Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a356430303a3a2f34302d3438203d3e20313939393536.roa
File:                     326131323a646434373a356430303a3a2f34302d3438203d3e20313939393536.roa (raw, json)
Hash identifier:          kZ3HYwvoAc3f9ITQE7ozeBLZoXF2YR0Y+aC18MnswPc=
Subject key identifier:   CD:6E:A7:1C:3D:B0:D2:B6:52:39:3B:B8:18:61:26:83:57:0B:B7:F2
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       52433736DA9E3BEC74D14AF379F81F02B1592C74
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a356430303a3a2f34302d3438203d3e20313939393536.roa
Signing time:             Thu 20 Jun 2024 05:23:40 +0000
ROA not before:           Thu 20 Jun 2024 05:18:40 +0000
ROA not after:            Thu 19 Jun 2025 05:23:40 +0000
asID:                     199956
IP address blocks:        2a12:dd47:5d00::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:43:37:36:da:9e:3b:ec:74:d1:4a:f3:79:f8:1f:02:b1:59:2c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:40 2024 GMT
            Not After : Jun 19 05:23:40 2025 GMT
        Subject: CN=CD6EA71C3DB0D2B652393BB818612683570BB7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:89:77:37:24:1b:27:07:f2:7f:50:e4:92:
                    47:c1:be:b6:1c:7d:cc:0c:34:44:f3:c4:28:9e:9a:
                    85:b3:56:56:ff:0a:15:cf:75:17:84:3a:34:51:6e:
                    d9:6a:4a:d8:78:cf:9a:76:7e:6f:d9:76:87:62:c9:
                    26:a7:64:cb:92:76:a6:3b:82:87:eb:fc:62:52:d8:
                    6a:7f:28:f3:94:27:bf:f9:1e:fd:8b:e7:0e:57:42:
                    8d:b0:7c:9f:9f:ab:c2:3d:67:a9:1f:c2:73:6b:27:
                    e5:c4:02:74:b2:d6:05:29:19:b5:15:12:b5:12:11:
                    1c:7c:6c:1b:53:dd:89:d6:07:80:cf:19:23:23:b4:
                    4a:85:d4:62:5d:e2:fa:4e:1b:6c:ab:ec:93:29:7b:
                    db:b8:33:28:d2:45:43:ab:e4:c0:c6:bd:be:fb:ad:
                    23:69:51:a3:44:4b:af:bb:b2:aa:62:15:45:ec:8c:
                    ba:2d:46:75:17:01:a4:cf:ac:f6:ef:e1:7d:2c:9e:
                    50:f5:b8:c9:61:94:0f:e8:32:e1:7f:30:38:6b:88:
                    9c:b2:d6:c2:ff:65:e4:96:49:40:25:e9:7f:52:4e:
                    8e:ec:6d:ef:58:37:84:95:f1:d1:17:7d:b7:02:73:
                    c4:dd:7e:d7:7c:f0:ce:d6:05:38:5a:0c:a9:60:5f:
                    af:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:A7:1C:3D:B0:D2:B6:52:39:3B:B8:18:61:26:83:57:0B:B7:F2
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a356430303a3a2f34302d3438203d3e20313939393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:87:ba:80:d1:96:28:3d:b9:d7:c8:42:bd:7e:5f:21:4e:b9:
         59:ab:99:ce:b4:1f:82:9a:30:37:d8:e9:d3:18:e1:a3:99:60:
         d8:56:a2:14:92:c8:5f:ff:12:b8:9f:61:60:68:d4:0c:bc:a7:
         d9:7d:a0:cb:b2:2f:b4:89:0c:4d:80:bb:c8:bf:56:af:d2:94:
         73:da:03:7a:5b:44:b9:af:6a:f6:ca:3e:bf:ea:84:a0:42:d3:
         cb:28:77:e0:13:17:2e:7b:4b:bf:37:8f:db:01:8e:73:07:07:
         f1:cc:7b:f2:37:c7:9f:9a:94:d1:0d:0f:a7:35:31:bf:04:a8:
         b8:fc:77:64:3d:d6:2e:b2:52:65:81:05:eb:d6:f0:af:8b:8a:
         92:a3:e1:d5:45:68:70:01:33:8e:c5:11:40:ef:78:30:a7:7f:
         58:04:b8:cd:fc:b0:d2:1f:4e:7d:36:6e:de:15:a5:2e:2b:6a:
         f4:5b:60:54:f2:d9:03:55:11:a7:a6:41:4b:de:92:60:e9:7e:
         31:9f:5c:af:fc:3b:bc:ce:3d:5e:d8:5f:3d:d3:d1:94:75:c4:
         f5:a0:08:5c:bd:b2:4d:bc:26:ea:ae:0b:d2:42:45:f0:dd:27:
         12:15:96:aa:19:a3:f0:0a:96:a8:ad:30:83:bc:50:2d:5f:79:
         c5:1d:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----