Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa
File:                     326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa (raw, json)
Hash identifier:          SJ0cnoafiRlvmx40n6EawAS1bjfs5gHKdgo1yU2mcXk=
Subject key identifier:   79:9A:9F:BD:88:98:33:E9:B9:1A:62:0A:03:DC:D9:37:70:8F:A1:47
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       5E17BE83C103EF4F4EB1B114A4241BABA38C97E1
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa
Signing time:             Thu 20 Jun 2024 05:23:44 +0000
ROA not before:           Thu 20 Jun 2024 05:18:44 +0000
ROA not after:            Thu 19 Jun 2025 05:23:44 +0000
asID:                     202151
IP address blocks:        2a13:c007:8015::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:17:be:83:c1:03:ef:4f:4e:b1:b1:14:a4:24:1b:ab:a3:8c:97:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:44 2024 GMT
            Not After : Jun 19 05:23:44 2025 GMT
        Subject: CN=799A9FBD889833E9B91A620A03DCD937708FA147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:6c:4a:fe:aa:b4:10:73:a7:af:f0:cd:1f:
                    40:a8:12:50:10:38:53:fc:b2:c8:d9:c8:f3:1b:45:
                    23:08:b2:66:2e:7c:29:57:61:9c:e4:c0:9e:13:94:
                    bb:fc:31:9d:eb:29:00:c4:ca:32:3c:69:88:64:2d:
                    80:b0:c3:e5:4b:cd:28:9a:ec:f0:11:f7:fb:b9:c6:
                    4a:7e:c0:52:f0:23:7f:bc:33:25:3b:ab:8f:6f:ef:
                    ac:c0:d6:54:e8:8b:62:41:b0:cb:81:c2:fe:f9:bf:
                    52:71:52:63:4b:3e:c0:ee:99:ef:2a:bc:d0:e4:32:
                    bf:9c:ab:f8:85:39:eb:f6:21:ca:a1:4c:a1:70:d9:
                    8f:cd:8f:87:71:c8:60:ae:96:e4:ec:22:86:78:f4:
                    36:9e:ae:34:30:ae:26:d9:23:ca:66:c6:a0:ef:6a:
                    a9:7a:60:20:0e:f6:d6:a2:cb:29:5b:90:0a:9e:a8:
                    fd:c0:e2:82:62:77:25:bd:60:0d:23:56:56:f7:5a:
                    a3:fc:2e:41:e2:ed:89:81:97:f0:b8:e6:6a:af:e3:
                    f9:17:22:71:51:ef:bc:94:91:b0:e2:fe:82:42:f3:
                    9b:1a:4f:65:a8:0a:01:fa:58:67:ca:64:90:ee:39:
                    84:0c:f3:d1:8e:9c:35:6d:93:3a:a6:43:1f:1e:1c:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9A:9F:BD:88:98:33:E9:B9:1A:62:0A:03:DC:D9:37:70:8F:A1:47
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031353a3a2f34382d3438203d3e20323032313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8015::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:e5:53:9f:5c:dd:93:5b:95:32:62:6d:ed:4d:8c:88:32:38:
         05:ad:d7:4e:2a:38:07:5e:f2:c7:6b:fd:11:5b:3c:08:31:68:
         ed:56:25:ae:57:2a:c1:ef:b5:05:e2:89:3b:5f:66:a4:07:1c:
         ed:d7:e4:b5:cd:96:11:f0:9d:4e:de:5b:b0:69:74:2c:77:9b:
         ab:a2:a2:54:4b:23:58:6c:7a:4a:9a:9c:63:81:7b:01:91:c6:
         e2:6c:3b:4a:28:f8:f5:ad:d7:b7:1a:47:58:e1:6f:50:12:38:
         7c:28:01:ab:be:d4:6a:5f:69:36:22:eb:c6:f4:1c:fd:f3:ec:
         19:dc:6e:06:a9:a7:8b:bb:49:ea:f8:84:f8:40:09:fb:84:da:
         2a:54:a6:74:fd:93:e2:12:49:6f:b9:f4:7e:2a:b3:e5:46:b3:
         9f:ed:5c:f7:02:e5:b2:b5:e1:f0:fe:32:95:ff:56:b9:58:6f:
         f0:2b:9b:f6:8d:03:26:9c:05:d3:cf:22:db:27:c5:47:9c:42:
         e9:d2:13:07:29:6d:b3:c7:29:c9:ca:5d:7c:75:04:a6:1f:1d:
         88:44:cc:51:2e:cc:fe:f0:de:4d:89:ec:dc:e3:e8:39:34:35:
         df:46:dd:f1:17:67:49:4e:9e:fb:0f:b0:f3:91:15:6f:3e:4f:
         98:f9:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----