Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138383a3a2f34382d3438203d3e20393435.roa
File:                     323030313a3637633a6138383a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          FbvyVtmzlcDv4XrXMdY3FusZ+7S2Pz4wotg22Zn3Bk4=
Subject key identifier:   FA:7C:D5:56:03:C0:8C:C3:96:BD:76:DD:02:69:A9:E1:96:9A:32:1D
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       0DA550CBAF679088E6D28D22FCC1896E4F36AFD4
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138383a3a2f34382d3438203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:21 +0000
ROA not before:           Thu 20 Jun 2024 05:18:21 +0000
ROA not after:            Thu 19 Jun 2025 05:23:21 +0000
asID:                     945
IP address blocks:        2001:67c:a88::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:50:cb:af:67:90:88:e6:d2:8d:22:fc:c1:89:6e:4f:36:af:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:21 2024 GMT
            Not After : Jun 19 05:23:21 2025 GMT
        Subject: CN=FA7CD55603C08CC396BD76DD0269A9E1969A321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:cf:6a:b8:1c:d1:2c:51:d7:d1:7a:c8:0f:
                    d8:95:88:a3:c7:47:cd:68:51:be:9d:ad:a0:d4:0f:
                    db:30:53:c6:b6:cf:eb:28:10:cc:8d:e8:47:da:15:
                    04:48:f8:38:1e:3b:42:87:03:3c:9c:e4:0a:40:62:
                    ab:d6:fe:e6:bb:01:d8:fd:f6:df:37:09:2e:8b:22:
                    fa:46:01:ae:28:6c:64:ce:f6:4a:0f:bd:9a:88:61:
                    3f:db:83:2d:2f:84:93:51:e1:0d:1e:19:f5:e1:3e:
                    43:cf:ee:f2:98:8f:71:3d:1f:3e:11:35:8c:63:e4:
                    9a:c2:40:62:dc:b0:77:d1:30:f7:18:45:13:b8:5a:
                    6d:52:ef:43:3c:ea:24:a8:52:fc:23:5b:22:c7:0b:
                    a4:70:91:11:59:45:3a:d2:50:16:2c:4d:ae:01:fa:
                    3d:d4:e3:f0:4d:d7:4e:d6:ee:dd:99:91:20:d8:a8:
                    c2:18:27:0b:fd:34:70:d9:99:18:0e:4b:a3:af:d9:
                    5e:0a:74:65:b2:50:3c:88:e6:8b:d5:06:a5:d3:9c:
                    83:17:28:ef:d1:45:17:e4:ff:d5:73:68:22:e3:a8:
                    de:eb:e3:13:09:a2:55:32:07:59:b1:82:55:f6:dd:
                    58:c7:df:09:5e:ad:67:b5:b0:f0:43:70:2a:ed:8b:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7C:D5:56:03:C0:8C:C3:96:BD:76:DD:02:69:A9:E1:96:9A:32:1D
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6138383a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a88::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:94:d2:c6:57:bb:d9:f2:02:e8:9c:64:7d:4c:c4:a5:47:58:
         49:c2:a9:90:0f:60:33:11:3f:01:63:92:d9:8f:ff:c5:66:d1:
         f4:18:93:ed:42:21:dd:a4:1f:40:78:40:9b:d6:6c:f7:26:80:
         9b:8b:f6:8e:fe:98:88:55:f1:d3:2e:c7:cd:fb:b7:52:83:05:
         3e:59:6d:fb:d0:95:5a:e0:7a:3c:10:70:73:d4:5b:bf:03:c7:
         e7:06:97:0e:ad:65:87:57:04:7f:09:86:cd:9d:62:95:4c:eb:
         1c:e2:18:a8:d9:2d:ba:29:10:fb:63:a9:0f:bb:2b:49:e3:0d:
         27:75:8e:b8:50:70:d5:51:73:c4:58:f0:d3:7f:96:2e:02:19:
         72:61:da:ab:97:8e:60:ce:0e:88:95:99:43:72:94:c4:f6:47:
         bd:99:8a:ec:39:f9:3d:7f:a1:dc:1d:a0:04:9a:0a:08:ec:18:
         34:90:e5:bf:ec:8e:7c:7e:ba:27:30:03:65:bb:74:28:de:c4:
         56:74:13:5b:67:7c:a7:5c:d7:24:7e:3d:15:d5:dd:96:80:af:
         0d:af:f2:01:cc:86:b2:1a:28:4c:52:6c:0e:57:7c:50:f6:b6:
         73:ba:3b:1e:fb:a9:4e:f9:43:c0:f9:aa:5b:fc:cc:49:2d:77:
         66:04:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----