Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e20393435.roa
File:                     323630323a3233343a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          Liq1WcjDRYV0pmkDz2dHjFzMyD0gUxPkdUmgVoOvFmc=
Subject key identifier:   72:4F:02:B8:B4:20:71:C0:ED:F4:82:5A:1E:5E:B5:CC:AB:12:2E:4C
Certificate issuer:       /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial:       3530401B10772F520C997C7A399F8DB22C5E0803
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access:    rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e20393435.roa
Signing time:             Tue 10 Sep 2024 20:25:57 +0000
ROA not before:           Tue 10 Sep 2024 20:20:57 +0000
ROA not after:            Tue 09 Sep 2025 20:25:57 +0000
asID:                     945
IP address blocks:        2602:234::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 19:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:40:1b:10:77:2f:52:0c:99:7c:7a:39:9f:8d:b2:2c:5e:08:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
        Validity
            Not Before: Sep 10 20:20:57 2024 GMT
            Not After : Sep  9 20:25:57 2025 GMT
        Subject: CN=724F02B8B42071C0EDF4825A1E5EB5CCAB122E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:26:1a:8d:15:64:fb:1f:e6:9b:cc:49:06:
                    4f:df:fc:72:df:f8:a2:48:72:c6:39:1f:f2:58:fa:
                    68:ff:b3:cc:ef:7d:46:a8:1d:3d:3b:1a:7c:23:be:
                    80:ec:1c:eb:7f:0a:5f:43:ca:00:4d:12:0d:5a:01:
                    d2:82:02:40:d5:17:51:59:08:31:4d:2d:2e:66:04:
                    a7:1a:7e:c9:f2:17:36:47:5c:24:eb:15:15:37:aa:
                    dd:f3:8d:d3:fa:c2:44:4d:41:ea:d1:4e:5a:0b:82:
                    8d:9a:9b:76:5f:79:11:50:a2:71:c3:b4:5c:18:6b:
                    a5:a2:1f:a1:03:4e:d9:c7:c7:61:64:02:14:8a:9e:
                    2d:9a:30:31:f7:74:9a:89:e0:44:01:b7:3c:4f:2c:
                    0b:b6:d0:54:a1:47:67:82:01:e4:4e:54:61:bc:7d:
                    75:e6:7f:97:90:e1:fd:1f:73:39:0c:eb:bc:b2:ba:
                    ae:df:6b:4f:79:27:b9:b5:62:10:5f:64:95:a2:12:
                    c3:d4:3b:f1:54:bf:78:66:43:7f:f1:7e:89:3a:13:
                    4c:8f:04:7b:71:2d:12:73:ee:d1:68:37:5c:42:e0:
                    79:50:49:7a:08:7d:56:76:7a:59:bd:8f:f3:3a:23:
                    9f:61:8a:b2:f2:64:5a:31:70:16:d2:ef:2d:6c:75:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:02:B8:B4:20:71:C0:ED:F4:82:5A:1E:5E:B5:CC:AB:12:2E:4C
            X509v3 Authority Key Identifier:
                keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:53:23:97:72:89:b9:e2:2b:7e:2d:5d:dc:25:37:b9:68:6f:
         f8:83:7f:f4:bb:5f:cb:8d:bd:33:a9:a1:db:a4:a5:b5:e8:e1:
         78:c1:97:cb:cd:6c:dd:5b:89:0e:e6:30:63:d1:0f:0a:b3:e9:
         ec:54:e8:f5:bf:8a:ac:75:fb:51:a1:41:3a:ef:36:58:d6:62:
         a4:ef:06:15:ea:e4:bf:b5:93:4a:fd:10:28:d3:66:4f:88:e8:
         80:0c:a0:f4:1c:22:f2:e1:1d:51:f6:80:e2:6d:8d:0b:b5:4f:
         02:64:e6:83:79:f6:29:bf:f5:23:e3:4a:bf:7f:40:21:a6:65:
         d6:68:bc:7a:e6:72:e0:79:49:67:52:40:a5:d9:9d:e0:a9:13:
         88:69:67:75:e1:fc:78:0d:83:95:88:1e:93:21:b6:1d:c3:b5:
         40:99:e1:64:08:17:85:93:7b:d4:93:ba:d2:06:ae:9a:96:8b:
         5e:82:33:e7:20:47:c4:0e:61:21:79:77:c8:c7:6f:1d:0f:e6:
         7e:2d:60:c1:5f:11:e9:71:19:fb:9a:9d:f6:81:cc:4f:a0:31:
         4c:b3:3d:7a:d8:4e:af:db:18:1d:6d:f8:c0:7a:33:6f:c5:dd:
         07:4b:f5:4f:ba:99:3e:67:55:50:f9:27:9e:f7:3d:8f:43:50:
         73:4c:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:58:06 2024 by rpki-client on console-fra.rpki-client.org