Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20393435.roa
File:                     32332e3134392e3234382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          OOOV+G75ft3sVzMCFXIuUtXJQKHDEp1ySZkxe/ylnes=
Subject key identifier:   09:B3:2F:55:EE:AF:3C:DB:70:04:E1:B7:67:45:E5:B1:97:18:85:32
Certificate issuer:       /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial:       5ADF5891FC08B1A3CFBEBEFA1A57531953740E64
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject info access:      rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20393435.roa
Signing time:             Tue 17 Sep 2024 17:13:50 +0000
ROA not before:           Tue 17 Sep 2024 17:08:50 +0000
ROA not after:            Tue 16 Sep 2025 17:13:50 +0000
asID:                     945
IP address blocks:        23.149.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 10:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:df:58:91:fc:08:b1:a3:cf:be:be:fa:1a:57:53:19:53:74:0e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
        Validity
            Not Before: Sep 17 17:08:50 2024 GMT
            Not After : Sep 16 17:13:50 2025 GMT
        Subject: CN=09B32F55EEAF3CDB7004E1B76745E5B197188532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:47:99:df:5e:55:c1:ac:7c:7d:df:70:dc:
                    ce:44:8d:de:1a:d3:65:78:c1:bf:57:ca:e2:c2:7d:
                    a8:e0:01:4e:1a:8b:5b:74:2e:f1:51:95:b8:aa:98:
                    df:64:95:bc:f8:69:c8:d9:60:0c:8d:c4:fa:52:f8:
                    f7:c5:c3:18:e3:a8:b6:e8:59:39:7e:80:12:bb:e0:
                    7e:e9:59:4e:3e:90:77:11:70:1b:e2:e5:d5:43:d6:
                    b9:57:30:82:34:1e:63:fb:0a:ce:fb:69:64:12:90:
                    cc:1d:bc:fe:22:47:5b:93:f0:b4:d6:0d:a5:99:98:
                    7f:2e:cc:ee:a3:c4:0f:69:eb:02:e3:c8:51:ec:36:
                    0a:34:23:ee:c5:80:bb:87:64:78:46:f8:d7:a3:cd:
                    94:42:08:12:0b:65:f8:f9:00:8a:ec:82:fc:c9:cd:
                    36:23:04:fb:93:df:c6:eb:e1:55:2e:a2:68:a1:ee:
                    eb:88:e7:57:4a:67:20:bb:91:90:b8:30:b7:91:90:
                    7e:bb:0e:7d:71:0d:0f:90:2a:53:e4:b6:47:65:da:
                    62:51:4b:31:0d:7d:3d:96:e7:87:19:26:a1:9c:d5:
                    80:b0:6f:50:ec:71:7d:f7:f4:be:99:d2:98:70:b2:
                    95:8c:20:63:e1:15:22:ac:f8:81:e6:23:b3:63:a2:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:2F:55:EE:AF:3C:DB:70:04:E1:B7:67:45:E5:B1:97:18:85:32
            X509v3 Authority Key Identifier:
                keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:af:7a:21:40:29:c0:c9:0e:d3:a1:3f:fe:dd:8b:2e:6b:c6:
         21:df:69:38:27:dc:e2:11:eb:c8:13:b7:8d:33:9c:75:31:52:
         15:42:82:fc:56:60:35:0c:d5:04:cf:52:32:2a:55:d3:2c:0c:
         f2:84:05:82:93:d0:ed:ac:59:07:c3:db:57:50:34:8f:ff:bd:
         c1:a4:6f:df:bd:55:d0:f8:a7:79:34:5d:4b:7f:1c:f9:d6:65:
         d2:e5:9a:54:ae:c3:01:3b:16:2c:9b:dc:ac:43:51:b6:91:cc:
         9d:f5:e1:63:40:f9:54:93:18:4f:4c:6e:14:c7:17:af:10:98:
         63:93:aa:06:0a:aa:ae:dc:ea:fb:ad:01:6c:00:8f:00:32:66:
         e1:44:cf:47:2a:f8:62:45:2d:81:19:05:55:52:b8:a8:bf:07:
         42:92:91:6c:0b:d5:46:41:f2:f6:dc:2e:e2:bb:cc:01:80:3b:
         56:91:75:02:a2:a3:da:1c:13:92:ea:40:30:17:91:8c:65:ef:
         5a:fe:cd:51:02:0d:27:99:0e:01:1d:5b:22:7b:0d:dc:fc:8f:
         85:13:a2:fd:aa:a2:95:8d:e7:31:dd:b4:b0:a1:1e:05:95:de:
         20:12:4e:41:58:79:90:cc:53:89:ab:63:d9:51:83:ee:10:1e:
         60:7e:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----