Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa
File:                     326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa (raw, json)
Hash identifier:          1QVEbMisUIiJPcfIYpwOTuWeTUByg6kYtb22HBpY1do=
Subject key identifier:   CC:46:B9:C6:6E:F5:50:80:E6:0D:1B:86:0E:01:6B:89:78:75:81:AD
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       1BE175FD136667021D50527E764C2C7AC42ADA2B
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa
Signing time:             Thu 20 Jun 2024 05:23:22 +0000
ROA not before:           Thu 20 Jun 2024 05:18:22 +0000
ROA not after:            Thu 19 Jun 2025 05:23:22 +0000
asID:                     212168
IP address blocks:        2a12:dd47:5800::/38 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e1:75:fd:13:66:67:02:1d:50:52:7e:76:4c:2c:7a:c4:2a:da:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:22 2024 GMT
            Not After : Jun 19 05:23:22 2025 GMT
        Subject: CN=CC46B9C66EF55080E60D1B860E016B89787581AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:dd:66:fe:82:63:a2:ec:c3:5b:5d:46:b5:
                    c6:23:b7:ef:50:a3:de:18:7b:a4:c9:4f:33:c5:96:
                    6b:66:56:91:5e:60:c4:a8:0a:aa:b7:b2:6a:b7:ef:
                    64:42:d4:5e:f8:c2:c5:4a:03:69:cd:bc:cd:08:41:
                    c8:00:6e:83:8d:18:8c:da:a9:d7:86:e7:25:a4:4b:
                    c2:84:5d:60:06:b3:c6:5a:09:9a:7e:6b:81:80:e2:
                    a3:71:f1:a1:14:be:24:70:89:68:eb:20:69:a6:b7:
                    8b:ec:27:0e:ce:0b:1c:5b:4b:ff:e6:4d:a6:0b:8b:
                    88:14:9a:ea:27:6a:bb:1c:de:a4:7e:19:a2:58:03:
                    bf:a8:82:8d:3c:4a:79:4d:8b:7a:a9:0d:81:9d:7d:
                    e9:22:a1:81:6b:b2:56:de:2a:3e:dc:7b:39:2b:47:
                    73:50:0b:4b:58:ef:37:56:e7:b9:3a:8e:96:bb:f2:
                    86:f8:c1:bd:b4:a6:44:28:55:0f:93:9a:d1:a7:59:
                    a0:dc:b3:d6:6c:ba:44:c5:cf:d5:c1:7d:97:46:37:
                    bd:60:c4:69:c9:d5:71:4e:4f:7a:72:3b:ff:8a:3e:
                    36:14:27:36:07:52:b1:6e:64:a8:c5:f0:42:69:e8:
                    27:60:3e:e2:03:c1:5e:f9:7a:c7:44:e6:93:77:17:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:B9:C6:6E:F5:50:80:E6:0D:1B:86:0E:01:6B:89:78:75:81:AD
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a353830303a3a2f33382d3438203d3e20323132313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5800::/38

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:a4:90:c4:f0:23:53:e6:f9:a3:db:87:45:8d:46:d1:05:
         03:e8:0e:a0:c8:73:e1:ef:51:69:73:51:2e:af:13:f0:b3:0d:
         e0:03:c8:1b:a4:e9:c2:fa:57:df:5e:2f:95:12:67:c7:ad:51:
         3d:4e:61:e5:cd:99:89:45:b5:f5:52:12:9a:d3:8c:2c:7e:30:
         c3:f7:f7:90:dd:05:6b:32:68:33:72:fd:17:81:64:4f:b4:e6:
         6f:2c:28:c0:9e:b3:35:a4:6e:bf:69:12:6d:23:16:c4:86:f8:
         e4:8c:cc:e8:5f:71:2d:f8:fa:ed:1b:33:e3:6a:77:e9:c2:22:
         f2:0a:5f:fc:16:99:2d:31:72:09:92:93:30:ed:e0:7c:4f:33:
         73:aa:54:b1:b0:ff:c9:67:91:1d:09:e3:a3:18:64:82:60:07:
         00:ee:19:a8:30:ab:d7:61:ce:48:ac:55:ea:d1:dc:34:41:be:
         d1:03:10:2b:4b:e4:fa:15:af:30:30:45:81:ea:3b:77:cf:0f:
         2d:15:ba:a6:0d:e4:0d:a6:e5:9f:59:d7:5b:22:22:2b:01:f9:
         aa:a4:cb:dd:7d:22:ca:3e:87:d9:2b:1b:31:86:4e:67:ad:6e:
         57:92:ef:57:b3:63:a5:bb:9b:72:c1:f4:27:b7:08:be:c0:40:
         89:ee:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:22:56 2024 by rpki-client on console-ams.rpki-client.org