Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3a2f33362d3438203d3e20393435.roa
File:                     323630323a666332333a3a2f33362d3438203d3e20393435.roa (raw, json)
Hash identifier:          W63y77xUdUrVyYTqGtIxh1BJ6iaGHhWIXwD/coY6BDs=
Subject key identifier:   17:FF:31:DA:42:CB:FC:05:81:4F:64:56:FB:D9:DE:32:09:A1:D4:64
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       4F48C276AA7A17F8D1F11BAE46251C5F83E2E255
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3a2f33362d3438203d3e20393435.roa
Signing time:             Mon 07 Oct 2024 10:06:50 +0000
ROA not before:           Mon 07 Oct 2024 10:01:50 +0000
ROA not after:            Mon 06 Oct 2025 10:06:50 +0000
asID:                     945
IP address blocks:        2602:fc23::/36 maxlen: 48

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 07:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:48:c2:76:aa:7a:17:f8:d1:f1:1b:ae:46:25:1c:5f:83:e2:e2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Oct  7 10:01:50 2024 GMT
            Not After : Oct  6 10:06:50 2025 GMT
        Subject: CN=17FF31DA42CBFC05814F6456FBD9DE3209A1D464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:8e:ce:c8:5c:76:37:cc:e3:96:07:d7:79:
                    c9:47:71:2b:52:6b:58:af:14:10:1f:26:78:aa:b5:
                    3d:d3:f0:e4:59:1c:75:35:d1:56:09:8a:f5:a4:fc:
                    48:01:c4:f8:3d:60:b3:54:a2:6a:bb:fe:5c:58:eb:
                    e1:ea:41:3a:81:a6:77:82:f8:88:8f:f8:79:ff:c6:
                    a6:85:28:6e:23:ad:6a:6b:01:1b:f1:72:52:aa:87:
                    45:1c:bf:1c:c5:96:f5:7f:3a:4d:d3:a7:66:38:08:
                    f4:b5:20:64:b4:c4:86:89:9c:00:35:ab:62:75:11:
                    23:2e:dc:0b:85:24:0e:cc:6e:c8:76:5d:46:71:ea:
                    a6:be:c5:66:53:92:fb:f9:5a:7e:4f:e9:25:bf:ad:
                    f0:61:43:e1:b1:98:8f:14:35:c0:20:b8:d5:a8:2b:
                    1f:65:ae:4d:72:6a:ce:19:0a:e8:a2:23:74:fd:57:
                    03:a1:e3:fa:b7:b4:e7:21:a9:01:66:b5:b9:eb:09:
                    80:98:7a:b6:de:17:c5:ee:55:36:0a:6a:96:a6:92:
                    30:38:4f:d5:ff:02:5e:61:73:fc:38:1d:73:e4:a6:
                    62:28:1e:4a:47:86:99:a4:95:da:bf:1d:27:6a:a9:
                    98:c5:47:b3:a5:7d:27:10:ef:2d:77:b2:1a:ea:98:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:31:DA:42:CB:FC:05:81:4F:64:56:FB:D9:DE:32:09:A1:D4:64
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3a2f33362d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:de:64:75:b5:a1:68:dd:40:b9:62:fe:b3:ad:0b:52:b6:
         fa:03:32:9b:0c:3b:0d:b6:4d:3a:95:05:14:c5:c1:81:aa:5c:
         d8:83:b4:2a:43:0b:c3:28:36:0b:d4:86:96:44:a9:c8:28:bc:
         6c:9d:f7:b5:90:6a:e7:a4:1f:da:c0:cc:4a:3b:71:94:40:e4:
         0a:a2:1b:c3:a2:45:b4:a1:96:63:6e:2f:de:cf:b5:f9:90:92:
         5a:8d:3a:95:c7:d8:86:28:0c:75:79:6b:e5:c2:dd:70:b5:fa:
         63:5c:b5:5d:73:0c:47:8f:42:87:e2:a5:17:1e:3d:cd:fa:e2:
         c4:3d:f5:02:3f:a3:e1:23:7e:84:4a:2b:36:cd:b4:3e:9a:62:
         fc:10:53:3b:44:d8:fd:2f:7e:7c:7e:f3:35:b1:98:9a:56:03:
         f3:c4:c7:e4:a6:11:46:62:79:51:4f:5e:f3:34:c7:fe:7c:67:
         1f:85:82:d9:8d:87:ea:ec:bc:14:21:08:75:1c:81:c3:bc:f6:
         1f:a7:a7:a0:8d:22:13:08:71:71:bf:a0:24:b2:7e:e9:9f:7b:
         38:40:f1:d7:7b:c8:32:b8:91:7b:ec:34:3a:31:f4:c2:82:47:
         d4:a1:5e:14:2d:c3:67:d7:f2:9a:5d:16:a6:96:4b:c0:6e:26:
         bb:66:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 09:08:49 2024 by rpki-client on console-fra.rpki-client.org