Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa
File:                     326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa (raw, json)
Hash identifier:          L8ot0wuBqETP2+XURRuY6tvAMYJJ8XXzRNBtoGoanfE=
Subject key identifier:   78:94:F2:49:3D:21:16:04:64:10:6B:B2:A2:20:34:AB:78:EB:4D:A8
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       38685D477CC6311DFC7ACF3265D6B7F710833777
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa
Signing time:             Thu 20 Jun 2024 05:23:26 +0000
ROA not before:           Thu 20 Jun 2024 05:18:26 +0000
ROA not after:            Thu 19 Jun 2025 05:23:26 +0000
asID:                     211411
IP address blocks:        2a12:dd47:8060::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:68:5d:47:7c:c6:31:1d:fc:7a:cf:32:65:d6:b7:f7:10:83:37:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:26 2024 GMT
            Not After : Jun 19 05:23:26 2025 GMT
        Subject: CN=7894F2493D21160464106BB2A22034AB78EB4DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:8a:f1:25:b3:2b:e0:d1:e5:7d:9c:cb:f1:
                    97:a8:ed:6a:81:e6:24:ee:e7:2d:c2:02:50:70:53:
                    13:28:3f:f7:1f:9c:37:10:6d:5c:69:32:1b:5e:e8:
                    5a:70:f0:b4:f1:73:0b:f0:68:99:19:f7:cb:b9:2b:
                    92:18:5b:b0:77:bf:4e:12:73:87:96:44:f0:e9:da:
                    6e:b3:6d:5d:e8:ac:ae:02:9e:d5:fc:a8:dc:b9:cd:
                    29:51:d5:43:0b:b4:6c:a3:3f:f3:db:da:e5:f5:c7:
                    5f:21:53:ad:ad:58:35:9e:6b:2e:30:71:28:25:36:
                    71:c8:70:75:5b:7a:2b:16:ea:94:0a:33:f9:84:48:
                    88:01:19:67:01:40:51:3f:b2:47:a0:a3:ee:b7:9a:
                    22:4f:c3:fe:4e:3a:98:8f:cc:a3:81:78:8d:40:d2:
                    23:8f:27:bc:04:8f:ed:63:55:01:8b:a4:01:b1:a1:
                    4e:c0:57:94:05:0d:b5:80:c9:b3:6f:99:79:51:22:
                    54:cc:bc:18:de:52:8f:a9:70:30:a4:51:a6:93:fa:
                    56:9d:07:6e:3a:f3:8a:d5:41:41:61:60:f2:12:e3:
                    e1:29:d1:a1:4d:46:7b:5f:3d:a2:16:00:64:43:84:
                    78:f5:2d:0d:bc:01:33:99:54:76:30:bc:84:15:94:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:F2:49:3D:21:16:04:64:10:6B:B2:A2:20:34:AB:78:EB:4D:A8
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383036303a3a2f34342d3438203d3e20323131343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8060::/44

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:af:e7:7d:03:08:48:53:e5:d6:ae:cd:b5:28:77:c1:12:
         54:83:f1:c4:9e:e1:10:3f:4b:89:47:95:ed:db:1f:cc:b1:66:
         ec:12:03:e4:df:6b:dd:2c:cb:87:aa:b9:f9:21:ce:a8:33:0c:
         5b:67:c4:25:cb:93:54:a9:3d:21:aa:80:4e:bf:fe:9d:36:01:
         af:52:41:cb:3b:21:d2:2c:7d:01:dd:59:bb:75:d5:dc:97:9d:
         d3:8e:bc:46:b9:74:94:46:30:9d:84:d5:ed:d4:fd:56:c0:f2:
         c5:68:74:17:77:ad:4c:19:ad:a4:2e:15:b6:ac:28:b0:d5:7f:
         ff:ea:db:4e:a3:04:95:a4:a1:52:69:ab:d2:48:38:54:b8:0c:
         9d:0e:96:26:f0:7a:d8:50:38:87:db:24:f0:6b:1f:d9:da:a5:
         06:f7:23:90:43:63:d4:d8:28:94:52:a8:47:a9:80:12:26:9a:
         84:7e:9a:5b:21:4e:f4:fd:42:22:a7:65:48:d2:da:eb:61:83:
         ba:3a:b3:4d:a8:2e:6c:80:ed:0f:d6:fd:0a:10:8a:96:99:38:
         2d:29:28:fb:a4:36:65:0a:9b:5b:89:e3:bd:b3:46:9f:68:22:
         29:c8:25:72:23:a8:a0:d6:07:af:36:7e:13:86:6c:bc:49:74:
         3e:44:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----