Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138303a3a2f34382d3438203d3e20393435.roa
File:                     323030313a3637633a6138303a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          Y8YK9cbZCR968dDXyqHcfjNHMcxgA0ClW6ax1R6zCgE=
Subject key identifier:   28:2D:E0:C3:B7:E5:97:AE:45:B1:0A:E4:0B:1E:9D:DA:CC:75:D0:59
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       53BB98245F7E9FE4BBEE888B02A3C70BBC3C9A97
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138303a3a2f34382d3438203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:34 +0000
ROA not before:           Thu 20 Jun 2024 05:18:34 +0000
ROA not after:            Thu 19 Jun 2025 05:23:34 +0000
asID:                     945
IP address blocks:        2001:67c:a80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bb:98:24:5f:7e:9f:e4:bb:ee:88:8b:02:a3:c7:0b:bc:3c:9a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:34 2024 GMT
            Not After : Jun 19 05:23:34 2025 GMT
        Subject: CN=282DE0C3B7E597AE45B10AE40B1E9DDACC75D059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:a9:89:e4:fc:f2:53:43:7c:f6:cc:e5:2c:
                    bd:83:70:6d:10:83:bd:0b:cf:ba:c1:6e:1d:d4:a5:
                    e3:5e:ea:70:62:26:dd:6d:2c:2d:45:35:47:d6:9f:
                    42:18:ca:26:98:af:50:bc:e1:85:b9:f2:27:9f:f3:
                    8e:3f:6b:d6:d2:e1:33:4a:ee:c1:24:70:1b:ea:12:
                    04:a8:67:4e:e6:d0:bf:0f:63:df:a1:e1:e0:5d:b2:
                    c1:8a:21:cd:fe:53:bd:bd:f2:a7:af:40:18:a4:83:
                    63:f8:1e:41:fb:41:d6:84:22:a1:0c:ff:ef:6d:d9:
                    9d:5d:85:33:8b:cb:29:75:79:68:4d:31:66:8f:e5:
                    14:80:c0:a4:23:94:62:37:72:8e:89:19:ad:50:db:
                    7f:3f:56:2b:3d:04:75:1c:b6:85:fa:2d:fa:4e:81:
                    0a:2d:f7:be:13:4b:68:da:20:74:0a:9a:8b:3d:9f:
                    b7:12:5d:23:eb:94:f7:7c:e7:0a:04:e3:b1:34:2d:
                    96:11:46:de:d5:bb:c1:d8:96:21:f4:20:19:e0:ff:
                    49:0f:de:4f:f2:5b:9b:5b:17:39:4d:9b:29:fc:28:
                    8c:a8:7f:ae:c5:34:6e:99:19:6a:0e:c6:66:52:e5:
                    00:5e:18:1d:72:f3:24:80:6f:a1:cc:da:fa:14:6e:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:E0:C3:B7:E5:97:AE:45:B1:0A:E4:0B:1E:9D:DA:CC:75:D0:59
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138303a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:24:27:44:e7:01:f5:84:43:f9:58:3d:bc:aa:1c:9e:03:c3:
         fa:ba:67:cf:4e:ad:e0:ae:2b:cf:db:0f:d3:74:27:2b:6d:3c:
         35:2b:bd:20:3e:3a:22:1b:e7:3d:3d:11:f7:e8:87:a3:4a:2a:
         d7:ab:5c:a9:c0:eb:76:de:83:57:29:7e:89:ff:cf:e9:f4:81:
         5c:93:72:46:f5:08:8d:9b:42:98:6f:4f:40:27:fe:fa:69:df:
         e7:ce:0b:5f:63:d5:77:b6:37:62:a1:58:9e:c6:8a:c0:95:85:
         0a:1a:25:d2:1f:4c:27:d6:80:f7:d9:73:b3:0d:bc:34:17:c8:
         ce:ba:26:fb:76:80:b4:ec:64:a4:81:dd:d4:35:97:d9:50:ef:
         2b:9b:64:cb:a9:c0:8a:26:f8:6d:09:12:29:cf:dc:3f:6b:5c:
         dd:82:3f:ae:5b:66:80:74:0f:98:64:97:0a:f6:51:16:ef:80:
         dd:7b:83:bc:bf:7d:9f:ec:ce:33:3b:0d:59:d7:09:db:47:01:
         32:52:6d:97:a7:c4:5d:c9:92:55:9c:72:01:c9:40:cb:95:ce:
         01:b2:5a:74:00:94:59:23:33:59:67:97:8b:34:0c:96:1d:66:
         92:8f:71:d8:2b:e0:02:9d:03:a1:51:0b:83:16:1f:9e:e9:37:
         2e:2d:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----