Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/7/323630323a3831353a373030303a3a2f34342d3438203d3e20393435.roa
File:                     323630323a3831353a373030303a3a2f34342d3438203d3e20393435.roa (raw, json)
Hash identifier:          aYvxhg2T6v+TOx+D/rlb1sL8eIpPqe2ffwlmRjtOmLo=
Subject key identifier:   B5:57:62:A2:22:0E:3B:34:7D:07:59:BE:E1:26:24:34:A6:F7:98:8C
Certificate issuer:       /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Certificate serial:       0B1A15CF94D37F6C781273AB1D118C8FFFA637C1
Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject info access:      rsync://dev.tw/rpki/August/7/323630323a3831353a373030303a3a2f34342d3438203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:22:15 +0000
ROA not before:           Tue 17 Oct 2023 16:17:15 +0000
ROA not after:            Tue 15 Oct 2024 16:22:15 +0000
asID:                     945
IP address blocks:        2602:815:7000::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1a:15:cf:94:d3:7f:6c:78:12:73:ab:1d:11:8c:8f:ff:a6:37:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
        Validity
            Not Before: Oct 17 16:17:15 2023 GMT
            Not After : Oct 15 16:22:15 2024 GMT
        Subject: CN=B55762A2220E3B347D0759BEE1262434A6F7988C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:3d:4e:13:98:95:38:b3:db:6c:6d:60:e5:
                    68:97:49:92:5d:0f:45:48:91:32:d4:8e:01:b2:cd:
                    e5:57:7c:40:f0:19:0f:96:0a:48:5a:40:a2:f3:2d:
                    9f:b1:ba:9d:a4:da:9b:e0:7d:54:a0:af:ac:b0:6e:
                    ff:77:5d:d0:64:5f:96:f1:1c:ba:97:e5:08:91:f0:
                    f0:99:3b:d9:a1:0a:79:42:04:10:4f:14:a0:e0:4f:
                    8b:b6:6e:bc:55:cd:f9:b0:0b:5e:53:b7:44:40:d2:
                    92:ac:5f:0e:62:6c:d3:88:c3:8d:5c:65:98:33:b5:
                    90:16:4d:ae:ee:10:11:79:9a:cd:81:1b:d8:86:14:
                    76:00:c3:75:2e:aa:8e:3d:89:b4:63:56:f0:05:e3:
                    af:66:d2:c4:a2:a1:fe:36:84:a7:b7:bb:3b:af:d0:
                    1b:e9:9a:15:ea:cc:52:c3:08:4c:c6:dc:dd:e8:90:
                    73:0c:ca:e7:18:4a:63:02:be:15:5f:1d:fc:41:a3:
                    d2:94:24:d3:85:b3:9f:b6:45:d3:29:15:cf:a3:7c:
                    61:94:a3:8f:55:38:c4:be:08:56:ca:d2:57:4a:4b:
                    c2:70:c2:2e:fd:69:05:d1:64:b0:c2:5b:25:52:bb:
                    aa:62:10:35:a8:f6:58:8d:15:62:61:33:43:6d:64:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:57:62:A2:22:0E:3B:34:7D:07:59:BE:E1:26:24:34:A6:F7:98:8C
            X509v3 Authority Key Identifier:
                keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/7/323630323a3831353a373030303a3a2f34342d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         77:1b:d9:22:c6:cb:c3:94:53:31:5c:9d:7b:46:e9:b5:4d:75:
         3f:2f:99:a5:cb:f4:5c:f4:8c:90:1b:8f:39:c3:21:b9:eb:5c:
         ee:1e:a0:8e:e5:cb:96:7c:72:2e:99:ea:7e:f6:ba:b5:4a:96:
         72:f9:93:d5:b7:18:94:31:a0:27:9e:e5:6f:02:67:94:fa:e8:
         89:4d:8a:e3:43:54:da:7b:ee:47:34:b3:33:c4:a6:90:3e:c7:
         73:94:55:24:da:43:26:ce:79:4b:03:df:90:9a:bb:4b:4f:a4:
         96:9a:c2:57:8e:1d:9f:aa:35:8c:32:23:fa:36:a7:ef:76:94:
         5f:8d:10:d8:87:b1:c1:49:8f:09:17:98:29:8c:b4:f0:48:0e:
         fd:bb:92:3f:67:a2:ca:8e:08:14:ac:cb:e9:15:ee:19:53:01:
         8f:e0:c2:4b:db:0f:f6:5a:b7:a1:c4:4e:ba:2a:11:7b:73:c7:
         66:96:6f:b2:7c:ed:da:05:e8:c7:20:82:d9:42:53:c2:83:51:
         12:dd:73:5d:e9:29:2c:63:b5:48:60:a5:80:63:49:30:0b:45:
         9a:28:7a:30:55:13:a1:bc:d4:f4:e3:c1:9f:9b:9d:97:83:82:
         42:0a:17:5f:9a:dd:c1:2f:f5:10:5e:9b:64:7d:ac:91:67:13:
         4f:44:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----