Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa
File:                     323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          zv529wkNryd86NFw+EDKQwzVLx6Giv2lX0q6UUZzJyk=
Subject key identifier:   50:27:C9:7A:8F:E2:1E:32:D1:6D:79:8D:3D:0B:A1:EB:55:7D:F6:2F
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       576AF870364FBA74329ACAEAC7B3DD706FD0E23C
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:15 +0000
ROA not before:           Thu 20 Jun 2024 05:18:15 +0000
ROA not after:            Thu 19 Jun 2025 05:23:15 +0000
asID:                     945
IP address blocks:        2001:67c:a9c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6a:f8:70:36:4f:ba:74:32:9a:ca:ea:c7:b3:dd:70:6f:d0:e2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:15 2024 GMT
            Not After : Jun 19 05:23:15 2025 GMT
        Subject: CN=5027C97A8FE21E32D16D798D3D0BA1EB557DF62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:e2:1a:96:f5:1d:71:07:1c:1f:2a:bd:3f:
                    3f:a6:64:c2:df:83:1f:1e:43:65:4d:f7:f4:bb:88:
                    c0:21:36:56:3f:7c:49:a9:9d:01:d0:f0:14:12:71:
                    c5:c7:46:b0:e9:cb:17:2c:bb:a4:93:4d:a2:13:8b:
                    cc:17:1f:af:95:28:e4:72:3b:c6:34:bc:3e:1f:56:
                    b6:8c:3d:a4:4d:9b:1e:c6:98:57:d5:5e:dc:2a:e7:
                    2e:46:4b:7e:b7:e5:d6:28:f8:0f:4d:1c:1a:d3:b6:
                    73:2f:f5:5b:aa:dd:d8:40:7e:53:c7:57:3d:cd:92:
                    b6:64:33:52:fa:38:70:23:a0:a3:1d:73:af:4b:c2:
                    bc:22:0a:e7:76:3a:db:45:ee:0a:43:90:18:13:54:
                    e2:b6:99:48:cc:0d:a6:45:67:48:07:9f:8f:09:64:
                    14:c5:ee:83:0f:73:01:10:e5:91:e6:88:a0:44:9a:
                    05:1b:32:2b:af:72:29:a7:35:43:27:7b:f1:a4:4d:
                    5f:30:f0:25:bc:c0:3d:b5:28:68:cb:15:db:6f:f9:
                    5f:fe:09:cb:76:47:30:ee:f1:e3:3f:8a:6e:57:98:
                    a2:36:7d:d6:c0:a5:52:96:15:d7:1e:d9:7e:33:3f:
                    92:fb:dd:2f:65:47:f2:ef:a8:dc:b4:c3:30:b9:7a:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:C9:7A:8F:E2:1E:32:D1:6D:79:8D:3D:0B:A1:EB:55:7D:F6:2F
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6139633a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:6e:84:7f:d6:f8:21:06:41:22:44:95:76:24:dc:af:6f:fc:
         11:d7:29:b5:06:be:59:b2:18:77:c3:8b:6c:02:69:07:7f:41:
         e1:d4:2f:f4:c7:b5:40:91:d3:29:75:c0:4a:f0:58:6f:fd:b7:
         0a:f8:b9:bb:3e:c7:d7:80:a5:f7:b3:f8:7c:0c:68:6a:16:cf:
         91:1f:29:05:01:69:51:d5:e5:e6:4c:cb:29:88:0e:c3:46:11:
         da:7f:c9:bd:da:3b:51:ce:b1:79:27:7a:5c:d3:0e:40:04:8e:
         42:94:25:4a:c1:c6:56:65:a4:50:50:fa:d2:8b:60:e3:d9:8f:
         91:7c:cd:85:dd:29:2b:a3:df:e9:d4:19:61:58:f1:13:c0:55:
         32:69:85:78:be:6d:a2:c2:83:a4:7c:0c:0b:64:65:50:b9:16:
         a9:7e:20:66:7b:02:29:be:73:c3:76:7a:2b:e3:9e:c4:0f:20:
         6e:8b:73:ba:11:15:f5:af:12:ea:8b:e1:f6:71:f2:34:10:2d:
         85:ea:8f:fc:ec:40:25:14:20:fb:cf:4a:e9:bd:3c:e2:0f:4e:
         f8:16:86:ea:ed:c7:d6:07:7e:81:6a:bc:ce:e7:02:33:a8:ec:
         68:de:ad:06:55:70:47:ee:c6:5f:2a:34:72:78:0f:ad:b8:f4:
         3f:c7:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----