Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e20313937353337.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          Lp4TSUzXRHdRhEW5MnP2rgNUY2BFNcQFWtZymKg4n74=
Subject key identifier:   25:C7:B3:D8:23:7D:0C:AF:95:F1:60:81:78:F6:8E:2D:81:E4:A4:27
Certificate issuer:       /CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Certificate serial:       21042EDE162F75B3D87A680127262192C00217C7
Authority key identifier: 07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
Authority info access:    rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e20313937353337.roa
Signing time:             Thu 20 Jun 2024 05:23:01 +0000
ROA not before:           Thu 20 Jun 2024 05:18:01 +0000
ROA not after:            Thu 19 Jun 2025 05:23:01 +0000
asID:                     197537
IP address blocks:        216.146.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 10:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:04:2e:de:16:2f:75:b3:d8:7a:68:01:27:26:21:92:c0:02:17:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
        Validity
            Not Before: Jun 20 05:18:01 2024 GMT
            Not After : Jun 19 05:23:01 2025 GMT
        Subject: CN=25C7B3D8237D0CAF95F1608178F68E2D81E4A427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:35:46:ee:77:98:7c:34:d9:b1:cf:d2:b9:
                    da:d9:8f:b9:52:aa:19:25:b0:59:7a:88:0c:f6:62:
                    de:34:5c:8a:c9:e6:d3:eb:f3:c3:9e:89:ac:21:47:
                    9c:69:55:a0:d7:ff:b9:7f:0e:2b:fc:57:04:e9:be:
                    9b:e1:c2:d1:68:ed:03:a2:88:7f:f0:d8:98:c6:ff:
                    59:c6:9c:98:4c:aa:e3:b5:b4:05:c6:f5:1c:59:31:
                    28:7e:ce:aa:58:0c:17:96:02:e8:b6:30:ac:8e:c5:
                    7c:78:78:26:81:b3:19:81:dc:ea:80:18:e9:28:65:
                    a8:97:9f:9e:f7:3d:6b:22:54:5e:92:83:81:bd:f2:
                    a5:91:72:f5:26:b7:4c:cf:36:27:91:2d:30:4f:62:
                    66:24:f4:40:e1:cd:b3:2f:8e:2f:11:f2:66:b9:a0:
                    04:05:30:d2:ba:23:6f:c4:b1:28:71:d3:e9:9b:3a:
                    95:69:9e:5e:7b:fd:b4:fe:b2:d0:51:69:16:be:6f:
                    f7:4c:b9:3e:e7:7e:10:1f:f7:fd:59:40:62:b0:34:
                    82:18:c5:34:ab:fe:3f:2e:b1:f4:48:7d:d1:81:ca:
                    4d:58:75:58:1c:e8:e3:e9:aa:d0:5c:26:68:e0:4a:
                    90:c6:aa:63:cb:5b:e7:e3:e9:7f:dc:af:45:a1:e7:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C7:B3:D8:23:7D:0C:AF:95:F1:60:81:78:F6:8E:2D:81:E4:A4:27
            X509v3 Authority Key Identifier:
                keyid:07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:92:72:be:31:47:af:a7:1a:32:ef:5c:ab:58:87:07:e7:
         b8:4e:5a:ef:f7:63:16:9b:a3:fd:3c:80:21:0c:6c:f1:a0:96:
         ce:88:5a:90:e6:91:7b:0d:e5:b4:79:38:72:d2:4f:67:ba:ce:
         65:ab:a0:eb:a1:94:de:68:55:d7:d4:bc:ea:1d:5b:4f:87:9a:
         6f:38:0a:cf:30:0f:b5:d3:20:53:20:3d:f9:b9:16:53:89:74:
         26:6b:ed:2f:d3:0b:d9:be:d8:5e:a2:4d:11:37:a9:fc:cc:54:
         01:3d:a9:37:70:f8:e5:a0:7a:3f:8f:36:6d:b3:f6:d0:07:1f:
         8d:0e:73:69:c3:80:24:21:30:d4:4a:be:89:5d:aa:7d:19:1c:
         4c:6d:8a:49:a3:4a:20:36:17:88:1f:a3:89:e8:00:23:03:02:
         cc:db:09:f1:33:10:10:e4:02:79:ff:df:6d:24:e5:75:9a:40:
         2c:ff:de:b8:ce:c8:8e:da:ba:20:03:6e:11:75:4c:bb:79:45:
         56:d5:a6:d5:7e:be:a4:e4:e2:c5:3a:ee:d3:64:c6:cb:39:b2:
         eb:d2:55:ad:bc:48:ff:5d:e5:14:b5:5c:82:d2:c3:ea:80:ac:
         a4:b1:16:c3:24:8a:cb:83:92:0f:97:8f:3b:bc:72:d3:f4:9a:
         5f:05:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 13:24:06 2024 by rpki-client on console-ams.rpki-client.org