Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa
File:                     326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa (raw, json)
Hash identifier:          qnBF9ocvoM789lwqog5DQjv9lkVjyPrLHFtUWfBPxHE=
Subject key identifier:   A8:5D:78:B7:C2:E1:3E:A2:7A:23:8F:C9:6C:69:37:60:8B:09:AA:5A
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       13649BADC75939AAD551F877C6023A94CB53234A
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa
Signing time:             Thu 20 Jun 2024 05:23:26 +0000
ROA not before:           Thu 20 Jun 2024 05:18:26 +0000
ROA not after:            Thu 19 Jun 2025 05:23:26 +0000
asID:                     197609
IP address blocks:        2a12:dd47:100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:64:9b:ad:c7:59:39:aa:d5:51:f8:77:c6:02:3a:94:cb:53:23:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:26 2024 GMT
            Not After : Jun 19 05:23:26 2025 GMT
        Subject: CN=A85D78B7C2E13EA27A238FC96C6937608B09AA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:28:c3:0d:7d:e2:5c:78:42:6b:ba:19:3e:2e:
                    69:cc:3e:9c:fd:b4:05:bb:5a:84:ce:b5:70:d2:93:
                    17:9d:1c:37:0c:16:fb:e9:9f:2e:b1:0f:50:8b:8d:
                    9d:86:e3:b8:37:4e:51:36:a1:69:11:3b:09:81:9b:
                    2e:25:3b:97:61:e1:07:63:d0:ba:80:2a:a0:bb:00:
                    c2:c0:36:a8:4b:ee:4b:71:d2:5e:f6:79:c0:0e:fe:
                    ac:fb:59:df:3c:0a:d6:95:88:37:e1:b3:4c:85:e0:
                    e7:c6:be:e0:d7:0d:14:ad:5c:c8:87:40:49:86:fe:
                    ab:1d:68:72:ad:66:31:85:1b:65:63:c0:77:9b:e7:
                    4b:1b:d5:08:62:b0:9b:e7:5c:fa:ce:45:db:73:0c:
                    84:49:43:11:d9:ec:ab:d2:8e:d1:ed:a9:f4:dd:86:
                    9f:40:8c:88:3c:94:88:ea:ae:8c:4e:39:80:12:a2:
                    6c:fa:e7:a9:27:64:eb:f2:27:f7:42:ec:cc:46:a2:
                    29:83:be:d0:b2:66:82:8e:53:27:96:63:8a:35:21:
                    52:6c:f7:a5:cf:51:ff:05:65:2a:e8:32:bc:20:92:
                    f7:49:f5:ee:41:2e:bc:d1:2a:cc:da:3f:52:5a:a5:
                    f4:f7:dd:c1:00:c1:9f:7f:19:fb:ad:29:60:8a:a5:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:78:B7:C2:E1:3E:A2:7A:23:8F:C9:6C:69:37:60:8B:09:AA:5A
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:13:0d:fd:eb:d9:ea:3b:43:0c:43:f8:3a:d2:e6:7b:17:
         94:18:1c:fa:37:50:f4:59:16:81:40:34:ec:ff:b5:12:b3:b2:
         12:1f:39:36:9e:b6:08:3e:bf:ea:02:84:0a:d9:96:bd:75:ac:
         b6:c4:6f:0d:ce:6c:ad:f3:0e:29:d9:95:57:61:bb:24:fb:ec:
         ae:d7:88:dd:a6:83:84:9e:85:9e:dd:2d:da:ea:2f:4a:51:e5:
         4c:bc:e9:5a:fa:78:c3:7d:94:ec:f4:56:8b:04:83:1e:4f:e8:
         15:6b:52:7c:95:d9:38:50:8b:4b:80:e5:69:0f:65:1a:ff:44:
         f2:61:59:5a:c9:fe:1e:f1:dc:71:e3:35:84:85:66:30:0d:48:
         56:24:23:d0:c7:1a:4c:69:b2:e4:ed:f3:ae:be:b4:6c:95:14:
         e0:96:64:28:8a:c4:0a:2d:c2:35:09:24:a5:28:c9:b7:0f:85:
         80:60:b9:ed:d9:06:d2:87:6c:2e:e0:bc:b4:75:9e:09:fe:35:
         33:2d:d9:33:cd:6a:3f:99:0d:57:67:6e:9d:d9:b8:38:75:ee:
         e7:c5:fe:3c:b7:ad:a5:74:01:b6:98:ab:ed:87:9d:b2:c1:85:
         b9:87:79:de:ba:25:21:b7:08:64:67:2e:56:64:98:ce:71:83:
         a8:2f:63:2d
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUE2SbrcdZOarVUfh3xgI6lMtTI0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MjZaFw0yNTA2MTkwNTIzMjZaMDMxMTAvBgNV
BAMTKEE4NUQ3OEI3QzJFMTNFQTI3QTIzOEZDOTZDNjkzNzYwOEIwOUFBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKMMNfeJceEJruhk+LmnMPpz9
tAW7WoTOtXDSkxedHDcMFvvpny6xD1CLjZ2G47g3TlE2oWkROwmBmy4lO5dh4Qdj
0LqAKqC7AMLANqhL7ktx0l72ecAO/qz7Wd88CtaViDfhs0yF4OfGvuDXDRStXMiH
QEmG/qsdaHKtZjGFG2VjwHeb50sb1QhisJvnXPrORdtzDIRJQxHZ7KvSjtHtqfTd
hp9AjIg8lIjqroxOOYASomz656knZOvyJ/dC7MxGoimDvtCyZoKOUyeWY4o1IVJs
96XPUf8FZSroMrwgkvdJ9e5BLrzRKszaP1JapfT33cEAwZ9/GfutKWCKpXtVAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUqF14t8LhPqJ6I4/JbGk3YIsJqlowHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgaoGCCsG
AQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzEzMDMwM2EzYTJmMzQzMDJkMzQzODIw
M2QzZTIwMzEzOTM3MzYzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdRwEwDQYJKoZIhvcNAQEL
BQADggEBACIaEw3969nqO0MMQ/g60uZ7F5QYHPo3UPRZFoFANOz/tRKzshIfOTae
tgg+v+oChArZlr11rLbEbw3ObK3zDinZlVdhuyT77K7XiN2mg4SehZ7dLdrqL0pR
5Uy86Vr6eMN9lOz0VosEgx5P6BVrUnyV2ThQi0uA5WkPZRr/RPJhWVrJ/h7x3HHj
NYSFZjANSFYkI9DHGkxpsuTt866+tGyVFOCWZCiKxAotwjUJJKUoybcPhYBgue3Z
BtKHbC7gvLR1ngn+NTMt2TPNaj+ZDVdnbp3ZuDh17ufF/jy3raV0AbaYq+2HnbLB
hbmHed66JSG3CGRnLlZkmM5xg6gvYy0=
-----END CERTIFICATE-----
Generated at Fri Jun 21 22:11:44 2024 by rpki-client on console-fra.rpki-client.org