Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa
File:                     326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa (raw, json)
Hash identifier:          4XrX2UMTrToFoKosq6a79ywrCFaJi57enB/Qpjst36w=
Subject key identifier:   9F:B5:F1:1B:B8:33:DC:70:3C:FA:76:AD:AA:11:CB:0A:13:6C:B0:EA
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       16E1242152EB46BDABAC9E656E23D138ABBA4C35
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa
Signing time:             Thu 20 Jun 2024 05:23:47 +0000
ROA not before:           Thu 20 Jun 2024 05:18:47 +0000
ROA not after:            Thu 19 Jun 2025 05:23:47 +0000
asID:                     209658
IP address blocks:        2a13:c007:8016::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e1:24:21:52:eb:46:bd:ab:ac:9e:65:6e:23:d1:38:ab:ba:4c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:47 2024 GMT
            Not After : Jun 19 05:23:47 2025 GMT
        Subject: CN=9FB5F11BB833DC703CFA76ADAA11CB0A136CB0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f1:d8:d1:c0:16:21:2b:a4:f9:ea:6d:8a:4d:
                    aa:34:6b:40:9b:a4:86:48:6a:53:15:d4:3a:5c:ee:
                    09:af:ff:97:3e:f3:0e:2b:bf:f9:d7:82:5c:2d:8a:
                    81:4c:6b:f4:8f:82:b8:db:7a:0e:f9:22:42:10:84:
                    e9:a6:b8:13:27:66:f5:c4:69:6d:16:60:a6:4b:98:
                    92:9d:d1:ed:b8:0c:34:31:77:1d:c5:01:5b:49:c9:
                    03:67:f8:d5:c7:75:d0:7e:51:3f:d6:dc:90:55:23:
                    ae:3c:27:bc:a0:dc:41:04:81:e3:d8:7c:23:0b:82:
                    b5:39:e7:0b:5a:0c:74:16:6d:dc:e5:de:44:ac:62:
                    b1:64:7c:5f:1e:69:9f:f7:a8:09:56:7a:e8:ce:e1:
                    95:21:ec:c8:10:b8:06:44:47:32:0a:92:c9:84:88:
                    8a:6e:57:76:38:ca:78:b1:7f:9a:0a:d8:bc:89:62:
                    7a:92:cf:a2:7a:e1:6a:7f:1f:e0:33:c5:b0:99:7d:
                    6c:2a:46:f1:25:9f:f6:77:23:e9:14:3b:a3:ad:84:
                    f4:2b:e4:3e:da:58:d0:4c:6a:9f:69:3c:0c:32:d6:
                    25:18:ad:22:ab:6f:c8:32:88:df:b2:ef:31:a8:e7:
                    85:de:cf:4d:55:82:31:93:bd:3f:a9:8c:cd:60:85:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B5:F1:1B:B8:33:DC:70:3C:FA:76:AD:AA:11:CB:0A:13:6C:B0:EA
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031363a3a2f34382d3438203d3e20323039363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8016::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:67:e4:98:05:9a:4a:cf:5b:0d:fa:15:28:b6:ee:e3:6f:cf:
         ea:92:e2:cb:91:73:ce:bc:98:59:8d:fc:be:ae:52:43:29:1c:
         33:a4:41:59:ac:19:13:55:b7:47:f1:8c:c0:56:9f:bf:70:bc:
         bc:63:13:e2:d5:5c:ac:8b:ea:0d:5c:fd:fd:5e:21:f2:0a:f5:
         25:b5:66:a5:2f:e2:a4:29:27:ff:d8:e1:d4:22:d3:3c:0c:13:
         69:93:ef:cd:28:99:b0:e2:a5:03:4f:94:bd:5f:23:c0:5e:5b:
         87:14:ab:8c:3d:0b:9f:e3:8a:c7:d3:8e:ad:3f:db:4d:3e:0b:
         c6:ea:5a:56:35:00:11:ab:82:f0:5c:29:95:a6:26:7c:d7:ff:
         7a:79:6d:28:25:46:ad:4d:00:8e:51:2e:08:f3:06:97:93:55:
         cf:c1:af:9e:ff:e6:6c:55:a0:d8:74:1f:ef:0a:ed:08:42:28:
         52:aa:1e:c9:cc:f5:24:4d:d0:75:b7:2a:d0:d4:97:03:cf:f2:
         91:c0:43:0e:11:12:e3:ce:3d:8b:d6:5c:5a:e5:c5:7c:ee:ac:
         36:07:47:f6:fb:ec:2a:3d:20:57:39:df:ca:de:3e:22:c7:b2:
         3a:1d:2a:ff:74:08:a1:7a:42:3b:fc:7c:ef:1a:cc:09:b9:11:
         8d:e8:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----