Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386130303a3a2f33392d3438203d3e20323130353337.roa
File:                     326131323a646434373a386130303a3a2f33392d3438203d3e20323130353337.roa (raw, json)
Hash identifier:          uVB7Gk4dp52m8aQbLobNNfZ02vZ5b6AT2/6ezrw70e4=
Subject key identifier:   AF:EF:7B:E4:53:89:2C:B9:39:17:A7:3A:51:59:0A:D2:BF:56:E4:59
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       7E9AE46548F72BE1EF79633C79ABB028BF205C72
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386130303a3a2f33392d3438203d3e20323130353337.roa
Signing time:             Thu 20 Jun 2024 05:23:15 +0000
ROA not before:           Thu 20 Jun 2024 05:18:15 +0000
ROA not after:            Thu 19 Jun 2025 05:23:15 +0000
asID:                     210537
IP address blocks:        2a12:dd47:8a00::/39 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9a:e4:65:48:f7:2b:e1:ef:79:63:3c:79:ab:b0:28:bf:20:5c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:15 2024 GMT
            Not After : Jun 19 05:23:15 2025 GMT
        Subject: CN=AFEF7BE453892CB93917A73A51590AD2BF56E459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:a2:31:22:6d:ea:9c:0c:14:af:47:c7:ad:
                    bf:77:5a:f6:61:ca:8a:10:40:dc:d3:b2:3d:3e:b0:
                    48:b3:e1:9f:8f:ef:db:87:fd:d0:79:2e:0e:2e:28:
                    6a:6c:1a:56:08:06:9c:ef:e0:5c:fd:a7:90:a8:5c:
                    6e:65:4d:01:bc:98:db:76:72:26:2c:2d:bf:e1:ee:
                    ba:e9:28:80:b3:fe:51:d6:52:6b:07:40:28:6d:5b:
                    92:c8:f1:4c:bc:64:de:23:e8:ab:48:6b:f1:7d:98:
                    63:5c:5f:98:88:63:ad:35:47:5a:64:80:29:f0:ba:
                    a5:4e:93:13:8c:d3:46:3f:b8:46:dd:ac:89:cd:23:
                    69:19:f0:39:b3:3d:1b:fd:dd:18:d9:2e:b0:31:96:
                    98:85:2c:7d:bd:1c:50:88:13:43:31:c1:f9:c5:76:
                    ff:ce:48:86:9a:22:e7:9f:8a:86:a2:f8:a7:72:e0:
                    18:4e:cb:ff:88:f7:90:d1:94:1e:16:60:3b:45:d0:
                    e9:a4:e3:0a:cc:bc:78:7d:84:bb:54:ff:76:26:17:
                    8e:0f:a6:7c:c4:94:4e:eb:6a:09:f9:98:b6:1e:23:
                    f2:f0:01:83:f2:f2:f4:77:25:4d:35:2d:56:23:fe:
                    af:f1:e3:65:cf:6d:95:4a:66:cb:f2:e5:7d:94:52:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EF:7B:E4:53:89:2C:B9:39:17:A7:3A:51:59:0A:D2:BF:56:E4:59
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386130303a3a2f33392d3438203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:74:bb:2e:26:d2:d5:39:80:7d:15:0b:14:5a:fb:cc:db:
         5e:58:78:65:6c:24:bd:de:79:63:98:af:21:dd:d6:ad:1c:02:
         b7:ff:21:56:01:94:37:64:88:56:54:7a:de:e3:42:28:47:3e:
         be:8c:0c:17:89:85:6c:7b:4e:e0:bc:b2:80:2c:cc:bb:6e:8c:
         2b:bf:7c:b0:fb:2a:1a:15:0d:64:06:f4:5f:48:6b:4d:fd:34:
         68:fb:69:0f:bd:55:aa:cd:bb:4f:7c:3b:c3:fa:c3:c3:1e:68:
         2f:6b:af:06:de:36:5e:8f:da:26:c7:6e:2e:3e:a9:92:3d:f8:
         36:4d:85:0b:95:3b:b2:91:fd:d0:44:9b:9c:0d:ad:c4:f0:3f:
         9f:4a:66:a0:e6:e2:57:7e:a6:61:c6:4d:c0:ad:fd:cd:d5:81:
         62:99:5a:81:6d:e1:33:7a:7a:d0:5b:a9:70:f7:9e:33:4f:e3:
         db:c1:14:9f:e7:b3:0e:dc:fc:c3:aa:aa:ef:ae:0a:b4:f8:ea:
         8d:a2:2b:84:dd:56:9c:3e:c3:a9:30:85:f3:5c:f2:9a:9b:7b:
         a5:ed:1e:09:dc:48:b8:b5:bc:5d:23:1b:8f:41:38:9b:ee:05:
         1c:20:a4:b7:ad:e9:bd:7b:11:29:ff:1b:a8:61:c2:93:0c:6f:
         22:0a:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:22:56 2024 by rpki-client on console-ams.rpki-client.org