Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/323630323a666266363a3a2f33322d3438203d3e20393435.roa
File:                     323630323a666266363a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          0974vOXCzRNX/KmInBL2+jK9Ba96DDMbnMuZ5AYggA8=
Subject key identifier:   7C:CE:68:98:A1:56:90:B3:61:E7:E2:CB:CE:44:F5:D3:B7:80:AA:CC
Certificate issuer:       /CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Certificate serial:       031149D2D926381F0F7C83C0E5BDD3EAC0539CDB
Authority key identifier: 07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
Authority info access:    rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/323630323a666266363a3a2f33322d3438203d3e20393435.roa
Signing time:             Mon 07 Oct 2024 10:07:05 +0000
ROA not before:           Mon 07 Oct 2024 10:02:05 +0000
ROA not after:            Mon 06 Oct 2025 10:07:05 +0000
asID:                     945
IP address blocks:        2602:fbf6::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 07:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:11:49:d2:d9:26:38:1f:0f:7c:83:c0:e5:bd:d3:ea:c0:53:9c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
        Validity
            Not Before: Oct  7 10:02:05 2024 GMT
            Not After : Oct  6 10:07:05 2025 GMT
        Subject: CN=7CCE6898A15690B361E7E2CBCE44F5D3B780AACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:1e:4a:f3:5a:18:db:4e:d0:fe:f3:e0:25:
                    d3:b7:10:25:1c:54:33:94:df:95:ee:b7:8c:87:79:
                    3b:6d:1a:56:6a:e0:06:a9:f4:2e:c8:cf:fb:cc:a6:
                    89:99:9f:cd:ef:aa:f8:ab:71:18:de:6a:ce:4c:e0:
                    c7:d1:46:3b:05:30:19:63:56:9e:79:f9:9d:12:53:
                    75:6a:d5:f1:d3:3f:ab:5e:03:bf:df:43:db:7e:00:
                    8b:70:85:93:40:cd:8a:d7:54:8d:de:04:ed:db:88:
                    13:20:b4:7d:cd:bf:da:e1:97:76:15:d3:ac:97:3d:
                    9b:d5:2b:1c:c2:37:b7:1e:9c:0d:47:15:d2:54:96:
                    59:f1:ae:50:e7:8d:ba:db:75:7a:00:06:65:f8:56:
                    30:73:e3:c3:c0:00:c3:5d:e2:13:82:01:99:fb:59:
                    18:97:90:f6:30:52:d0:07:b0:34:2d:42:b9:0d:ef:
                    11:79:c1:e4:82:cb:e7:d1:05:82:06:cf:b0:cd:ba:
                    4b:94:e2:d2:d9:b9:1d:b7:c0:be:c3:0c:97:50:51:
                    1e:6a:a1:d3:cb:19:1f:03:9d:14:29:ba:d4:d3:81:
                    57:48:9f:2c:26:29:83:72:c2:12:1b:61:f3:4a:80:
                    b6:76:51:63:7a:d9:ab:64:32:44:ce:7b:a1:1a:c6:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CE:68:98:A1:56:90:B3:61:E7:E2:CB:CE:44:F5:D3:B7:80:AA:CC
            X509v3 Authority Key Identifier:
                keyid:07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/323630323a666266363a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:0d:70:c5:ed:28:4e:4a:3a:bf:3a:ff:26:37:1e:33:7e:96:
         db:9d:86:74:57:8e:48:ea:49:1e:12:17:4a:4e:e8:6d:cf:06:
         cd:95:71:44:1d:17:35:64:34:c2:1b:4a:c8:88:91:a8:c7:f6:
         19:27:e4:66:74:b4:0b:81:fb:1a:73:c5:05:0c:65:af:ff:c3:
         ff:a6:82:20:1f:22:e0:aa:a1:29:07:16:d9:b1:10:1f:e5:6e:
         e0:fd:55:0e:ee:35:44:ea:c3:5a:bc:f6:ed:2f:1a:f7:94:71:
         99:8c:d2:fb:ef:a8:46:ad:13:64:a0:05:41:21:67:76:e5:0d:
         fc:ac:56:77:c8:46:cd:ef:12:e2:6f:8a:4b:c0:bb:75:c5:32:
         81:0a:2e:cd:f5:d8:95:fd:90:4e:4f:24:28:5d:8d:92:ba:0d:
         cd:c7:f6:35:af:40:9a:2c:2b:78:d7:9d:1f:8f:90:53:c6:2c:
         fa:f2:72:a5:88:4f:bb:12:a8:2b:f3:95:dd:5d:e5:77:9d:26:
         d0:ba:b2:cd:a7:53:ee:fe:a3:90:70:79:62:53:33:59:8b:41:
         d2:e9:10:a2:7a:e0:7a:29:c4:42:9a:3e:6e:65:71:34:48:c6:
         c3:5a:18:56:cb:45:95:13:76:cf:67:cc:e6:ff:dd:94:fe:ff:
         a4:59:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 09:41:01 2024 by rpki-client on console-ams.rpki-client.org