Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/7/323630323a666332333a3a2f33362d3438203d3e20393435.roa
File:                     323630323a666332333a3a2f33362d3438203d3e20393435.roa (raw, json)
Hash identifier:          hECthgISqnlGhTV4UbWiK+qyrg4XG8wh/8nAi7lQY8Y=
Subject key identifier:   7A:92:0A:A0:FC:AD:17:88:B2:08:B0:F8:9E:4B:59:62:90:34:79:2B
Certificate issuer:       /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Certificate serial:       55B41A7FDFBA98B552D5FD4C28EE5EE3EB7D02A1
Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject info access:      rsync://dev.tw/rpki/August/7/323630323a666332333a3a2f33362d3438203d3e20393435.roa
Signing time:             Tue 17 Sep 2024 17:13:48 +0000
ROA not before:           Tue 17 Sep 2024 17:08:48 +0000
ROA not after:            Tue 16 Sep 2025 17:13:48 +0000
asID:                     945
IP address blocks:        2602:fc23::/36 maxlen: 48

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 10:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b4:1a:7f:df:ba:98:b5:52:d5:fd:4c:28:ee:5e:e3:eb:7d:02:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
        Validity
            Not Before: Sep 17 17:08:48 2024 GMT
            Not After : Sep 16 17:13:48 2025 GMT
        Subject: CN=7A920AA0FCAD1788B208B0F89E4B59629034792B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:35:e5:65:73:7b:af:9e:96:1e:f6:d5:58:
                    1b:0c:89:b8:08:57:a7:00:1b:f6:cc:5b:0e:5d:0c:
                    bb:ee:9d:89:f1:13:c2:aa:34:00:ad:d3:09:69:ca:
                    5a:51:5d:c7:cf:30:45:bc:ec:ad:d0:2c:cc:11:e4:
                    4e:7c:79:cf:e0:b9:d1:fd:97:11:07:d5:93:73:ae:
                    5b:f8:34:bf:30:61:2e:f5:5b:89:de:9f:81:72:11:
                    48:99:d0:56:c7:f1:cd:12:de:a4:8d:5e:c1:ac:b9:
                    ef:2a:f1:49:5d:0d:a8:a2:2d:00:93:ef:1d:40:e3:
                    55:49:ca:18:5a:76:4c:3c:83:2c:ef:39:21:af:b2:
                    3e:f5:27:c3:ad:00:7b:ba:d9:34:28:a7:dc:7a:e0:
                    2a:02:d0:61:4c:b2:89:75:b3:0d:b5:02:4a:b1:bf:
                    c4:c8:e0:59:f6:8a:2d:c2:fb:68:39:08:a3:e8:8b:
                    ac:2e:54:10:30:33:80:4f:d5:ff:f1:aa:46:b3:7d:
                    20:d4:ca:79:92:48:02:ae:a7:cc:7d:4a:d4:70:d8:
                    d7:ae:83:53:e6:75:1e:b3:5c:ba:ed:7c:89:de:69:
                    1c:00:1c:b7:6d:57:ab:31:ab:2d:25:92:6f:62:79:
                    37:53:14:5c:d5:4e:f3:96:fa:2b:af:d7:b9:f5:db:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:92:0A:A0:FC:AD:17:88:B2:08:B0:F8:9E:4B:59:62:90:34:79:2B
            X509v3 Authority Key Identifier:
                keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/7/323630323a666332333a3a2f33362d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:9e:b4:23:2e:6d:6b:ea:bb:c9:4d:f0:5c:22:9e:ed:10:
         08:0e:cf:af:40:9a:d4:40:45:f4:26:b4:7d:e8:d7:dc:56:51:
         9a:4e:6e:65:04:41:6b:92:e7:24:62:af:04:60:71:92:5d:2b:
         b2:89:51:89:b9:4c:b4:ec:61:ad:86:a9:9b:93:9e:aa:63:95:
         91:10:33:75:a3:f7:e9:0b:85:37:fa:04:3a:04:e2:7d:d2:f5:
         d2:d3:6b:91:03:44:2a:f7:c4:bf:d6:9a:b3:d4:23:13:a5:48:
         d6:3e:25:60:e1:fa:ca:7a:3c:4a:b9:35:14:a3:01:13:9b:46:
         9a:bc:1a:d2:9b:6a:c6:5b:f6:a6:b8:0e:64:2a:f4:98:65:3c:
         a9:f8:49:05:40:fb:04:48:0a:ce:b0:ac:1f:7b:95:9a:8d:0b:
         47:e8:b9:6c:05:cd:74:40:0e:ed:32:b4:84:a1:d4:1c:a0:24:
         88:64:8e:d1:f3:e4:f8:67:ea:c6:69:a3:02:25:99:6e:de:a0:
         25:da:73:27:65:fe:d0:2d:2d:b9:d9:96:4b:a0:c6:4a:b7:6c:
         85:48:fb:58:f1:34:56:e6:06:b3:2e:d1:a5:8d:09:d1:ad:49:
         4b:fe:07:a0:c6:09:b4:3a:01:58:36:81:95:f5:f6:4f:9b:39:
         2d:72:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 14:40:51 2024 by rpki-client on console-ams.rpki-client.org