Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa
File:                     326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          PDnLwKRSsIg8duiIWJOhrT5PRzUTBF+Ed1p5JMUHAGg=
Subject key identifier:   67:5B:36:29:E9:7E:EA:A1:76:B4:0F:B7:78:19:0A:19:B6:D3:61:FE
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       269101FE8226D511BD27839D5F76E0B0DA553612
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa
Signing time:             Mon 11 Mar 2024 04:13:50 +0000
ROA not before:           Mon 11 Mar 2024 04:08:50 +0000
ROA not after:            Mon 10 Mar 2025 04:13:50 +0000
asID:                     199177
IP address blocks:        2a13:c007:8300::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 23:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:91:01:fe:82:26:d5:11:bd:27:83:9d:5f:76:e0:b0:da:55:36:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Mar 11 04:08:50 2024 GMT
            Not After : Mar 10 04:13:50 2025 GMT
        Subject: CN=675B3629E97EEAA176B40FB778190A19B6D361FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:6b:13:31:42:19:9b:cd:10:d1:74:84:24:
                    39:b6:7e:d8:ea:c2:90:62:92:92:f5:70:19:29:d2:
                    8c:29:58:9c:f0:60:15:cb:2b:9b:46:ce:d8:7a:6f:
                    4e:a6:4a:16:41:3b:b5:d4:8c:3b:64:80:76:f5:fb:
                    35:0d:9e:88:30:5a:4a:61:b6:e1:a4:7c:f1:c5:0c:
                    69:78:03:9e:26:40:35:5b:f8:63:64:9d:56:8b:66:
                    cd:d1:db:1e:db:e1:1b:f3:84:df:50:3c:47:86:ae:
                    f5:25:49:e2:8d:1a:51:df:07:ff:e5:bd:ff:81:a0:
                    97:61:1e:eb:5a:58:7d:33:14:2b:47:50:0a:55:a2:
                    c7:e9:3b:74:53:a9:1f:79:16:8b:29:2e:80:19:f6:
                    ce:1b:c6:6b:f2:9b:c9:ae:13:00:4e:cd:f7:3b:ab:
                    a5:0e:f2:46:cd:71:f3:f8:49:19:e2:61:29:49:f4:
                    a8:ae:8e:b9:bf:a6:89:fe:b9:7b:71:7b:10:55:be:
                    64:58:ae:60:fb:43:d3:33:e8:e0:93:ef:0f:d9:eb:
                    13:69:d4:60:dd:54:ab:e4:d3:3a:d1:8f:d1:2a:19:
                    23:3d:08:4c:30:ad:f7:0f:b8:d6:28:44:b7:d2:14:
                    11:42:24:db:c6:34:16:77:ce:6b:3a:46:7a:5b:aa:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5B:36:29:E9:7E:EA:A1:76:B4:0F:B7:78:19:0A:19:B6:D3:61:FE
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/326131333a633030373a383330303a3a2f34302d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:56:99:74:4e:dd:b5:0e:ba:54:4e:23:a2:53:80:5c:8c:
         50:f8:06:f5:96:99:72:b3:ee:d1:ac:e4:5c:91:5e:b3:0b:3a:
         ed:6b:42:03:ed:a7:07:d3:c0:f8:5b:3d:4e:b5:13:66:3c:65:
         3c:22:dd:a0:21:9f:66:ee:ae:85:1e:39:b8:e5:8f:26:a5:91:
         3a:90:f8:83:dd:e5:08:18:eb:41:cc:66:fc:ed:fe:6a:53:3d:
         9d:75:c7:c3:3a:2b:61:b6:8f:d4:8f:0f:a1:c4:e8:80:81:c0:
         06:30:9d:ff:75:df:a0:84:ae:a2:75:68:f8:fe:f9:77:3b:e0:
         75:c2:71:e6:46:06:1b:32:1b:5f:1c:b0:f0:e6:92:b0:da:77:
         e7:a3:da:e1:3b:63:e6:55:74:96:c2:f8:89:e4:dc:fd:92:0e:
         23:57:f7:be:d8:53:25:b5:67:8c:aa:ea:3e:7b:61:3a:32:4c:
         fc:4c:51:0e:72:e5:ca:1e:8d:e7:12:fc:7a:08:59:0f:7a:2a:
         f4:6e:f5:0d:64:1c:a0:7f:f7:d4:6b:38:4f:5b:9a:04:be:bb:
         8e:79:c8:8e:b0:69:9b:c2:c7:06:f9:7b:f4:ec:7f:84:6e:5e:
         9a:d4:be:cd:42:98:51:e5:e5:70:f3:43:c6:b5:54:4b:ef:94:
         cd:ad:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----