Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa
File:                     323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          GWc+7dJ4ytvclFsMkLHzhmwONks0zziY6YsoXs8rSxk=
Subject key identifier:   93:79:C9:42:5B:F9:49:82:AD:B3:BA:A9:C4:31:D7:A8:06:1F:B7:4A
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       417848C5D2FC45AE7B4D688705B8CCFE7E1C9712
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:38 +0000
ROA not before:           Thu 20 Jun 2024 05:18:38 +0000
ROA not after:            Thu 19 Jun 2025 05:23:38 +0000
asID:                     945
IP address blocks:        2001:67c:a84::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:78:48:c5:d2:fc:45:ae:7b:4d:68:87:05:b8:cc:fe:7e:1c:97:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:38 2024 GMT
            Not After : Jun 19 05:23:38 2025 GMT
        Subject: CN=9379C9425BF94982ADB3BAA9C431D7A8061FB74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:f5:ed:8d:34:4a:ea:db:96:77:e5:f4:d8:
                    87:a4:b5:70:21:ce:ac:84:cb:ad:8c:62:f7:c0:c0:
                    54:6a:34:92:aa:f6:5d:d2:97:29:20:46:23:82:1d:
                    ed:fd:fc:ac:0d:cf:9d:55:e8:03:9f:89:d6:fc:69:
                    cd:ec:ac:b5:26:3c:bb:3b:e4:8b:af:60:df:7c:33:
                    8f:1c:06:cd:01:f1:27:29:cb:f0:f7:c7:49:41:ac:
                    35:e3:e9:e5:b0:e5:c5:b0:df:2d:29:1a:4a:22:95:
                    1d:e5:81:dc:b3:27:22:33:c5:35:3d:22:ba:fa:dd:
                    ae:44:85:fc:3c:ea:14:a0:a7:6d:a7:f5:6a:60:2c:
                    4d:46:9f:72:65:bd:5c:3d:ef:2a:d5:e8:5a:ea:ba:
                    c7:bf:bf:fb:71:1e:d8:a5:ea:70:64:f0:12:22:74:
                    71:cc:0b:99:d3:05:0a:ea:a4:63:e4:e6:6c:9e:72:
                    5f:18:8c:10:da:05:27:03:50:c9:e2:6e:d6:a0:38:
                    8a:66:13:23:da:e5:27:af:3e:0d:30:90:61:a6:94:
                    0b:55:d0:85:55:62:3c:3f:41:b8:95:13:45:c9:ab:
                    30:bc:58:5f:94:e4:a3:39:8e:ef:f0:67:68:d3:dc:
                    92:03:b2:9e:b9:85:f3:8b:5b:a3:ff:e1:49:c7:ad:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:79:C9:42:5B:F9:49:82:AD:B3:BA:A9:C4:31:D7:A8:06:1F:B7:4A
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138343a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a84::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:89:db:77:a7:3a:91:02:cc:02:32:09:6f:12:89:a0:5b:1a:
         e1:cf:cb:c4:ae:79:89:82:34:b0:91:0d:9a:40:15:a1:3e:ad:
         91:45:52:6b:d5:bf:a8:62:30:5f:af:62:a3:8d:a9:35:39:8e:
         60:ab:98:66:a9:6a:99:ee:d0:90:c3:b5:ce:62:0f:a1:4a:d2:
         b3:0b:e9:a1:62:b1:9e:bc:5e:dd:28:6c:6e:a5:24:84:90:8e:
         87:7f:42:99:d6:c9:d3:63:36:df:a4:48:29:a4:28:03:94:95:
         26:01:01:e5:4b:4e:73:c7:bb:db:1b:68:97:44:1f:57:17:25:
         1b:4c:0d:a2:27:21:55:07:8d:df:c9:90:3d:8c:5c:30:06:4f:
         35:18:a0:fd:86:bb:06:b5:c7:b6:a4:24:ee:c7:73:8b:87:71:
         d7:c0:ad:93:eb:96:51:07:a2:71:8d:e2:25:83:7f:f4:d9:ef:
         50:31:86:a1:75:be:d9:2b:ef:36:fc:cc:dc:d9:64:6d:92:14:
         cf:27:02:4c:4a:d2:8a:eb:9b:f6:97:ed:67:54:0a:74:71:06:
         cb:a4:a3:f4:40:14:92:52:29:f4:cd:c3:9a:9b:ff:d7:2a:fb:
         fb:9d:3f:f3:83:17:f5:86:a6:e7:c6:29:d1:44:2f:2b:72:a0:
         b4:1a:87:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:17 2024 by rpki-client on console-fra.rpki-client.org