Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434303a3a2f32392d3438203d3e20343031313131.roa
File:                     326131323a646434303a3a2f32392d3438203d3e20343031313131.roa (raw, json)
Hash identifier:          oLRHrH6bvxzmsVpUvQNWiULtWkH2BqniK9MS/KP4FSU=
Subject key identifier:   C3:94:E9:11:71:BF:1A:04:3F:36:2C:BD:EE:91:17:E2:92:53:82:B7
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       0EFD1FC07757BD855CB98D51314EEC4B0FF6277C
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434303a3a2f32392d3438203d3e20343031313131.roa
Signing time:             Fri 06 Sep 2024 09:44:59 +0000
ROA not before:           Fri 06 Sep 2024 09:39:59 +0000
ROA not after:            Fri 05 Sep 2025 09:44:59 +0000
asID:                     401111
IP address blocks:        2a12:dd40::/29 maxlen: 48

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 14:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fd:1f:c0:77:57:bd:85:5c:b9:8d:51:31:4e:ec:4b:0f:f6:27:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Sep  6 09:39:59 2024 GMT
            Not After : Sep  5 09:44:59 2025 GMT
        Subject: CN=C394E91171BF1A043F362CBDEE9117E2925382B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:be:cd:ed:88:e7:09:70:9d:e6:23:5c:cf:
                    73:21:bd:71:db:bf:2a:83:07:de:c8:ba:f5:00:b5:
                    6b:fa:96:ae:65:f4:b7:af:1e:a5:2b:1b:bb:9f:9f:
                    d7:8b:9b:2d:25:e0:b1:1a:e2:6d:a8:f8:96:e4:1c:
                    9e:4f:20:5c:f1:42:ed:d8:f2:47:f6:9a:df:8d:7d:
                    5b:34:c6:c5:dc:5f:02:5a:f8:bc:4c:bd:0a:27:94:
                    d5:6e:10:aa:ea:e9:bc:d3:16:d3:64:c9:70:d1:5a:
                    1f:ce:83:4b:7e:a4:6f:4f:14:ec:d2:04:4b:46:d5:
                    37:86:fd:67:fe:1d:20:81:57:20:a1:f2:4f:30:01:
                    23:ff:c4:b4:1d:5d:08:e8:da:b5:b2:21:52:50:25:
                    b5:96:f9:0f:3f:b3:c3:df:f8:c1:da:fe:62:04:b5:
                    78:24:e8:71:e9:13:e9:f8:f1:07:47:0a:b3:79:72:
                    74:76:c0:b4:ee:3b:87:db:05:ee:35:a9:21:4a:d6:
                    e4:00:26:c7:65:e2:c5:d9:42:fc:72:f0:a4:00:39:
                    f5:a2:e8:52:e9:7e:b9:1e:61:4a:62:b8:5b:ea:0d:
                    5b:87:7f:18:a9:0f:58:9e:c5:ac:a9:58:03:35:99:
                    7d:5f:df:0f:5e:fd:15:3a:bc:d7:1b:1d:de:19:36:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:E9:11:71:BF:1A:04:3F:36:2C:BD:EE:91:17:E2:92:53:82:B7
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434303a3a2f32392d3438203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         be:d8:b4:91:9a:c3:dc:26:a8:6b:69:96:c1:d1:21:f8:95:03:
         3c:b3:d5:84:5e:44:70:8b:0a:2d:9c:13:73:e6:f1:23:7d:55:
         21:3f:3b:8b:1d:35:5d:3f:be:63:df:de:3e:b2:25:da:72:ae:
         ab:a7:0a:a1:71:82:98:8e:d4:2b:78:06:88:55:d9:a7:41:9a:
         78:b7:6a:f3:ae:56:ae:89:5a:d4:90:bd:ef:60:37:49:02:7a:
         62:f5:e0:f3:c8:cc:0b:a2:6d:08:60:ad:4f:1c:53:b2:f2:98:
         bb:9f:2b:ec:1c:d8:9f:9b:87:25:0a:e1:46:f2:79:42:89:1f:
         f8:2d:1d:ab:ab:81:b4:22:2b:68:8d:b5:f7:cc:cf:43:86:f9:
         d4:80:3b:4b:aa:54:b2:9d:09:56:3c:c3:1f:3f:35:b1:0a:8d:
         34:ca:62:54:1d:8f:80:e2:d9:9d:d1:48:3b:e6:4c:ae:4d:51:
         0e:f8:44:d0:00:75:95:b9:7f:95:1a:02:f2:c0:c6:b7:3e:b3:
         db:92:34:dc:4d:90:6b:b5:66:03:b6:99:7b:99:3b:70:fb:d2:
         6f:f7:42:e1:ba:a8:aa:2b:55:fd:d5:3e:fc:8c:da:ca:4b:b6:
         72:47:cd:79:a4:4c:7f:47:a1:83:23:82:d7:4f:82:c2:82:36:
         3c:a2:ef:c3
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIUDv0fwHdXvYVcuY1RMU7sSw/2J3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA5MDYwOTM5NTlaFw0yNTA5MDUwOTQ0NTlaMDMxMTAvBgNV
BAMTKEMzOTRFOTExNzFCRjFBMDQzRjM2MkNCREVFOTExN0UyOTI1MzgyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVj77N7YjnCXCd5iNcz3MhvXHb
vyqDB97IuvUAtWv6lq5l9LevHqUrG7ufn9eLmy0l4LEa4m2o+JbkHJ5PIFzxQu3Y
8kf2mt+NfVs0xsXcXwJa+LxMvQonlNVuEKrq6bzTFtNkyXDRWh/Og0t+pG9PFOzS
BEtG1TeG/Wf+HSCBVyCh8k8wASP/xLQdXQjo2rWyIVJQJbWW+Q8/s8Pf+MHa/mIE
tXgk6HHpE+n48QdHCrN5cnR2wLTuO4fbBe41qSFK1uQAJsdl4sXZQvxy8KQAOfWi
6FLpfrkeYUpiuFvqDVuHfxipD1iexaypWAM1mX1f3w9e/RU6vNcbHd4ZNn5VAgMB
AAGjggIkMIICIDAdBgNVHQ4EFgQUw5TpEXG/GgQ/Niy97pEX4pJTgrcwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzMDNhM2EyZjMyMzkyZDM0MzgyMDNkM2UyMDM0
MzAzMTMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoS3UAwDQYJKoZIhvcNAQELBQADggEBAL7Y
tJGaw9wmqGtplsHRIfiVAzyz1YReRHCLCi2cE3Pm8SN9VSE/O4sdNV0/vmPf3j6y
JdpyrqunCqFxgpiO1Ct4BohV2adBmni3avOuVq6JWtSQve9gN0kCemL14PPIzAui
bQhgrU8cU7LymLufK+wc2J+bhyUK4UbyeUKJH/gtHaurgbQiK2iNtffMz0OG+dSA
O0uqVLKdCVY8wx8/NbEKjTTKYlQdj4Di2Z3RSDvmTK5NUQ74RNAAdZW5f5UaAvLA
xrc+s9uSNNxNkGu1ZgO2mXuZO3D70m/3QuG6qKorVf3VPvyM2spLtnJHzXmkTH9H
oYMjgtdPgsKCNjyi78M=
-----END CERTIFICATE-----
Generated at Thu Sep 26 19:18:09 2024 by rpki-client on console-ams.rpki-client.org