Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa
File:                     326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa (raw, json)
Hash identifier:          mn6onQm2TKjfDfQZmtnb0ufyb5+ZXqlIIP7SanMJkNM=
Subject key identifier:   76:34:29:96:D4:25:A7:1B:47:AC:C8:7D:86:39:4A:61:1B:DD:27:07
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       2E033BFE04748E1DC9E97A2E0F9521A2AECF9904
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa
Signing time:             Thu 20 Jun 2024 05:23:20 +0000
ROA not before:           Thu 20 Jun 2024 05:18:20 +0000
ROA not after:            Thu 19 Jun 2025 05:23:20 +0000
asID:                     207314
IP address blocks:        2a12:dd47:3a00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:03:3b:fe:04:74:8e:1d:c9:e9:7a:2e:0f:95:21:a2:ae:cf:99:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:20 2024 GMT
            Not After : Jun 19 05:23:20 2025 GMT
        Subject: CN=76342996D425A71B47ACC87D86394A611BDD2707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:88:14:f7:d1:d3:12:8e:d9:89:af:43:9b:
                    f3:22:08:0e:5a:fd:f3:65:6d:b7:4a:d0:30:9c:62:
                    37:84:1c:e8:f5:c0:61:eb:26:58:52:87:a8:23:f0:
                    6b:88:8c:16:52:69:66:37:28:b5:3d:3c:31:14:62:
                    15:70:12:f3:77:9f:a6:15:9c:21:04:e9:5e:99:ff:
                    fb:c2:5b:a9:19:06:d3:f6:9b:0d:56:3b:8e:02:8e:
                    b5:11:99:cb:73:31:15:03:d5:4f:55:cb:c8:16:71:
                    a0:65:d9:34:81:cf:28:16:0b:87:6f:80:f3:f4:40:
                    ab:8c:38:b8:c0:fa:d6:b9:b3:0e:50:46:90:80:6e:
                    0e:cb:cd:82:2c:90:d2:de:90:ec:45:43:ec:1c:a8:
                    18:10:f0:30:05:c4:da:43:7c:30:3c:e0:94:84:ba:
                    8e:ec:a5:5f:52:ec:7c:6b:23:0c:d5:fa:4f:eb:74:
                    6c:d0:a6:bd:c0:63:52:79:59:33:ce:24:2a:71:c5:
                    c8:7c:ea:d0:55:e5:29:f7:4b:59:64:76:93:f7:12:
                    3f:60:ad:04:c6:58:06:19:3f:f7:44:cf:24:31:8c:
                    4b:0c:33:53:76:83:e0:c7:5b:d0:c4:23:fa:b3:55:
                    ce:0a:52:6e:45:8b:cf:bf:12:71:a9:fb:4e:5a:14:
                    4b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:29:96:D4:25:A7:1B:47:AC:C8:7D:86:39:4A:61:1B:DD:27:07
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336130303a3a2f34302d3438203d3e20323037333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:1b:5d:03:09:ff:89:d4:14:99:f9:c3:34:ea:07:00:c7:
         58:01:1e:ec:58:57:f6:f0:f2:a8:af:dc:38:76:56:8d:a5:d2:
         c6:d3:fd:6a:49:d1:5a:08:5c:78:55:d9:86:a8:f9:61:16:22:
         a8:45:b0:f4:2c:c7:1e:70:28:cd:f3:47:94:0a:3f:eb:7e:7e:
         c7:62:82:4d:22:26:ea:ab:df:74:df:d8:ba:19:f6:68:89:90:
         60:ce:0b:2c:cf:15:25:e0:76:05:69:c6:24:9b:a2:39:89:ba:
         e4:24:1c:e0:5c:0a:43:cb:4e:da:7e:52:b8:fd:fe:02:b6:19:
         97:3c:d8:2e:bd:1f:89:71:dc:20:eb:e8:53:3d:6e:aa:a8:d8:
         83:29:61:52:cd:c3:f5:bb:8a:63:9a:39:0b:c1:df:d7:0f:a0:
         4b:23:2f:c2:bf:98:c9:f8:7f:6e:b8:42:e4:71:d6:bd:64:50:
         d8:82:3d:d0:62:d3:42:3e:81:20:a3:87:33:45:33:93:f2:4a:
         9e:01:bf:9e:a8:ba:e5:5e:05:ca:9d:0a:7b:73:19:c0:d5:87:
         04:b7:e3:78:5a:9f:28:ad:ea:f7:4d:c0:06:98:0c:f3:5f:3f:
         7a:28:2b:b1:a6:38:75:dc:24:7f:14:05:41:01:92:41:76:52:
         01:fd:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----