Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa
File:                     326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa (raw, json)
Hash identifier:          buzGdzfbG1XT46UmgCkRxwgwjAyzTZZjQOmVDd75i/8=
Subject key identifier:   DA:21:69:7D:34:44:27:A3:8B:27:39:02:D5:4D:6C:BA:A6:D3:A5:26
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       72A1932F626B56983F6BEFEBFEAE795972FD4731
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa
Signing time:             Thu 20 Jun 2024 05:23:11 +0000
ROA not before:           Thu 20 Jun 2024 05:18:11 +0000
ROA not after:            Thu 19 Jun 2025 05:23:11 +0000
asID:                     201242
IP address blocks:        2a12:dd47:80e1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a1:93:2f:62:6b:56:98:3f:6b:ef:eb:fe:ae:79:59:72:fd:47:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:11 2024 GMT
            Not After : Jun 19 05:23:11 2025 GMT
        Subject: CN=DA21697D344427A38B273902D54D6CBAA6D3A526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:16:14:4e:17:79:b9:9e:a8:3f:71:2a:48:ef:
                    69:d2:d3:59:e4:22:d2:9c:ff:6d:6a:79:c9:66:cd:
                    90:fe:73:ae:17:5a:1c:ab:a7:2c:03:30:7b:67:54:
                    70:1e:73:d9:b8:d1:fb:d5:aa:eb:92:2b:94:2b:3d:
                    32:27:e4:cf:3a:3d:3e:7d:48:3f:38:1f:8e:70:0c:
                    ff:06:00:e0:bc:f2:a8:a5:7a:21:7c:53:7c:41:fb:
                    db:41:20:80:ef:5a:c0:d6:f0:66:76:06:d6:52:4d:
                    8f:e0:15:81:3d:1e:2f:44:ff:6d:ac:bb:66:ae:5a:
                    0a:94:21:18:8f:eb:80:2c:c0:ce:77:f5:0c:5b:81:
                    ed:a1:b3:54:ff:6e:1c:ef:0d:14:34:48:0e:c8:d7:
                    13:c3:17:33:86:9c:83:65:2c:53:61:34:2b:45:b2:
                    06:b3:f4:11:22:d1:e6:e5:3d:c2:f0:6f:31:7d:da:
                    16:85:dc:6e:c8:ed:04:ee:cf:16:32:23:df:a8:55:
                    3f:81:20:7f:3b:d1:b6:24:d0:1c:f6:a3:cc:33:4b:
                    33:cb:22:b9:0c:6a:6b:d1:5d:ac:9a:a0:33:55:7d:
                    63:5b:ec:30:d8:08:15:e6:2f:de:f2:7f:3e:3a:bd:
                    a8:11:9d:f8:bc:e7:f2:38:d6:67:dc:79:d3:ef:81:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:21:69:7D:34:44:27:A3:8B:27:39:02:D5:4D:6C:BA:A6:D3:A5:26
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383065313a3a2f34382d3438203d3e20323031323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:d9:0b:30:f5:54:89:f1:f5:ce:fd:3d:6b:6f:10:10:65:57:
         08:9f:ee:47:e4:7c:6e:53:e7:53:a3:ea:72:9f:0b:06:6b:83:
         a7:b5:37:93:d2:92:5c:b0:10:2b:55:ad:3a:73:97:d3:20:93:
         f1:91:6d:ee:a8:81:2e:cf:ed:4f:be:a3:c0:0d:8c:d5:bb:3c:
         24:56:61:c5:22:8b:17:2d:b4:28:1b:bb:57:0a:40:e3:dc:19:
         a2:60:a5:87:c1:a4:97:77:25:27:95:24:10:43:64:38:e3:15:
         8d:ef:15:03:9c:39:60:dd:b2:6a:fd:fa:ae:1f:67:13:38:e3:
         a7:55:ad:02:36:b8:65:2c:88:d7:6e:c2:b5:7d:c8:cb:e3:f5:
         f2:f8:34:e2:ff:57:fa:40:8a:06:e8:2c:d7:e9:e6:1e:2b:7f:
         c8:45:cf:88:6c:63:9a:58:84:bf:7c:40:23:a3:07:85:34:01:
         f0:6f:c7:f4:48:c1:84:1c:f7:d3:0b:e7:18:b6:71:ab:9b:cd:
         09:0a:38:99:03:58:29:e0:93:96:fa:15:09:87:d1:b0:99:e2:
         40:2d:0b:80:d0:1d:4b:7c:d6:28:1a:9e:8f:d4:87:9b:30:a3:
         41:77:f4:a0:e3:8b:78:ef:94:cb:82:a3:6f:a5:ba:4e:d0:0f:
         80:5c:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 22:11:44 2024 by rpki-client on console-fra.rpki-client.org