Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa
File:                     326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa (raw, json)
Hash identifier:          8jZOPWrm0LzJqGvIB1iVlRNuPnwd6eSOfzlpgMtVFbQ=
Subject key identifier:   FE:2D:DB:0D:A3:98:10:F5:7F:DB:1B:AD:46:D8:DD:DE:55:DC:10:E8
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       4C7E1710E099716709F739B4B3C2FBBAB2D61674
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa
Signing time:             Thu 20 Jun 2024 05:23:18 +0000
ROA not before:           Thu 20 Jun 2024 05:18:18 +0000
ROA not after:            Thu 19 Jun 2025 05:23:18 +0000
asID:                     203636
IP address blocks:        2a12:dd47:5100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7e:17:10:e0:99:71:67:09:f7:39:b4:b3:c2:fb:ba:b2:d6:16:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:18 2024 GMT
            Not After : Jun 19 05:23:18 2025 GMT
        Subject: CN=FE2DDB0DA39810F57FDB1BAD46D8DDDE55DC10E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:74:92:3f:42:20:39:97:4e:6b:1a:70:c7:
                    8e:9e:b3:97:0c:84:9c:8c:aa:14:e2:13:bc:60:e4:
                    c2:92:f5:9e:f4:a3:7e:fd:56:2b:1b:e3:d4:a3:e3:
                    f1:23:f8:a1:a2:5b:db:e0:e8:52:cd:5a:ca:74:db:
                    d5:96:07:df:84:9d:dc:8a:70:ad:5e:8b:77:0e:9e:
                    3a:72:e7:1c:ba:01:af:df:e3:6c:7b:a1:6c:20:2d:
                    80:dc:1a:91:a8:e1:1e:34:89:b7:27:85:6a:8c:54:
                    c4:17:68:6b:77:be:05:6a:0d:1c:ea:23:5a:03:04:
                    ea:af:23:7e:87:5e:9d:4d:02:59:2b:23:60:15:05:
                    00:8d:7d:29:89:0a:60:25:1c:b9:82:56:f2:17:9f:
                    c9:bd:c9:6a:8c:fe:f5:91:34:d1:bb:0a:4a:bb:3b:
                    de:b8:9a:9d:29:07:11:58:e3:ac:49:ce:b8:dc:9d:
                    3c:26:f5:5a:0d:d7:61:8a:d2:ff:5e:70:a8:ca:08:
                    a8:ad:14:69:96:a3:e4:ba:54:f0:12:4f:3c:6c:d1:
                    c5:51:64:6d:b8:14:5d:26:5f:a1:c3:27:62:01:cd:
                    50:e9:e1:b1:bf:e8:b6:0c:81:5e:cd:54:52:ba:39:
                    9a:b0:32:13:a2:be:cd:81:9a:51:26:8e:9b:9d:3f:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2D:DB:0D:A3:98:10:F5:7F:DB:1B:AD:46:D8:DD:DE:55:DC:10:E8
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a353130303a3a2f34302d3438203d3e20323033363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:02:47:61:99:26:6f:d4:2f:21:dc:1b:47:40:45:15:28:
         9f:cf:ec:45:b5:2f:24:39:34:4e:00:cb:35:d4:79:21:bd:d2:
         40:35:bf:28:b3:ff:73:f8:4a:6b:d3:2e:45:48:26:32:ab:8f:
         ac:6c:01:8b:36:37:46:06:85:7a:87:dd:b7:54:a4:2b:9d:d0:
         d1:56:1d:bc:f3:19:02:6b:38:1c:bd:32:8e:86:60:c8:25:4e:
         c6:64:3f:c0:e4:ab:15:31:26:46:91:1a:41:12:64:d3:9b:8a:
         fa:e8:b0:2b:b3:10:30:5a:7c:10:d7:b5:5d:37:20:d6:71:c0:
         c0:61:31:0a:75:a5:68:93:ab:0b:82:e0:80:c5:ac:76:37:1d:
         f5:48:fa:be:47:7f:f6:1b:7f:47:3e:2a:ae:a6:37:16:5d:4c:
         0c:6a:81:96:44:1e:1e:70:60:32:09:f6:63:c0:1a:59:d1:3c:
         df:0e:46:d1:aa:b5:29:1e:9f:10:c5:bc:dd:88:f9:ff:b1:73:
         9d:61:48:52:de:a1:96:cc:70:69:66:57:be:31:b9:94:81:ba:
         bf:ce:5d:dc:ec:1a:2e:0b:ab:e2:92:73:d3:9a:69:cb:16:f8:
         23:45:72:fb:21:af:25:67:2c:2a:74:ce:60:c0:93:ed:73:3c:
         cf:49:89:92
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUTH4XEOCZcWcJ9zm0s8L7urLWFnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MThaFw0yNTA2MTkwNTIzMThaMDMxMTAvBgNV
BAMTKEZFMkREQjBEQTM5ODEwRjU3RkRCMUJBRDQ2RDhERERFNTVEQzEwRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0XSSP0IgOZdOaxpwx46es5cM
hJyMqhTiE7xg5MKS9Z70o379Visb49Sj4/Ej+KGiW9vg6FLNWsp029WWB9+EndyK
cK1ei3cOnjpy5xy6Aa/f42x7oWwgLYDcGpGo4R40ibcnhWqMVMQXaGt3vgVqDRzq
I1oDBOqvI36HXp1NAlkrI2AVBQCNfSmJCmAlHLmCVvIXn8m9yWqM/vWRNNG7Ckq7
O964mp0pBxFY46xJzrjcnTwm9VoN12GK0v9ecKjKCKitFGmWo+S6VPASTzxs0cVR
ZG24FF0mX6HDJ2IBzVDp4bG/6LYMgV7NVFK6OZqwMhOivs2BmlEmjpudP3lVAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU/i3bDaOYEPV/2xutRtjd3lXcEOgwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzUzMTMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMwMzMzNjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HUTANBgkqhkiG9w0B
AQsFAAOCAQEAmS4CR2GZJm/ULyHcG0dARRUon8/sRbUvJDk0TgDLNdR5Ib3SQDW/
KLP/c/hKa9MuRUgmMquPrGwBizY3RgaFeofdt1SkK53Q0VYdvPMZAms4HL0yjoZg
yCVOxmQ/wOSrFTEmRpEaQRJk05uK+uiwK7MQMFp8ENe1XTcg1nHAwGExCnWlaJOr
C4LggMWsdjcd9Uj6vkd/9ht/Rz4qrqY3Fl1MDGqBlkQeHnBgMgn2Y8AaWdE83w5G
0aq1KR6fEMW83Yj5/7FznWFIUt6hlsxwaWZXvjG5lIG6v85d3OwaLgur4pJz05pp
yxb4I0Vy+yGvJWcsKnTOYMCT7XM8z0mJkg==
-----END CERTIFICATE-----
Generated at Fri Jun 21 22:11:44 2024 by rpki-client on console-fra.rpki-client.org