After : Sep 16 17:13:47 2025 GMT
        Subject: CN=FFFD46EC6B8D2201F63BD8213A8E731DFB3914E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:58:41:14:7b:dd:65:5e:58:46:3a:3f:a7:
                    de:0f:81:34:e9:13:21:14:31:24:f0:a5:14:e4:fa:
                    e6:95:b3:48:13:5b:8c:c9:16:c2:68:64:24:fb:e4:
                    9c:6e:70:f1:c7:4f:79:79:99:7f:ae:38:cb:71:3c:
                    df:16:be:d3:86:93:82:cd:50:62:e1:4c:95:96:10:
                    9f:c5:f7:74:53:06:42:17:18:e9:71:ca:22:4b:b0:
                    8b:96:4d:68:15:a9:23:98:0f:1b:f1:c9:81:b1:14:
                    26:7f:a7:af:07:a2:2b:62:2e:85:eb:3d:b6:ce:43:
                    09:58:47:52:ed:17:3f:07:d6:6e:4f:37:45:98:b5:
                    9d:1d:2a:06:d2:a2:4f:79:3e:71:6b:95:f6:b1:e3:
                    c7:33:18:a5:d8:74:95:65:9c:ca:81:ca:e3:fc:08:
                    bb:dc:24:95:d7:10:2a:7f:3a:58:25:2d:a8:34:3b:
                    95:55:ec:97:d5:e5:d7:48:05:34:7b:9e:22:17:6c:
                    c3:52:43:9d:d8:2c:2d:9a:86:a2:d9:39:c4:d0:89:
                    42:ad:0c:8d:aa:54:2b:0c:01:55:93:6d:c1:2b:65:
                    8f:60:25:86:43:30:ee:61:dc:6c:26:ae:37:92:c5:
                    4a:d5:2a:fd:76:21:5f:0f:4e:40:e4:37:54:8a:c3:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:46:EC:6B:8D:22:01:F6:3B:D8:21:3A:8E:73:1D:FB:39:14:E3
            X509v3 Authority Key Identifier:
                keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/7/32332e3134392e3233322e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:d8:83:e9:95:7a:58:a0:1e:42:d2:ce:46:aa:a7:fa:0e:
         1d:11:0b:70:03:34:f8:26:89:5c:0f:bd:3d:cf:39:71:86:a0:
         4e:12:e9:9d:4f:09:24:be:c6:36:fa:c3:22:a0:00:e2:2f:7c:
         29:fd:79:19:aa:b2:11:e8:dd:7b:1a:aa:ce:c1:80:f1:11:c2:
         ad:26:75:0b:d4:b4:bd:42:01:3e:63:8f:00:67:a2:0f:29:48:
         5c:84:3f:53:a1:e3:36:57:f1:db:59:22:b1:05:43:7b:df:7c:
         dd:41:bd:f9:6a:44:63:c9:86:1b:19:46:07:b1:fb:f6:8c:f4:
         96:59:9a:0d:88:9c:11:36:e3:82:d4:ba:c5:e0:9a:09:90:99:
         49:3c:20:3a:fa:06:6a:a9:aa:54:ee:dd:71:6f:42:78:e3:00:
         68:aa:08:8a:1b:98:f0:0b:68:37:a0:59:17:c3:0b:49:63:ca:
         6e:a3:f2:ca:12:e4:5d:b7:e7:2f:e0:78:01:d7:73:e4:13:57:
         f3:1d:87:de:8d:dd:57:93:da:57:4d:fb:68:d2:18:85:ae:4b:
         1d:b2:2c:87:b1:f9:8a:15:08:66:f2:ec:c2:98:04:46:36:35:
         c9:21:a4:e4:93:4e:34:ec:ea:87:62:0c:fd:7f:39:53:72:3d:
         2a:6a:97:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----