Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa
File:                     326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa (raw, json)
Hash identifier:          1Oj6/Re+R1LnTpmteIv/1GISo8A7NVl5R0WYHfgb4Zg=
Subject key identifier:   7B:6D:ED:ED:C3:D1:06:16:A0:62:60:B5:B4:76:5F:27:C6:98:E4:31
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       4EAAA09395C4A954B9DF33C0818691EB420973A6
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa
Signing time:             Thu 20 Jun 2024 05:23:46 +0000
ROA not before:           Thu 20 Jun 2024 05:18:46 +0000
ROA not after:            Thu 19 Jun 2025 05:23:46 +0000
asID:                     31898
IP address blocks:        2a13:c007:9000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 18:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:aa:a0:93:95:c4:a9:54:b9:df:33:c0:81:86:91:eb:42:09:73:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:46 2024 GMT
            Not After : Jun 19 05:23:46 2025 GMT
        Subject: CN=7B6DEDEDC3D10616A06260B5B4765F27C698E431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:a1:bd:05:56:83:e2:90:3f:85:59:be:fc:
                    85:4f:0c:24:33:d8:76:48:2b:63:00:c0:ab:10:a1:
                    55:cd:d4:69:95:52:93:7b:23:07:86:f0:47:f0:eb:
                    a1:d0:5b:db:3d:6d:0f:7b:57:72:02:c5:e7:9d:32:
                    7b:64:5e:5e:c6:4a:9f:c0:3f:54:75:20:bb:09:7e:
                    f3:0b:ff:f7:38:39:72:62:6f:47:f7:36:3c:a0:4f:
                    cf:ae:8f:c0:99:61:b4:e5:58:26:b1:bf:53:5e:be:
                    b5:b1:87:04:64:9f:c1:e2:4e:f5:57:80:a3:1e:8a:
                    9d:b7:c6:6c:04:f6:05:71:b0:67:29:0c:81:3e:57:
                    65:d9:cd:1d:81:55:0d:b6:f8:0d:8a:c6:61:d5:ff:
                    fe:f5:5e:fe:c7:64:b7:a8:af:13:6d:db:21:6a:ad:
                    4b:8a:aa:89:b9:3d:da:aa:91:e0:25:6d:3b:2c:78:
                    ec:49:31:8e:83:cb:1a:60:5a:2d:cc:e2:fd:85:d2:
                    12:7b:d1:c5:d1:24:ab:61:e1:ee:af:d2:e4:6e:b9:
                    ab:61:94:96:59:fc:72:57:c5:8e:e2:37:45:2c:be:
                    35:73:2c:67:fd:ad:4c:62:f4:42:fd:f3:ed:12:54:
                    75:6d:f2:62:8f:25:0a:d1:a4:ac:61:27:2c:94:e7:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6D:ED:ED:C3:D1:06:16:A0:62:60:B5:B4:76:5F:27:C6:98:E4:31
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a393030303a3a2f34302d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:24:e3:3f:45:3e:74:bc:0d:dc:1b:22:55:ba:e4:a4:96:f8:
         e9:cb:ef:ce:2a:fa:33:5d:34:16:11:d5:d7:9b:d7:df:58:64:
         39:de:23:07:81:0a:27:a9:5b:59:17:a7:19:a6:53:30:6a:a8:
         0e:3f:e0:f6:30:33:45:2c:68:e5:20:d3:79:e3:2e:20:b0:f2:
         65:a6:4d:82:d6:7e:36:43:97:92:47:8d:91:f3:46:9e:05:e5:
         ff:b7:e1:5a:03:43:e5:13:fa:e8:64:f0:a3:bc:85:eb:c6:e5:
         83:92:fa:51:68:63:b7:ff:4e:98:3a:08:72:70:2a:0f:e9:5d:
         2b:01:16:18:f7:65:a0:9f:0f:04:28:34:18:2b:2d:9c:d1:41:
         ee:05:fd:0d:c5:cb:11:e1:49:16:ee:1c:d1:e8:25:b9:cd:b0:
         72:87:85:0f:e1:8c:9b:c5:e9:52:a0:5f:7d:ec:4f:78:ab:70:
         79:48:cd:c5:d3:59:de:85:fb:16:03:50:40:01:9c:ea:bc:3f:
         fd:b2:3e:da:41:27:8a:b2:13:4f:02:e7:aa:51:ef:cd:9b:89:
         22:e4:03:2a:8e:e2:62:f2:23:fc:91:1f:36:43:3a:39:2f:da:
         d2:47:6d:38:f5:71:b0:f9:d8:3a:ee:30:8d:a6:01:20:3a:27:
         94:98:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 23:23:25 2024 by rpki-client on console-ams.rpki-client.org