Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139343a3a2f34382d3438203d3e20393435.roa
File:                     323030313a3637633a6139343a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          NzaC9zmq32hWKhLYjJREkpQWScTx+X6ByNW+VXUKMg4=
Subject key identifier:   24:E9:EB:57:3E:C9:4E:1C:08:86:79:6E:D2:37:A0:9D:60:6D:96:82
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       1E65CBD557A8C26D1151B49BA07448130D18A126
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139343a3a2f34382d3438203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:23 +0000
ROA not before:           Thu 20 Jun 2024 05:18:23 +0000
ROA not after:            Thu 19 Jun 2025 05:23:23 +0000
asID:                     945
IP address blocks:        2001:67c:a94::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:65:cb:d5:57:a8:c2:6d:11:51:b4:9b:a0:74:48:13:0d:18:a1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:23 2024 GMT
            Not After : Jun 19 05:23:23 2025 GMT
        Subject: CN=24E9EB573EC94E1C0886796ED237A09D606D9682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:75:5d:67:a5:50:cf:a6:11:ca:ba:24:2a:
                    22:ff:59:b0:e6:eb:e7:ed:c5:05:00:c2:11:66:7e:
                    0b:29:66:94:27:4a:36:86:9d:67:68:d0:4c:1f:b0:
                    3a:98:1e:a7:14:30:32:b6:72:3a:bc:17:c6:57:da:
                    60:52:b8:6d:0d:a1:c5:88:0b:3c:2c:56:85:4e:af:
                    f7:94:19:de:2e:91:29:64:88:9a:43:40:3f:c9:05:
                    5c:a4:9b:9e:04:d6:9b:a4:0e:b0:b4:44:c0:75:19:
                    c1:12:d8:c6:9e:20:b7:0f:23:2a:e5:aa:93:cf:a6:
                    47:ee:cf:59:0c:50:9f:a2:46:99:9a:0c:fb:4a:83:
                    2e:ca:93:28:3a:7e:0e:6d:4e:2b:96:73:ee:b6:ef:
                    ed:9d:f9:29:02:3d:71:37:f7:ec:29:75:7f:79:05:
                    d0:94:a3:c9:bc:54:d3:69:40:00:67:32:9a:ce:c4:
                    97:c1:21:5e:db:eb:6a:07:83:5d:3b:7e:cf:6c:85:
                    c1:ac:f2:6d:31:73:5f:5c:cd:89:e6:f8:6a:66:4f:
                    c3:15:22:77:a0:52:1b:50:82:62:db:03:20:f7:18:
                    74:ef:5f:22:6b:6b:fb:5c:96:83:35:c7:5f:cb:0e:
                    85:15:dc:67:77:54:00:08:1e:cb:27:57:8b:0e:72:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:EB:57:3E:C9:4E:1C:08:86:79:6E:D2:37:A0:9D:60:6D:96:82
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139343a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a94::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:f1:e6:3d:e2:9c:23:24:44:1a:44:55:d5:07:48:14:5b:
         80:be:71:00:47:4a:21:e2:99:52:38:34:2a:ae:44:c4:da:aa:
         b2:e5:5f:1f:a1:29:84:25:f9:75:e7:30:7b:5b:6c:8b:84:02:
         46:dd:37:57:bc:5b:1d:b6:96:f1:43:0f:88:9a:45:8b:e5:54:
         56:75:29:60:35:7d:ef:3a:52:47:b0:fa:f4:7b:d2:47:f4:3c:
         c4:86:33:c5:88:5f:99:7c:61:a7:be:db:17:51:23:f2:88:f9:
         ef:59:46:69:0c:3e:16:f7:48:85:11:6a:f2:54:5c:81:d2:42:
         3f:ee:75:6c:44:cf:79:d1:9e:c3:ba:7b:b3:c8:d2:2e:a3:b5:
         f6:5c:e5:77:ae:81:73:57:f1:b5:a7:6f:e4:7d:96:a8:cc:54:
         59:d7:5d:8d:02:41:65:c2:47:6d:bf:2d:2c:3c:92:83:21:f2:
         f2:80:84:be:8c:db:48:5c:75:f2:46:cf:e0:b2:fa:ba:11:9d:
         6d:40:76:cd:8b:62:44:0e:16:99:ac:a7:c0:5c:c1:10:9b:8b:
         07:16:f0:12:b0:60:9b:76:7a:bb:5a:79:14:92:ce:0a:90:0e:
         23:57:f5:1d:43:25:78:03:d3:1e:77:c8:b6:07:e4:9c:0a:41:
         f1:1f:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:17 2024 by rpki-client on console-fra.rpki-client.org