Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa
File:                     323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa (raw, json)
Hash identifier:          J/cBkRfGPbDfpIHLFpJVbGajaIuRqcd5qkv4kpLrf+Y=
Subject key identifier:   43:17:B5:74:F4:91:E7:F3:AC:83:16:62:A9:7F:BA:D0:4F:1B:93:D4
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       4299BCC41FEDC23343C70084A3314063634A39B0
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa
Signing time:             Thu 20 Jun 2024 05:23:03 +0000
ROA not before:           Thu 20 Jun 2024 05:18:03 +0000
ROA not after:            Thu 19 Jun 2025 05:23:03 +0000
asID:                     57401
IP address blocks:        2602:fc23:110::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 01:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:99:bc:c4:1f:ed:c2:33:43:c7:00:84:a3:31:40:63:63:4a:39:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Jun 20 05:18:03 2024 GMT
            Not After : Jun 19 05:23:03 2025 GMT
        Subject: CN=4317B574F491E7F3AC831662A97FBAD04F1B93D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:8c:72:6b:0f:fa:9e:bf:d6:88:86:6c:87:
                    20:7e:e0:f6:2d:23:0a:c5:6c:4e:42:af:65:fc:f6:
                    9a:7c:01:b1:e8:a7:bc:41:0f:b4:40:59:5c:01:c3:
                    43:e7:84:e4:fb:0a:3a:83:1c:c4:2b:b5:3e:cd:aa:
                    d4:d7:03:0e:e7:73:11:23:06:c8:63:9a:0e:67:95:
                    e2:57:6b:54:eb:e3:4e:ad:84:a0:f9:82:b9:ca:d5:
                    b1:46:c9:8f:18:64:2f:63:c0:f8:d6:d9:34:66:f6:
                    79:07:77:33:ef:d2:0f:f6:c2:9c:de:a3:46:57:cf:
                    65:f9:83:ca:2e:aa:ec:2a:f6:e6:ae:a2:cb:18:e6:
                    7e:74:07:37:1a:31:8e:0a:c0:b2:19:b6:e4:a2:25:
                    23:08:ff:e4:43:57:d9:0c:cf:9b:d6:5d:d0:da:e8:
                    f5:3b:4a:0c:45:41:1c:cd:0d:83:3a:98:c1:de:39:
                    d0:10:bc:22:e5:df:a6:a9:0c:78:86:30:ed:bd:55:
                    24:32:3b:37:4e:0e:bb:2a:dd:25:66:bf:c6:42:71:
                    2f:51:ef:04:04:9c:ac:f5:04:af:10:92:8c:cf:3b:
                    4b:3c:49:14:a1:a5:d5:b8:a7:2e:21:3c:14:eb:23:
                    8c:33:9c:ac:83:0b:c4:1b:ce:3f:e9:a4:30:ec:44:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:17:B5:74:F4:91:E7:F3:AC:83:16:62:A9:7F:BA:D0:4F:1B:93:D4
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:4c:a7:05:92:36:dc:f3:44:91:eb:8d:9b:ae:25:88:60:a2:
         8f:22:8b:7a:4d:9c:60:87:8a:07:ec:4f:39:d6:73:08:41:85:
         f8:62:a7:f2:6f:c2:7f:b8:34:1a:b3:60:fc:b4:3c:16:09:52:
         94:47:1a:fa:a3:96:20:6d:f9:10:07:9d:d0:8d:56:64:05:7a:
         43:68:8a:d7:dc:67:27:d7:89:0d:48:bf:46:0a:53:0c:92:08:
         99:c6:18:55:1f:eb:bb:f7:dc:42:30:ef:c8:fc:bc:d4:49:20:
         04:ac:5c:20:90:a5:03:6d:20:da:40:37:24:ab:3a:f8:18:f3:
         b0:c9:38:70:1a:f3:24:79:fe:25:08:b1:cf:44:41:a0:e1:7b:
         5d:6b:91:df:c1:33:bd:a9:50:f5:4a:7a:f5:26:d7:1d:67:e2:
         6f:70:4e:66:97:c6:0c:34:cc:e2:f7:7c:59:99:15:2c:2b:5c:
         51:db:57:f9:9c:a8:cc:a0:2e:ad:b6:c2:7c:76:c9:19:d6:b5:
         31:e1:65:d4:f4:65:90:f4:2b:86:6f:10:e5:d5:df:45:9f:3f:
         ca:73:31:4b:22:69:20:fd:4c:e5:73:c9:5f:e5:42:cd:84:64:
         0c:02:cb:19:b2:d1:d2:60:db:32:fe:9b:89:f4:22:c0:f8:e6:
         cb:21:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----