Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/323630323a666139343a3a2f33362d3336203d3e20393435.roa
File:                     323630323a666139343a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          GdTdlRDknUWNzWAt12wIyWqQ6/J3NKxw/tGeRL9qpEU=
Subject key identifier:   28:A0:A2:69:D5:97:F1:3C:6F:0C:3E:F8:27:FD:AA:09:1D:5A:A9:CB
Certificate issuer:       /CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
Certificate serial:       1ED5DEED29652C29F4F4C77830536011B69FBC19
Authority key identifier: D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6
Authority info access:    rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/323630323a666139343a3a2f33362d3336203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:06 +0000
ROA not before:           Thu 20 Jun 2024 05:18:06 +0000
ROA not after:            Thu 19 Jun 2025 05:23:06 +0000
asID:                     945
IP address blocks:        2602:fa94::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 21:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d5:de:ed:29:65:2c:29:f4:f4:c7:78:30:53:60:11:b6:9f:bc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
        Validity
            Not Before: Jun 20 05:18:06 2024 GMT
            Not After : Jun 19 05:23:06 2025 GMT
        Subject: CN=28A0A269D597F13C6F0C3EF827FDAA091D5AA9CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:52:56:fc:f4:d6:84:73:ba:05:e3:25:ff:
                    e1:8a:9a:81:c5:49:1a:59:c4:77:a0:3a:03:5c:8d:
                    fb:93:60:2b:ca:6f:20:7a:1c:74:26:d9:17:b8:9e:
                    ae:08:d3:70:5b:06:dc:0b:1b:81:a4:a6:72:b5:dc:
                    73:df:c1:b7:6e:ce:5f:0d:89:66:0f:a6:83:03:4d:
                    c7:a7:26:83:c2:e2:ce:3c:34:f6:48:1e:19:2e:58:
                    0b:b3:85:b8:e5:44:9c:fb:c7:d4:13:ce:13:e4:da:
                    25:46:39:39:8d:c2:ed:d9:78:24:45:f7:4b:29:1d:
                    a6:8a:18:18:ab:79:fb:80:d1:ff:8b:30:cd:c5:b2:
                    02:78:05:8a:d6:24:c1:84:b6:0a:f8:33:03:51:88:
                    b8:b0:61:33:18:aa:d5:7e:15:9a:f7:4f:79:78:99:
                    50:74:53:b0:76:06:43:3a:24:87:e3:ea:11:b7:c8:
                    83:0e:14:f5:be:0e:4a:7a:b5:53:ac:61:49:af:7b:
                    98:20:0d:f8:69:be:a2:6c:6f:28:55:0c:ef:25:ec:
                    30:bd:9c:03:6a:07:aa:cc:63:f3:9f:61:bf:02:86:
                    58:78:25:bd:f6:13:3d:01:8c:83:54:de:58:d8:7b:
                    0e:7b:83:9b:4f:8c:f5:f5:b5:b2:ba:20:4f:93:11:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A0:A2:69:D5:97:F1:3C:6F:0C:3E:F8:27:FD:AA:09:1D:5A:A9:CB
            X509v3 Authority Key Identifier:
                keyid:D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/323630323a666139343a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa94::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:d7:43:25:db:a1:70:5d:5d:fc:0f:4b:53:4f:e7:b8:a4:
         4f:b0:de:13:01:c5:49:e0:47:65:94:07:ed:90:36:8a:c0:5b:
         9a:ec:77:43:46:66:2c:15:cc:d1:10:f8:99:28:09:d8:c5:a0:
         f6:19:c1:ab:0d:26:5c:cd:23:17:59:50:1f:32:52:aa:aa:90:
         9b:e7:a6:09:c3:e5:1b:46:93:3f:51:81:6d:66:60:aa:6c:67:
         2f:98:e2:ab:82:4c:53:27:87:f5:10:be:bb:eb:fe:62:0d:48:
         e4:aa:72:7e:fd:18:c0:db:34:92:cb:ad:33:a4:13:71:e3:71:
         4d:a1:f5:ed:e4:98:4b:08:fd:ca:80:61:1a:4a:c5:be:e0:3d:
         8a:d0:02:6c:1f:4c:43:fa:2a:96:79:ad:85:50:e0:dd:dd:f4:
         99:cf:ae:75:ed:c8:52:2d:2b:6c:6e:91:95:f8:5e:4c:9f:03:
         32:64:4e:61:2e:4d:18:8f:76:19:f5:8a:3e:2a:91:27:63:71:
         aa:c5:2d:61:ad:f5:3f:7a:28:76:55:98:52:9f:a1:3f:b1:8c:
         34:8d:bf:44:d1:45:f6:04:8e:64:c8:c6:31:8a:e4:09:67:e3:
         71:3b:e9:5b:05:f2:14:21:26:c8:57:6c:4f:91:4c:39:49:f3:
         cb:3b:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:22:56 2024 by rpki-client on console-ams.rpki-client.org