Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa
File:                     323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa (raw, json)
Hash identifier:          X4T5HX5xqc2l0KzEA1+CJw1Fm4tSiYN7/MbjQy2eIv4=
Subject key identifier:   55:68:C9:28:57:2F:DA:03:E9:B9:22:1D:75:1F:BC:BA:B5:50:96:EE
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       188009B939C74085925F15703BA3A592476AAF56
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa
Signing time:             Thu 20 Jun 2024 05:23:04 +0000
ROA not before:           Thu 20 Jun 2024 05:18:04 +0000
ROA not after:            Thu 19 Jun 2025 05:23:04 +0000
asID:                     205432
IP address blocks:        2602:fc23:200::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:80:09:b9:39:c7:40:85:92:5f:15:70:3b:a3:a5:92:47:6a:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Jun 20 05:18:04 2024 GMT
            Not After : Jun 19 05:23:04 2025 GMT
        Subject: CN=5568C928572FDA03E9B9221D751FBCBAB55096EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:44:67:b8:70:a1:a1:66:12:6e:45:ae:51:
                    92:4f:06:1e:d8:e9:a0:12:98:2a:d9:d6:ee:0a:ae:
                    99:c5:f3:93:a8:83:b1:c2:6f:87:8c:c9:6c:00:34:
                    40:fc:ab:cc:a0:4c:85:ac:a3:b7:e5:c4:fa:25:73:
                    38:73:6b:5a:b5:86:a1:90:0a:58:87:6b:5d:56:2f:
                    8d:d5:a0:50:9d:43:f5:a3:6a:d2:13:66:83:6c:ed:
                    76:e4:28:cc:08:dc:10:01:f9:ea:b5:39:99:b8:b3:
                    ab:89:16:77:03:59:30:4a:87:2b:f0:b1:9c:85:d9:
                    0b:0f:37:2c:61:91:f7:1e:fa:6c:14:6c:ae:c3:6f:
                    37:b4:7d:26:bb:5c:71:9a:9a:04:aa:a7:d0:57:d2:
                    76:68:2e:c1:f8:66:01:ce:27:6b:41:b5:dd:bf:a6:
                    bb:07:90:a1:cb:7e:03:3b:17:6b:f9:4a:d7:3e:e3:
                    78:ca:75:c7:68:19:e4:af:8f:f1:12:91:fb:b7:a6:
                    d7:d2:73:1d:89:c9:c3:9c:a7:45:b7:3f:d1:b1:cf:
                    2e:62:4f:37:29:66:1f:36:89:75:7b:3a:48:f8:97:
                    16:ff:29:43:2d:d1:20:93:3a:98:f3:62:7f:95:c0:
                    26:c7:a5:e6:7c:05:84:5f:90:b8:27:38:3d:c2:d9:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:68:C9:28:57:2F:DA:03:E9:B9:22:1D:75:1F:BC:BA:B5:50:96:EE
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:23:0c:42:c9:a7:f1:8f:51:14:e0:fc:dd:b1:02:c9:17:30:
         32:01:2e:98:68:0e:5a:e5:7d:95:ac:bd:b7:43:0e:33:da:f9:
         02:8b:23:36:47:fd:de:14:01:00:85:0d:ec:23:8e:59:1b:94:
         62:d1:ab:0b:39:e1:29:ea:88:2a:54:f4:af:d6:ba:c0:ca:28:
         3a:48:61:9c:31:04:9b:56:bd:da:06:bf:1a:a7:16:c7:dd:b8:
         20:0f:9f:8c:22:9f:06:32:09:00:8c:f1:41:34:bd:0f:5c:63:
         27:e7:52:e5:e9:ae:d1:6c:d9:82:f7:62:78:20:e9:80:df:50:
         7d:4f:c2:40:b2:cb:24:fa:9c:ec:49:42:84:da:44:3a:d3:ad:
         7f:96:64:40:e4:48:b8:19:32:bc:c7:49:a8:6c:c6:a1:23:78:
         54:68:ed:41:41:08:ce:7f:5b:2d:06:be:23:96:93:8b:98:d7:
         d8:4c:55:5e:58:ab:11:14:c4:d1:40:8f:50:7b:98:c6:fd:0a:
         63:c9:b2:7b:39:91:91:44:30:18:53:69:93:f8:79:f7:74:b2:
         5c:44:ce:63:6b:1b:8d:5a:fd:83:4d:0e:e2:80:24:81:49:50:
         2e:75:fb:20:c8:7d:cd:99:98:86:87:13:ff:ae:e1:dd:07:78:
         e1:15:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:22:56 2024 by rpki-client on console-ams.rpki-client.org