Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa
File:                     326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa (raw, json)
Hash identifier:          2xYJXdyLHfYhznZ8HgTr6XpqXqhxJ397OpYb51UmIMM=
Subject key identifier:   4C:0D:42:27:C3:08:4B:0A:28:EA:6E:10:86:C8:32:F0:FC:79:23:CA
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       4B62FE25E8ADB14A4E4EC30C45160D463DBE81AA
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa
Signing time:             Thu 20 Jun 2024 05:23:17 +0000
ROA not before:           Thu 20 Jun 2024 05:18:17 +0000
ROA not after:            Thu 19 Jun 2025 05:23:17 +0000
asID:                     207941
IP address blocks:        2a12:dd47:8005::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:62:fe:25:e8:ad:b1:4a:4e:4e:c3:0c:45:16:0d:46:3d:be:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:17 2024 GMT
            Not After : Jun 19 05:23:17 2025 GMT
        Subject: CN=4C0D4227C3084B0A28EA6E1086C832F0FC7923CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:de:02:20:54:12:c1:da:fd:9b:f0:b9:e3:
                    8d:17:b0:8e:a1:fa:f9:9c:f3:8a:7e:41:3e:58:93:
                    04:52:9a:8e:67:06:d8:65:8d:64:4b:d1:1c:de:bc:
                    0e:ad:8a:4b:55:87:2d:d6:08:85:38:0a:10:36:62:
                    ce:de:b7:34:53:5c:ed:b8:eb:79:2d:1d:02:b2:ae:
                    22:7e:42:1e:bd:56:cd:c4:b7:8f:9a:33:ee:47:6b:
                    be:4a:c0:72:fa:ee:d4:88:80:7e:07:1d:a4:3d:f8:
                    17:4f:50:57:3c:65:bd:3a:ad:b7:f8:55:2a:5a:4a:
                    e7:33:e1:5f:17:4c:db:bf:0a:58:8a:e4:3e:0b:91:
                    74:05:1f:5b:2a:1b:8c:88:a1:56:6c:be:65:12:c5:
                    38:e4:ea:dd:f8:dd:21:c1:87:20:20:81:37:0f:76:
                    55:2b:39:8c:10:ee:9f:e8:bf:5d:94:5d:a6:82:dd:
                    13:01:d5:1e:85:8c:b0:85:fb:45:78:d9:aa:8c:f8:
                    e4:a5:11:11:e7:ad:a6:58:9b:67:9e:b0:25:1c:d0:
                    a1:e8:b2:68:2d:f5:8d:02:b4:b1:c7:5a:27:a4:03:
                    67:59:12:4b:3e:fd:bf:4a:14:e5:5b:e8:f6:30:11:
                    61:f7:33:91:a6:93:ca:da:80:66:75:77:81:73:8b:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:42:27:C3:08:4B:0A:28:EA:6E:10:86:C8:32:F0:FC:79:23:CA
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:38:87:4f:b4:43:22:c7:70:86:16:ff:33:74:63:ca:53:50:
         bb:46:4e:30:b7:39:82:73:87:45:41:01:f7:22:2e:d1:87:06:
         d3:b3:cc:73:60:58:c1:44:29:da:9e:f5:61:1e:cd:fe:67:91:
         bb:9d:7f:e8:e3:ff:ce:8e:53:89:fd:a4:41:a1:07:60:af:2f:
         cd:60:8d:64:ec:84:99:b4:d3:90:b9:65:7c:a3:4e:c2:29:8b:
         10:45:d6:13:bd:8c:97:dc:fe:c2:ef:5e:90:c8:1e:00:6e:cd:
         2f:b3:c4:1b:3b:11:e5:34:76:62:a6:01:71:cb:14:71:9b:e7:
         b9:82:e7:2a:df:b4:8d:c0:25:2d:29:a1:3b:2e:fb:a0:b2:e4:
         0e:d3:35:b2:d3:d1:72:8e:78:7f:d4:5c:e1:71:9e:56:9f:4b:
         e3:75:03:81:ad:2b:b0:95:49:d0:bf:8a:49:07:3b:b7:cf:a3:
         75:79:76:a5:1a:5e:5f:ae:ad:25:4b:e5:f0:db:38:0d:14:43:
         d3:4b:78:b8:3b:db:76:6e:e4:3f:1f:2d:05:73:f8:59:73:72:
         98:9e:cd:7b:28:b4:34:5f:32:11:4f:a6:ac:69:cd:81:04:8f:
         ae:b1:8d:51:79:73:82:6a:d0:b4:90:92:86:6d:00:ef:4a:c4:
         78:bf:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 22:11:44 2024 by rpki-client on console-fra.rpki-client.org