Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6161303a3a2f34382d3438203d3e20393435.roa
File:                     323030313a3637633a6161303a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          EhCwJ+5xFwgYSgJQm+qLaHUaIogDiyvERPZmpCwOGok=
Subject key identifier:   11:81:2C:D3:4B:A0:92:7C:FB:76:A6:11:A3:22:58:B4:23:5F:85:2C
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       5EC8A131C4DDA32CA4FA01D7B094B784577E8A5B
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6161303a3a2f34382d3438203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:28 +0000
ROA not before:           Thu 20 Jun 2024 05:18:28 +0000
ROA not after:            Thu 19 Jun 2025 05:23:28 +0000
asID:                     945
IP address blocks:        2001:67c:aa0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:a1:31:c4:dd:a3:2c:a4:fa:01:d7:b0:94:b7:84:57:7e:8a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:28 2024 GMT
            Not After : Jun 19 05:23:28 2025 GMT
        Subject: CN=11812CD34BA0927CFB76A611A32258B4235F852C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:6c:dc:f7:a3:b6:6a:9e:50:1a:0f:e1:a6:
                    d7:00:dd:9b:83:a5:e7:3f:59:bf:3c:33:87:21:af:
                    ae:ae:fe:3e:9b:ad:4a:fc:29:46:87:2d:95:ed:2c:
                    e3:1d:84:1b:d7:df:a9:58:67:ee:be:c5:0a:d7:87:
                    fe:8f:da:54:c3:ab:c5:f0:78:1f:3b:94:8e:5a:b3:
                    9c:77:9a:07:50:48:bb:dd:33:0f:4f:84:51:8f:03:
                    f9:d8:a4:42:7a:f6:cc:e9:d9:7e:85:da:00:8b:e4:
                    f4:e7:5c:ea:6d:22:98:e2:5f:75:39:b9:44:0d:1a:
                    d5:05:c9:1d:fa:ea:97:c7:99:15:9e:b2:1f:9b:e5:
                    c3:ba:d4:58:ff:97:76:ba:3e:b9:f9:8f:91:2f:ee:
                    fe:3d:d9:33:14:a0:31:77:d7:92:b5:11:39:83:4a:
                    8a:19:c6:50:95:1f:b5:db:b4:eb:85:86:f7:9e:9f:
                    08:eb:17:dc:e9:5c:a4:2b:07:96:0c:07:be:aa:81:
                    bd:f4:91:8d:71:79:76:46:b9:e6:06:ed:d0:2f:20:
                    37:ec:b5:99:0a:3c:62:78:74:90:f0:fb:72:aa:70:
                    c0:c6:41:d3:83:33:cd:a3:ee:ba:09:8b:60:12:a5:
                    13:f2:c5:14:d3:7d:d3:5d:9f:9e:3e:a6:a6:d7:80:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:2C:D3:4B:A0:92:7C:FB:76:A6:11:A3:22:58:B4:23:5F:85:2C
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/323030313a3637633a6161303a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:aa0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:c6:50:23:2a:c7:df:a0:99:a9:77:65:59:c1:8e:3c:12:93:
         ac:1b:b0:2d:2b:0a:e5:00:df:f1:15:5e:44:ad:8f:87:53:d7:
         71:04:74:75:8b:51:38:b7:33:30:ba:ba:ce:58:b7:cb:c1:e8:
         13:e3:23:d5:f0:b6:0a:38:3b:6a:3c:fe:df:15:7e:24:fc:f5:
         3b:71:f7:24:7c:3a:62:d5:3c:a1:76:e6:6c:c5:b3:57:08:ad:
         8e:97:86:e2:17:35:30:15:0e:0a:8b:3d:fe:ae:05:f0:74:d7:
         21:3e:ca:79:95:45:be:35:6b:7c:2a:a5:7c:2c:73:1a:15:69:
         98:81:bf:52:1c:bf:12:82:dc:26:d9:50:97:5b:7b:e2:f4:b1:
         b3:e8:6d:9d:f8:da:ef:1a:ce:3f:b1:6c:38:88:09:10:61:8d:
         ee:64:67:4d:ba:bc:e9:53:4a:5e:3c:ec:93:2d:59:00:0a:70:
         4a:0d:ba:a6:ac:20:1d:52:03:78:6e:cb:9b:eb:09:85:6b:d9:
         07:4c:79:6a:16:8d:01:bf:de:54:13:a9:62:ea:47:85:71:db:
         18:37:5d:8b:6c:12:5c:cb:82:d9:63:2d:10:1c:14:d8:2f:68:
         8e:c2:21:19:9c:bc:e7:ac:08:7b:6b:cd:a2:ac:63:21:29:5b:
         92:e9:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----