Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa
File:                     326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa (raw, json)
Hash identifier:          Q7eRbfa3R3IcU2uaC5Sn4TdpuIB/dU7Sy2Pa3akifMk=
Subject key identifier:   61:A4:47:87:5E:D3:A7:89:8A:E3:72:EE:07:48:DD:F2:9B:6C:A1:1B
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       2A44A7CFB0B1BA4B95691C13ED48442F12085AD9
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa
Signing time:             Thu 20 Jun 2024 05:23:23 +0000
ROA not before:           Thu 20 Jun 2024 05:18:23 +0000
ROA not after:            Thu 19 Jun 2025 05:23:23 +0000
asID:                     212503
IP address blocks:        2a12:dd47:8ee0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:44:a7:cf:b0:b1:ba:4b:95:69:1c:13:ed:48:44:2f:12:08:5a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:23 2024 GMT
            Not After : Jun 19 05:23:23 2025 GMT
        Subject: CN=61A447875ED3A7898AE372EE0748DDF29B6CA11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e2:9d:a9:27:36:cf:51:56:3d:24:b5:9a:a7:
                    82:24:42:c6:78:6e:fb:a5:98:51:18:73:0d:db:11:
                    23:fb:4f:6f:7f:45:6f:e6:1f:d1:1b:35:2f:77:55:
                    99:59:93:8d:08:87:14:4f:0d:6f:0c:3b:bb:6d:66:
                    75:93:12:c4:4d:d6:56:08:20:27:7a:fa:e9:79:db:
                    81:29:19:21:9a:f7:0e:b8:45:81:9b:48:9e:0f:81:
                    d3:02:b7:30:55:68:b5:fd:e2:ae:83:e2:61:39:31:
                    90:d2:60:7b:e0:0a:47:15:d2:9c:e8:03:cb:80:17:
                    95:cd:e0:a2:bd:07:f1:53:ec:e1:06:dc:65:2d:e3:
                    53:c7:e0:ec:82:4b:b3:8b:5c:cd:2b:e0:38:49:a5:
                    56:05:31:ff:e5:87:dc:ce:e6:81:a3:e8:50:3f:c6:
                    45:9e:73:b5:e4:50:87:b0:f9:63:70:2f:d8:34:60:
                    6f:ee:e9:7c:6a:44:bd:f3:dd:cf:f0:e6:03:41:dc:
                    ce:e0:3c:7e:9c:5b:df:39:f0:c2:7c:5c:89:c9:df:
                    72:5c:99:e8:85:7f:59:be:24:aa:45:c5:25:7b:4d:
                    7b:db:2b:34:af:6e:5a:d5:ee:3d:47:87:42:70:7d:
                    46:ab:83:71:61:77:5e:8a:25:f5:74:26:d9:53:cb:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:47:87:5E:D3:A7:89:8A:E3:72:EE:07:48:DD:F2:9B:6C:A1:1B
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386565303a3a2f34342d3438203d3e20323132353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:2a:24:af:d2:2e:dc:3d:71:86:fe:2e:b0:f8:ca:fc:0f:
         2d:88:aa:2f:fb:26:fa:40:dd:42:99:1a:29:a7:27:94:4b:6e:
         d9:f8:4c:85:ee:df:a7:5b:5e:c6:e7:60:f5:b8:0b:92:e0:a4:
         bc:a0:d5:e0:49:3e:17:50:7f:f7:e4:38:f7:61:5f:a8:72:01:
         8b:ed:2f:1f:c5:b7:d6:76:65:e8:d8:42:4c:75:c2:26:63:e7:
         34:02:ff:08:af:c7:ad:c5:dd:df:b3:0f:8b:54:85:39:7c:fd:
         38:a5:be:b0:65:77:7b:66:af:e0:52:b6:c1:40:0a:4d:44:c6:
         3e:f3:d7:4e:eb:f9:94:ea:81:f5:47:37:76:ad:f3:4f:4e:5b:
         e3:17:af:ed:c0:26:e5:24:e8:49:1f:75:bc:c7:85:ef:45:b3:
         84:2b:20:56:14:3e:7c:13:b8:19:ea:3f:96:7c:7a:d8:96:d4:
         02:98:6e:b7:b7:b3:aa:3f:dd:56:ad:94:a7:81:88:80:88:45:
         b9:f8:ed:b8:e0:17:1a:01:72:df:d2:1c:54:f1:02:e3:f4:5e:
         13:da:3f:60:27:51:6f:00:bb:59:e7:33:b6:22:54:fe:37:ed:
         44:66:42:46:8f:fa:37:af:37:a7:c0:7f:e3:91:77:b4:1b:6d:
         d5:54:f1:96
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUKkSnz7CxukuVaRwT7UhELxIIWtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MjNaFw0yNTA2MTkwNTIzMjNaMDMxMTAvBgNV
BAMTKDYxQTQ0Nzg3NUVEM0E3ODk4QUUzNzJFRTA3NDhEREYyOUI2Q0ExMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx4p2pJzbPUVY9JLWap4IkQsZ4
bvulmFEYcw3bESP7T29/RW/mH9EbNS93VZlZk40IhxRPDW8MO7ttZnWTEsRN1lYI
ICd6+ul524EpGSGa9w64RYGbSJ4PgdMCtzBVaLX94q6D4mE5MZDSYHvgCkcV0pzo
A8uAF5XN4KK9B/FT7OEG3GUt41PH4OyCS7OLXM0r4DhJpVYFMf/lh9zO5oGj6FA/
xkWec7XkUIew+WNwL9g0YG/u6XxqRL3z3c/w5gNB3M7gPH6cW9858MJ8XInJ33Jc
meiFf1m+JKpFxSV7TXvbKzSvblrV7j1Hh0JwfUarg3Fhd16KJfV0JtlTy7iVAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYaRHh17Tp4mK43LuB0jd8ptsoRswHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzg2NTY1MzAzYTNhMmYzNDM0MmQzNDM4
MjAzZDNlMjAzMjMxMzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HjuAwDQYJKoZIhvcN
AQELBQADggEBAE76KiSv0i7cPXGG/i6w+Mr8Dy2Iqi/7JvpA3UKZGimnJ5RLbtn4
TIXu36dbXsbnYPW4C5LgpLyg1eBJPhdQf/fkOPdhX6hyAYvtLx/Ft9Z2ZejYQkx1
wiZj5zQC/wivx63F3d+zD4tUhTl8/TilvrBld3tmr+BStsFACk1Exj7z107r+ZTq
gfVHN3at809OW+MXr+3AJuUk6EkfdbzHhe9Fs4QrIFYUPnwTuBnqP5Z8etiW1AKY
bre3s6o/3VatlKeBiICIRbn47bjgFxoBct/SHFTxAuP0XhPaP2AnUW8Au1nnM7Yi
VP437URmQkaP+jevN6fAf+ORd7QbbdVU8ZY=
-----END CERTIFICATE-----
Generated at Fri Jun 21 22:11:44 2024 by rpki-client on console-fra.rpki-client.org