Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
File:                     326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa (raw, json)
Hash identifier:          tq6VBUdHLB8PFgVvDe6Mj510bOhiYl1YZzn8wf+JnpE=
Subject key identifier:   71:4E:6B:E3:A9:62:EB:27:5C:D9:0F:44:37:89:52:68:9E:7F:6A:60
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       60004FE41509CACFB47470469B09367A2BA55224
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
Signing time:             Thu 20 Jun 2024 05:23:21 +0000
ROA not before:           Thu 20 Jun 2024 05:18:21 +0000
ROA not after:            Thu 19 Jun 2025 05:23:21 +0000
asID:                     204518
IP address blocks:        2a12:dd47:8080::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:4f:e4:15:09:ca:cf:b4:74:70:46:9b:09:36:7a:2b:a5:52:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:21 2024 GMT
            Not After : Jun 19 05:23:21 2025 GMT
        Subject: CN=714E6BE3A962EB275CD90F44378952689E7F6A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:e5:2f:dc:73:89:38:27:ae:bb:2d:a1:c5:
                    7b:7c:03:c9:0b:cf:e4:86:97:a1:40:f6:b4:ad:07:
                    bc:d2:56:fb:a1:d4:97:e7:cd:2c:d8:ad:00:46:da:
                    f1:a1:66:d4:f7:b4:9f:e1:ac:94:bc:f1:26:1d:a9:
                    bb:59:cf:65:69:c4:7c:fa:ef:32:dc:94:34:7c:61:
                    f6:c5:29:5a:70:ca:92:54:3e:5c:d0:31:5c:08:81:
                    de:08:5d:2c:01:c8:e1:3c:f7:8f:ed:74:23:82:42:
                    06:7c:a8:54:cd:7b:63:fc:3d:5e:a3:12:fa:70:a3:
                    86:20:19:2b:a4:ad:90:e5:17:e9:51:85:f9:0f:22:
                    6d:5d:4f:63:ad:98:32:b8:69:bf:3e:15:63:16:d2:
                    c7:f1:0a:64:c1:52:11:60:e4:55:ee:5c:b3:02:a2:
                    86:5b:85:44:79:2c:0a:ac:8a:6a:02:5b:b5:b8:68:
                    c4:cf:ae:a1:dd:41:65:74:e5:58:83:f4:5a:d3:b5:
                    38:ac:20:5d:d7:9f:c3:f4:30:69:a3:60:60:81:1d:
                    f4:07:8c:27:7b:ea:67:5b:b5:82:e0:68:9a:fd:0e:
                    de:32:83:52:20:e5:b3:c9:84:a1:cf:8c:ec:18:9c:
                    41:88:47:58:cf:f3:eb:88:42:ea:c9:f1:63:c0:a3:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4E:6B:E3:A9:62:EB:27:5C:D9:0F:44:37:89:52:68:9E:7F:6A:60
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:47:a8:47:79:8f:21:a2:ac:ad:e0:a8:b1:66:95:36:4b:fe:
         e3:bc:b6:0e:97:c1:6f:3f:1b:ff:29:23:3c:dc:47:09:20:32:
         c5:36:4b:58:28:10:33:2e:03:15:d8:a9:bf:bb:bd:f4:29:40:
         e7:5e:ba:de:a1:73:c6:fb:cc:a4:10:4e:ed:69:fa:29:b8:41:
         ca:27:b2:47:62:aa:27:66:fa:1b:e0:39:51:02:60:54:55:20:
         3d:31:d2:fb:7f:7d:2d:5e:63:30:56:c7:a9:8c:c0:42:f0:24:
         e4:82:8e:15:df:db:f2:84:93:7c:99:9d:08:7d:1f:1b:43:22:
         98:42:f6:64:9b:29:2d:de:39:e4:a6:3f:96:29:05:fe:34:da:
         ba:c4:27:3f:8f:d1:55:c6:d7:5b:89:64:53:84:3f:a9:d9:5a:
         de:3c:1f:91:ec:c4:3a:e7:34:e3:22:cb:91:8d:40:d5:e0:1d:
         96:a3:54:9b:bf:1c:ee:59:d2:29:f0:d0:04:4b:14:e3:59:35:
         cb:7d:49:29:ce:e6:ff:87:6c:9b:06:ea:16:cb:22:e0:1b:c2:
         8f:ed:66:10:a8:bb:3b:ea:85:2d:46:79:27:8f:f4:f5:9e:01:
         eb:8d:e9:c6:01:e5:58:69:a5:96:c3:12:9c:0a:33:51:4b:8f:
         d0:6c:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----