Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383031303a3a2f34342d3434203d3e203437343439.roa
File:                     326131323a646434373a383031303a3a2f34342d3434203d3e203437343439.roa (raw, json)
Hash identifier:          XMwQGl+KoyiqIC1tL8WVyiHpXWcyNYU7gDwZ+ENM0U8=
Subject key identifier:   B5:05:B5:4C:83:91:9D:FB:99:C1:B2:F1:FE:EB:19:BA:3D:3A:15:88
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2416C690C61C94F23A0B23A96902F0233073C10E
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/326131323a646434373a383031303a3a2f34342d3434203d3e203437343439.roa
Signing time:             Tue 17 Oct 2023 16:13:25 +0000
ROA not before:           Tue 17 Oct 2023 16:08:25 +0000
ROA not after:            Tue 15 Oct 2024 16:13:25 +0000
asID:                     47449
IP address blocks:        2a12:dd47:8010::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:16:c6:90:c6:1c:94:f2:3a:0b:23:a9:69:02:f0:23:30:73:c1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 16:08:25 2023 GMT
            Not After : Oct 15 16:13:25 2024 GMT
        Subject: CN=B505B54C83919DFB99C1B2F1FEEB19BA3D3A1588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:01:b3:78:f1:dc:c1:42:8f:fd:20:b1:4a:
                    a4:b2:89:72:16:81:9c:de:f6:c5:45:40:40:5f:f5:
                    92:15:33:bd:21:41:80:09:ef:da:70:9d:4f:60:38:
                    55:ba:3c:6e:42:6f:68:92:b3:19:eb:f5:fe:e8:45:
                    17:5e:b3:8f:23:60:0c:29:d6:42:77:b8:d2:13:9c:
                    87:8e:eb:8f:af:45:00:89:08:e4:ac:8b:b0:7e:21:
                    b1:a4:9a:c8:b2:ec:3c:38:13:cf:23:f5:3b:8a:38:
                    8d:80:b6:fb:bf:57:2f:c7:b0:97:e6:99:bf:94:c3:
                    a0:5a:51:73:e7:80:e9:f0:19:09:55:97:a5:d9:db:
                    76:06:5a:0f:ab:f5:84:88:5c:8a:69:d2:25:d3:ca:
                    b1:cf:28:0b:86:30:26:9c:ac:f2:2c:14:6e:b1:d0:
                    e6:66:4a:bd:66:f7:32:23:6d:7c:e4:f8:0e:ea:95:
                    46:c9:d2:cd:b2:7f:f7:3a:4d:68:8c:ed:e2:81:38:
                    21:f1:ca:24:2d:b9:2a:49:bf:be:2f:c8:1b:bb:7f:
                    7f:d9:14:78:7d:7f:36:79:e8:d6:0d:49:bb:59:03:
                    33:5e:80:4f:d1:e6:a5:69:ab:f9:73:75:17:19:d2:
                    2a:f3:3c:f9:82:bd:43:f2:91:1b:c1:54:a2:6e:30:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:B5:4C:83:91:9D:FB:99:C1:B2:F1:FE:EB:19:BA:3D:3A:15:88
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383031303a3a2f34342d3434203d3e203437343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:fa:92:66:e9:c0:95:4c:73:84:e1:b4:bb:42:8a:85:7e:c0:
         3a:0f:82:de:e7:ef:d5:53:39:01:5b:28:fd:ea:71:44:5f:a1:
         ab:42:6c:02:c7:45:4e:8a:20:c1:1a:39:c8:be:65:b9:d1:84:
         86:4a:90:0a:b2:2d:17:6e:f9:64:60:3b:06:4e:05:b4:20:35:
         c1:92:55:ac:4f:f2:9b:30:71:99:4b:ec:6b:e4:cd:4d:3c:f2:
         b0:5b:c8:33:61:ad:79:c6:39:77:9f:cf:ec:8d:0b:12:d1:91:
         57:2f:57:ef:80:66:74:b2:f4:02:13:91:b3:bb:6b:76:4e:56:
         fc:5f:5b:2e:7e:7f:23:cb:7f:07:6e:d7:af:80:92:8b:51:6d:
         0b:c4:e7:33:8c:0a:d4:09:53:3a:57:70:5b:cc:e2:65:29:d5:
         5c:bc:30:1a:c2:86:24:17:26:93:31:66:0a:2a:06:23:56:88:
         39:c5:3f:8e:09:5c:49:8a:c8:1f:61:e4:2a:61:ac:86:2f:bc:
         78:b3:86:fa:24:70:00:0d:39:4b:de:a8:1a:2d:1f:8c:d6:a5:
         dc:44:0b:04:45:85:d2:26:03:8a:ef:a0:ee:3b:ab:b5:79:62:
         91:2d:07:12:8a:ef:23:4d:e7:65:ae:a3:f6:1c:e1:b2:0d:e0:
         5d:56:d6:83
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUJBbGkMYclPI6CyOpaQLwIzBzwQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MjVaFw0yNDEwMTUxNjEzMjVaMDMxMTAvBgNV
BAMTKEI1MDVCNTRDODM5MTlERkI5OUMxQjJGMUZFRUIxOUJBM0QzQTE1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlQGzePHcwUKP/SCxSqSyiXIW
gZze9sVFQEBf9ZIVM70hQYAJ79pwnU9gOFW6PG5Cb2iSsxnr9f7oRRdes48jYAwp
1kJ3uNITnIeO64+vRQCJCOSsi7B+IbGkmsiy7Dw4E88j9TuKOI2Atvu/Vy/HsJfm
mb+Uw6BaUXPngOnwGQlVl6XZ23YGWg+r9YSIXIpp0iXTyrHPKAuGMCacrPIsFG6x
0OZmSr1m9zIjbXzk+A7qlUbJ0s2yf/c6TWiM7eKBOCHxyiQtuSpJv74vyBu7f3/Z
FHh9fzZ56NYNSbtZAzNegE/R5qVpq/lzdRcZ0irzPPmCvUPykRvBVKJuMBDlAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUtQW1TIORnfuZwbLx/usZuj06FYgwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMHsG
CCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTM4MzAzMTMwM2EzYTJmMzQzNDJk
MzQzNDIwM2QzZTIwMzQzNzM0MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoS3UeAEDANBgkqhkiG
9w0BAQsFAAOCAQEAfvqSZunAlUxzhOG0u0KKhX7AOg+C3ufv1VM5AVso/epxRF+h
q0JsAsdFToogwRo5yL5ludGEhkqQCrItF275ZGA7Bk4FtCA1wZJVrE/ymzBxmUvs
a+TNTTzysFvIM2GtecY5d5/P7I0LEtGRVy9X74BmdLL0AhORs7trdk5W/F9bLn5/
I8t/B27Xr4CSi1FtC8TnM4wK1AlTOldwW8ziZSnVXLwwGsKGJBcmkzFmCioGI1aI
OcU/jglcSYrIH2HkKmGshi+8eLOG+iRwAA05S96oGi0fjNal3EQLBEWF0iYDiu+g
7jurtXlikS0HEorvI03nZa6j9hzhsg3gXVbWgw==
-----END CERTIFICATE-----