Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/3138352e3135352e37352e302f32342d3234203d3e20393435.roa
File:                     3138352e3135352e37352e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          VHe77t5pLvWovmYEDzZd1mY/P7wGt8QFWS1ykGtN26Y=
Subject key identifier:   1C:26:09:98:6A:E3:49:6E:CB:EA:8F:A6:F7:53:7E:11:A8:54:F5:7D
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       274093F061D9D1805E455B173A5A1D841C8E92F0
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/3138352e3135352e37352e302f32342d3234203d3e20393435.roa
Signing time:             Tue 10 Sep 2024 19:57:05 +0000
ROA not before:           Tue 10 Sep 2024 19:52:05 +0000
ROA not after:            Tue 09 Sep 2025 19:57:05 +0000
asID:                     945
IP address blocks:        185.155.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 02:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:40:93:f0:61:d9:d1:80:5e:45:5b:17:3a:5a:1d:84:1c:8e:92:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Sep 10 19:52:05 2024 GMT
            Not After : Sep  9 19:57:05 2025 GMT
        Subject: CN=1C2609986AE3496ECBEA8FA6F7537E11A854F57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:9b:a6:fc:c7:3f:04:5f:d3:9b:0b:7f:e5:
                    ec:64:f1:af:f8:3f:f1:b4:06:ed:fe:0c:e6:a7:06:
                    86:08:c1:fd:80:41:f7:ae:18:45:72:87:ab:7d:29:
                    30:cf:2f:71:c9:c0:da:e0:67:2e:d4:60:6a:0b:ab:
                    fe:e6:7b:88:69:f7:89:84:82:51:7c:fe:01:13:51:
                    6e:09:30:de:e7:da:79:e8:c5:0a:e3:2e:e8:d3:93:
                    dc:21:e6:2a:7f:6e:0d:d1:eb:5b:11:40:e9:2d:cd:
                    46:f7:15:22:6e:1b:11:43:95:f9:d0:d4:a7:40:b5:
                    3b:72:13:8e:c8:81:e8:1a:ca:b8:79:73:dc:03:d6:
                    06:73:b5:53:72:60:cc:e8:86:f4:fb:1b:fe:e2:cd:
                    7e:51:6d:37:fa:3d:ab:e8:7b:bb:43:41:47:c1:c5:
                    2f:cf:2c:ed:2d:6d:45:03:60:55:c1:fa:bf:bb:b4:
                    3e:0b:a9:cf:22:25:9d:ef:2e:41:eb:2e:0f:97:8f:
                    22:75:d2:01:5f:57:db:10:44:9b:ef:07:92:11:41:
                    8c:32:88:de:0c:07:1f:a4:27:ad:62:7c:90:0e:e4:
                    8d:33:62:c6:43:4c:55:ad:04:cd:e3:d9:f1:66:f4:
                    cb:fc:8c:7a:42:97:0a:90:fa:19:8d:30:72:db:74:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:26:09:98:6A:E3:49:6E:CB:EA:8F:A6:F7:53:7E:11:A8:54:F5:7D
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/3138352e3135352e37352e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:40:ac:10:e9:09:c1:17:31:92:e3:f1:3c:7e:3e:7c:fd:
         f4:d6:b4:74:37:16:9d:4a:7a:56:ab:3c:e8:66:c3:a9:eb:b0:
         3d:e8:df:c2:0a:10:a3:ac:f7:2d:95:ba:31:ca:f4:f7:14:b5:
         dc:03:66:e2:bc:b2:32:5b:77:95:a1:44:e8:0a:18:fa:9f:de:
         3f:64:c2:15:13:ba:e6:dd:d5:7d:85:54:70:76:89:03:ff:e2:
         96:d0:b0:13:88:b7:8b:f4:c0:25:c1:7e:b7:f5:fc:3a:5c:4a:
         f7:9e:df:5d:7a:78:f9:66:93:97:82:41:4d:68:5d:4f:e7:22:
         72:b5:5f:76:a0:2a:4a:96:fd:fd:92:31:05:7a:7c:40:ba:b3:
         38:5f:2f:05:62:e5:85:e6:99:30:0e:74:d5:06:f3:cc:f5:8c:
         f5:8c:dc:d9:51:05:7d:c0:54:fc:79:49:68:86:ee:77:db:3c:
         47:7f:54:6c:70:81:20:eb:4e:88:52:bd:60:27:57:d4:69:7b:
         82:2a:7d:3e:c8:b7:c8:41:a8:f6:8b:b9:83:7b:46:6f:7b:98:
         21:95:52:07:26:93:fe:aa:f2:0a:ef:fd:71:a6:21:c4:d9:49:
         71:af:c9:9e:4f:31:f9:63:f1:2d:fb:18:19:f7:8d:83:8e:9a:
         42:61:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 06:11:31 2024 by rpki-client on console-fra.rpki-client.org