Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383265303a3a2f34342d3438203d3e20323037333230.roa
File:                     326131323a646434373a383265303a3a2f34342d3438203d3e20323037333230.roa (raw, json)
Hash identifier:          qyD6CkeozjbES1w81wD7Dljval3fQ6Ika1ipWKE+pvw=
Subject key identifier:   1C:D3:3D:41:BB:97:D2:08:1D:3C:3B:75:D3:99:81:68:AB:63:1E:98
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       186C77C1431D05D8FEBFE1FE5B5E4E6DCDB67CA1
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383265303a3a2f34342d3438203d3e20323037333230.roa
Signing time:             Thu 20 Jun 2024 05:23:10 +0000
ROA not before:           Thu 20 Jun 2024 05:18:10 +0000
ROA not after:            Thu 19 Jun 2025 05:23:10 +0000
asID:                     207320
IP address blocks:        2a12:dd47:82e0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6c:77:c1:43:1d:05:d8:fe:bf:e1:fe:5b:5e:4e:6d:cd:b6:7c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:10 2024 GMT
            Not After : Jun 19 05:23:10 2025 GMT
        Subject: CN=1CD33D41BB97D2081D3C3B75D3998168AB631E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:d7:eb:8b:23:0b:bd:e3:b9:d0:2d:c8:f3:
                    82:0b:a5:5b:77:5c:67:f8:94:50:9d:39:13:92:5f:
                    3c:65:b9:ae:ef:05:c4:d4:fa:25:b1:22:78:97:34:
                    1a:36:c4:49:6d:79:9c:c4:55:af:47:17:09:81:bd:
                    d8:07:a8:5d:39:8f:fa:c1:ff:a6:70:07:95:a8:93:
                    20:bf:66:b6:5b:62:46:4e:dc:96:a6:8a:a7:cf:7e:
                    51:19:33:79:b8:6c:b2:a8:5e:ab:9c:95:0d:53:93:
                    82:cd:42:77:a1:cb:29:8b:6d:fc:b2:05:16:f5:17:
                    31:e5:b0:67:38:4c:0d:c8:ce:2b:bf:c0:b3:5a:1d:
                    ed:02:01:f8:fd:52:bb:06:34:7f:06:46:16:17:7d:
                    96:fd:b4:8e:ba:62:15:02:96:c2:0d:04:52:44:b0:
                    d7:b9:35:8a:4c:4d:53:c4:3d:fb:ab:55:1a:c8:05:
                    0d:1e:7d:57:e1:fc:ac:b2:5c:aa:3a:8a:97:75:d8:
                    34:38:2f:45:6d:8a:37:97:ab:03:43:e7:1f:0e:10:
                    69:3f:ee:5d:ba:5b:d0:a8:c0:77:52:a2:cd:a4:b3:
                    20:5c:f1:66:bb:11:fe:8b:cf:f8:25:33:06:34:99:
                    03:6a:ee:0b:c2:35:85:2c:6e:c2:51:ae:d8:6d:5c:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D3:3D:41:BB:97:D2:08:1D:3C:3B:75:D3:99:81:68:AB:63:1E:98
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383265303a3a2f34342d3438203d3e20323037333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:6f:c5:d7:b9:d5:6b:35:72:e8:12:b7:6e:43:cc:b9:c7:20:
         e4:b1:0a:e6:0c:28:27:cc:3d:c0:14:b1:f8:31:5f:bc:29:78:
         2b:be:65:e3:b7:1f:4c:51:9b:73:22:6a:73:5b:0f:7b:b1:92:
         95:75:d2:fc:af:bd:91:09:11:5a:fe:a1:4d:e5:7b:80:0e:79:
         8a:58:bd:51:f5:56:9e:90:d6:73:3f:43:d2:84:7c:62:ad:9c:
         f8:ff:10:f6:88:82:ea:2f:a3:b8:32:26:1a:72:5e:79:12:57:
         09:c1:7b:3e:29:36:15:88:25:26:44:34:91:f1:08:42:38:26:
         82:01:2f:73:d1:d4:9c:cf:d4:45:71:43:ad:f0:22:21:0c:a0:
         17:b1:d2:67:76:91:81:9e:8a:e3:ca:5e:bf:8d:ff:b0:10:5d:
         ab:e6:77:e5:48:0e:c0:94:33:7f:39:89:74:14:16:09:89:f8:
         2f:c4:60:d9:1b:4c:f2:61:33:40:2f:94:30:3a:e5:a4:74:c0:
         f3:99:95:1a:06:b0:74:a7:bd:b2:bc:c9:66:4b:ac:84:ce:20:
         09:28:51:37:0b:74:8f:f3:89:a1:7e:0e:fb:3a:c7:6b:ea:9f:
         cf:f3:92:98:af:c2:1c:68:cc:d6:97:0b:1b:49:05:75:f7:63:
         c8:af:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----