Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa
File:                     326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa (raw, json)
Hash identifier:          VWQSEXAzbnoV3TYkaZ5ogaGoyzbGFptd8wfLPotvj54=
Subject key identifier:   33:78:39:6B:0B:20:39:F3:8D:20:48:2E:55:31:21:12:1F:B1:F7:8D
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       0112F189B37CF8B5FBB452E72DD7CA8231A0A602
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa
Signing time:             Thu 20 Jun 2024 05:23:20 +0000
ROA not before:           Thu 20 Jun 2024 05:18:20 +0000
ROA not after:            Thu 19 Jun 2025 05:23:20 +0000
asID:                     199656
IP address blocks:        2a12:dd47:f700::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:12:f1:89:b3:7c:f8:b5:fb:b4:52:e7:2d:d7:ca:82:31:a0:a6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:20 2024 GMT
            Not After : Jun 19 05:23:20 2025 GMT
        Subject: CN=3378396B0B2039F38D20482E553121121FB1F78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ef:64:bd:25:81:87:4e:81:8f:d5:3f:83:3f:
                    9c:36:f7:ed:fe:77:c6:1d:d2:83:53:0c:72:25:26:
                    21:cf:3c:c8:79:96:00:08:12:4b:e5:a3:cf:99:d8:
                    95:d6:5a:57:d1:e7:8d:ec:e6:26:54:b3:c5:5b:c3:
                    4c:e5:fc:74:de:4d:08:1a:6e:f1:58:b6:00:46:f9:
                    34:4c:c8:ce:c1:cf:03:d2:78:21:25:01:5d:a2:22:
                    30:d2:4e:16:29:a1:09:42:38:f8:05:97:6c:bc:a3:
                    f7:04:cf:9f:ce:e1:4c:84:f6:3f:99:b4:61:bf:de:
                    ec:4a:f2:ef:e0:9f:aa:e1:67:3e:b4:db:94:f5:64:
                    2b:3b:94:ed:cd:43:8f:64:aa:3e:68:0c:fe:c3:86:
                    20:2f:d7:85:30:f2:61:cd:db:b8:c5:cf:50:44:32:
                    a6:9e:7d:6e:3c:d5:b8:f0:e5:e2:5b:d1:2d:eb:5c:
                    71:52:02:8f:a1:cf:77:9a:94:c8:db:e7:f0:7d:85:
                    7e:34:0a:41:8a:c7:60:1a:0b:81:b5:86:8f:9a:eb:
                    0e:3d:49:94:98:b7:81:ca:33:ea:a1:12:19:db:90:
                    78:9c:03:83:f8:16:2c:36:f9:03:47:b9:17:79:ba:
                    dc:97:60:07:63:aa:6d:10:93:2b:df:e7:37:cf:01:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:39:6B:0B:20:39:F3:8D:20:48:2E:55:31:21:12:1F:B1:F7:8D
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663730303a3a2f34302d3438203d3e20313939363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:5d:f4:f9:8a:75:51:4b:42:49:73:0d:da:11:11:10:cc:8e:
         95:e3:e0:aa:bf:14:27:e3:70:c5:8c:ee:0c:79:8c:67:20:4b:
         13:76:6e:bf:0f:66:c9:cf:d1:d0:a5:29:c6:d1:f2:cb:06:5f:
         eb:fc:be:7d:9a:f2:f3:cf:50:10:de:ac:3c:ec:bd:8a:0c:7f:
         ca:53:83:73:7a:b9:19:26:a7:23:db:5c:2b:35:2e:c9:98:a3:
         1b:c6:fd:aa:82:10:53:4b:95:9a:4f:05:38:2e:24:b7:b7:d1:
         9a:29:74:17:79:14:24:e1:6a:2b:27:38:23:42:06:af:3c:f3:
         91:45:c5:7f:7f:2c:e9:f5:a9:cb:44:6e:3a:a6:25:80:b8:af:
         bb:61:d0:ae:4d:9c:b8:1e:a2:a5:d3:d5:37:27:a3:e4:25:09:
         d7:7b:2f:23:fc:47:5e:4a:a1:35:97:cf:ee:09:79:13:66:65:
         61:aa:8d:73:fc:62:d9:db:67:3d:da:69:f8:a2:95:7d:d1:c8:
         f2:5f:65:5e:95:a0:73:9e:4e:ea:78:44:b7:4d:c8:53:69:52:
         f8:b6:a0:31:b1:3f:9f:56:4b:82:f9:cb:d6:5d:61:6c:ee:3f:
         a8:92:66:a0:25:77:95:56:8c:a9:e6:61:92:33:7a:76:64:c9:
         16:c1:c4:99
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUARLxibN8+LX7tFLnLdfKgjGgpgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MjBaFw0yNTA2MTkwNTIzMjBaMDMxMTAvBgNV
BAMTKDMzNzgzOTZCMEIyMDM5RjM4RDIwNDgyRTU1MzEyMTEyMUZCMUY3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl72S9JYGHToGP1T+DP5w29+3+
d8Yd0oNTDHIlJiHPPMh5lgAIEkvlo8+Z2JXWWlfR543s5iZUs8Vbw0zl/HTeTQga
bvFYtgBG+TRMyM7BzwPSeCElAV2iIjDSThYpoQlCOPgFl2y8o/cEz5/O4UyE9j+Z
tGG/3uxK8u/gn6rhZz6025T1ZCs7lO3NQ49kqj5oDP7DhiAv14Uw8mHN27jFz1BE
MqaefW481bjw5eJb0S3rXHFSAo+hz3ealMjb5/B9hX40CkGKx2AaC4G1ho+a6w49
SZSYt4HKM+qhEhnbkHicA4P4Fiw2+QNHuRd5utyXYAdjqm0Qkyvf5zfPAbpLAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUM3g5awsgOfONIEguVTEhEh+x940wHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhNjYzNzMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMTM5MzkzNjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H9zANBgkqhkiG9w0B
AQsFAAOCAQEAEl30+Yp1UUtCSXMN2hEREMyOlePgqr8UJ+NwxYzuDHmMZyBLE3Zu
vw9myc/R0KUpxtHyywZf6/y+fZry889QEN6sPOy9igx/ylODc3q5GSanI9tcKzUu
yZijG8b9qoIQU0uVmk8FOC4kt7fRmil0F3kUJOFqKyc4I0IGrzzzkUXFf38s6fWp
y0RuOqYlgLivu2HQrk2cuB6ipdPVNyej5CUJ13svI/xHXkqhNZfP7gl5E2ZlYaqN
c/xi2dtnPdpp+KKVfdHI8l9lXpWgc55O6nhEt03IU2lS+LagMbE/n1ZLgvnL1l1h
bO4/qJJmoCV3lVaMqeZhkjN6dmTJFsHEmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 22 02:22:56 2024 by rpki-client on console-ams.rpki-client.org