Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/860D658CF7E211EEB64FC83C017001B1.roa
File:                     860D658CF7E211EEB64FC83C017001B1.roa (raw, json)
Hash identifier:          vWgKwn+m/db1CKxTiFoamsgLY+8ctL9y8nfl2ljJYdc=
Subject key identifier:   F2:B8:94:1D:BA:B4:6B:5F:FF:2F:44:AE:BA:F0:CF:31:A2:8B:26:02
Certificate issuer:       /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial:       0116
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/860D658CF7E211EEB64FC83C017001B1.roa
Signing time:             Thu 11 Apr 2024 09:04:38 +0000
ROA not before:           Thu 11 Apr 2024 09:04:34 +0000
ROA not after:            Tue 11 Apr 2034 09:04:34 +0000
asID:                     14618
IP address blocks:        163.201.84.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 07:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
        Validity
            Not Before: Apr 11 09:04:34 2024 GMT
            Not After : Apr 11 09:04:34 2034 GMT
        Subject: CN=6617a7a6-0404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:a5:31:4c:9b:1e:0d:28:c5:08:82:76:ac:
                    cc:eb:da:2f:e8:95:f2:9e:25:8b:d2:32:f1:ac:b7:
                    08:dd:85:d4:ad:a6:e7:fe:81:35:18:6e:fa:77:7a:
                    e1:0f:52:2f:dd:0d:d8:b4:46:46:10:07:ed:5e:12:
                    ec:fc:76:f6:93:d1:21:ee:f8:c8:9d:16:a0:64:3a:
                    83:97:8b:d2:15:b7:e3:44:68:a2:1d:4b:1d:25:75:
                    02:f2:af:75:01:06:29:40:b3:ef:23:f5:f0:3e:50:
                    5a:5e:6c:23:a2:a2:3f:0b:86:0c:61:5b:c5:90:b7:
                    6a:24:8d:c7:87:fd:d2:08:cb:5d:88:8c:9c:ae:82:
                    2a:4d:7a:5b:9a:5b:c2:65:57:18:14:45:5a:23:b1:
                    13:1d:23:23:fc:c0:c8:8d:21:62:61:63:31:3d:85:
                    f7:4a:90:1d:74:7f:fc:ea:07:3b:f9:3c:85:6b:01:
                    15:77:f9:1b:3e:79:54:e4:12:b1:6f:7e:4c:70:39:
                    98:31:1c:4a:fa:81:a3:26:d4:be:20:00:4c:f5:e9:
                    1f:18:81:db:0c:77:15:9c:db:5a:57:66:87:02:19:
                    86:c8:13:7e:91:40:15:e0:65:f0:fa:18:c7:e8:5a:
                    25:4f:7c:da:e0:b5:58:b0:0c:6f:24:98:b1:f3:b2:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B8:94:1D:BA:B4:6B:5F:FF:2F:44:AE:BA:F0:CF:31:A2:8B:26:02
            X509v3 Authority Key Identifier:
                keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/860D658CF7E211EEB64FC83C017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.201.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:29:57:57:38:fa:03:be:8e:14:3f:c2:b6:75:82:54:1b:93:
         8a:95:11:32:fc:26:06:07:d2:9b:c3:d1:97:c4:c8:0e:82:66:
         03:30:e9:4a:04:49:31:93:7c:0f:de:eb:0f:da:24:b6:85:e6:
         96:4d:e0:6a:99:1f:af:1e:8e:de:5e:15:1e:a3:51:94:62:26:
         6f:99:65:8f:7b:32:0e:75:37:20:43:36:67:68:a4:4c:08:7b:
         e5:88:dd:81:a3:9f:06:50:f0:f5:ae:6b:38:ad:77:8d:62:80:
         1e:ac:b5:a2:55:a7:a4:53:44:40:b0:eb:3f:40:50:11:a6:a3:
         a4:9b:4a:98:27:88:39:4e:4b:b1:a5:90:3c:11:b2:20:c4:fe:
         a4:68:a9:56:f4:46:ee:53:9d:e5:4c:26:83:9f:d7:33:11:0b:
         85:9b:23:a0:91:a3:00:3d:30:f1:f7:a1:d1:10:d8:98:00:b0:
         c7:88:ab:b1:89:28:11:3b:81:43:85:cf:38:5f:ea:6f:0d:02:
         65:f3:e3:54:e8:4d:3f:c9:85:e3:c3:cf:95:c0:b8:d4:09:94:
         4c:98:d9:ea:94:52:91:b0:12:7d:ab:38:e1:f0:c9:2d:00:b7:
         b3:67:75:1b:fe:e5:65:0c:8f:99:87:6f:a0:e2:99:e5:da:61:
         83:25:12:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org