Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830323a3a2f34302d3434203d3e20323039333036.roa
File:                     326131333a313830323a3a2f34302d3434203d3e20323039333036.roa (raw, json)
Hash identifier:          aCpb9oQI8bU17ZmVfytNyddEjVtsC+2ym4b11SAiuBM=
Subject key identifier:   98:BF:54:0E:2A:DE:A1:49:A1:D5:88:F6:15:DD:ED:CF:95:F5:5C:08
Certificate issuer:       /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial:       5F3985E9AA2785F6B6C2BB3658913B250EF1BEB7
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830323a3a2f34302d3434203d3e20323039333036.roa
Signing time:             Tue 04 Jul 2023 18:55:57 +0000
ROA not before:           Tue 04 Jul 2023 18:50:57 +0000
ROA not after:            Tue 02 Jul 2024 18:55:57 +0000
asID:                     209306
IP address blocks:        2a13:1802::/40 maxlen: 44

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 09:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:39:85:e9:aa:27:85:f6:b6:c2:bb:36:58:91:3b:25:0e:f1:be:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
        Validity
            Not Before: Jul  4 18:50:57 2023 GMT
            Not After : Jul  2 18:55:57 2024 GMT
        Subject: CN=98BF540E2ADEA149A1D588F615DDEDCF95F55C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:dd:e4:cd:e4:37:39:c3:22:55:49:ae:6a:
                    92:3c:a6:36:af:ef:5c:dc:2d:8c:55:cd:e0:99:cc:
                    b9:2e:39:2f:47:18:13:61:2c:71:8b:6c:81:52:3e:
                    4d:7e:4f:91:a5:ad:d1:d4:66:8c:a1:20:de:e3:d7:
                    d8:63:ed:be:1a:6e:88:e1:2c:9e:30:8c:c0:44:b5:
                    f5:2b:e6:86:31:fc:6c:3e:db:e2:e1:57:43:01:f5:
                    b4:07:db:8e:de:22:2d:f3:40:e6:d5:df:9c:f2:dd:
                    b1:9f:80:b4:03:fb:9c:02:de:6b:4f:05:e9:97:cb:
                    83:fe:6d:26:ee:53:37:40:4f:3c:1f:c5:47:ec:78:
                    f0:03:95:89:de:54:cb:77:65:65:1d:3c:2e:7c:82:
                    bd:f4:6a:61:ca:0b:20:48:d1:e4:be:c7:51:cb:47:
                    45:37:41:7e:c0:4a:51:68:26:8d:f7:ff:f1:41:82:
                    28:51:23:d5:0a:3e:5a:f8:7e:0c:29:84:9b:b8:8f:
                    88:33:3b:ec:f2:21:f4:89:5e:af:53:35:a9:4c:bf:
                    9c:d9:eb:86:ab:18:54:28:cd:51:07:b9:4c:c2:40:
                    af:9d:62:31:d8:f2:d6:f0:4a:e8:c7:60:13:82:17:
                    77:fd:31:63:58:a7:a6:c0:d6:9e:07:db:05:ed:0e:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:54:0E:2A:DE:A1:49:A1:D5:88:F6:15:DD:ED:CF:95:F5:5C:08
            X509v3 Authority Key Identifier:
                keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830323a3a2f34302d3434203d3e20323039333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1802::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:22:ec:18:0d:be:c2:1f:ec:76:2b:36:cd:2c:ab:b5:1c:
         08:12:37:8b:13:91:5a:09:87:7c:2b:2a:db:c7:ae:5e:14:b3:
         76:32:ff:b2:26:b9:27:54:04:ee:45:70:fa:79:80:00:4a:71:
         e9:b7:cc:4f:cc:03:58:2a:9b:a6:5d:10:94:78:d7:06:e4:fc:
         e3:ed:d6:80:64:de:12:6f:5c:fd:73:ff:11:9e:45:d0:cb:8e:
         8c:46:97:91:a9:33:dd:c4:01:6e:88:3d:7b:94:ec:35:d3:83:
         32:67:1c:80:9f:2c:50:56:77:fe:d9:d4:4b:72:b0:70:e4:b5:
         1d:be:81:7d:0b:41:d9:81:b2:14:bc:f2:7a:a8:22:9a:76:1e:
         9a:03:a5:31:df:2e:b0:68:7c:2e:fe:a2:e7:3d:a1:ac:fd:c5:
         3d:b3:b6:66:f1:72:ed:7f:fc:79:6c:ff:5b:a9:c7:e7:ea:cc:
         f3:b8:e5:92:29:7c:6f:cb:3a:32:e0:f7:43:9d:9d:b8:91:12:
         57:20:98:32:81:26:f9:0b:cc:a4:10:0f:5d:25:28:32:69:12:
         c9:53:43:2e:4a:37:eb:06:27:82:c6:98:f0:1b:10:f0:c0:78:
         5f:02:91:eb:f0:97:e2:31:c7:1c:61:6d:39:b6:cb:c5:96:9f:
         66:e5:99:22
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUXzmF6aonhfa2wrs2WJE7JQ7xvrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex
OGJlYjY1OTAeFw0yMzA3MDQxODUwNTdaFw0yNDA3MDIxODU1NTdaMDMxMTAvBgNV
BAMTKDk4QkY1NDBFMkFERUExNDlBMUQ1ODhGNjE1RERFRENGOTVGNTVDMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7d3kzeQ3OcMiVUmuapI8pjav
71zcLYxVzeCZzLkuOS9HGBNhLHGLbIFSPk1+T5GlrdHUZoyhIN7j19hj7b4abojh
LJ4wjMBEtfUr5oYx/Gw+2+LhV0MB9bQH247eIi3zQObV35zy3bGfgLQD+5wC3mtP
BemXy4P+bSbuUzdATzwfxUfsePADlYneVMt3ZWUdPC58gr30amHKCyBI0eS+x1HL
R0U3QX7ASlFoJo33//FBgihRI9UKPlr4fgwphJu4j4gzO+zyIfSJXq9TNalMv5zZ
64arGFQozVEHuUzCQK+dYjHY8tbwSujHYBOCF3f9MWNYp6bA1p4H2wXtDvWrAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUmL9UDireoUmh1Yj2Fd3tz5X1XAgwHwYDVR0j
BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw
by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB
MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6
Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn
Sl9XOFcwcnloaS10bGsuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUHMAuG
bXJzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVwby9UaWFuaGFpUnBr
aS8wLzMyNjEzMTMzM2EzMTM4MzAzMjNhM2EyZjM0MzAyZDM0MzQyMDNkM2UyMDMy
MzAzOTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGACoTGAIAMA0GCSqGSIb3DQEBCwUAA4IBAQAv
iCLsGA2+wh/sdis2zSyrtRwIEjeLE5FaCYd8Kyrbx65eFLN2Mv+yJrknVATuRXD6
eYAASnHpt8xPzANYKpumXRCUeNcG5Pzj7daAZN4Sb1z9c/8RnkXQy46MRpeRqTPd
xAFuiD17lOw104MyZxyAnyxQVnf+2dRLcrBw5LUdvoF9C0HZgbIUvPJ6qCKadh6a
A6Ux3y6waHwu/qLnPaGs/cU9s7Zm8XLtf/x5bP9bqcfn6szzuOWSKXxvyzoy4PdD
nZ24kRJXIJgygSb5C8ykEA9dJSgyaRLJU0MuSjfrBieCxpjwGxDwwHhfApHr8Jfi
McccYW05tsvFlp9m5Zki
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org