Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/613A2FE0A89411ED9A5B647DF1222468.roa
File:                     613A2FE0A89411ED9A5B647DF1222468.roa (raw, json)
Hash identifier:          uHpsRfnDtAlIYFq5XvX40Hc1/ZndT5TsDU2rcVfrPmg=
Subject key identifier:   3C:56:46:5F:6E:2E:F7:68:A5:9C:AF:80:DC:6E:A9:A8:A2:89:89:1A
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       099D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/613A2FE0A89411ED9A5B647DF1222468.roa
Signing time:             Thu 09 Feb 2023 16:11:17 +0000
ROA not before:           Thu 09 Feb 2023 16:11:11 +0000
ROA not after:            Fri 09 Feb 2024 16:11:11 +0000
asID:                     207990
IP address blocks:        161.123.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461 (0x99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Feb  9 16:11:11 2023 GMT
            Not After : Feb  9 16:11:11 2024 GMT
        Subject: CN=63e51b24-2da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:71:14:77:7d:cb:26:96:ed:c1:71:08:86:
                    84:16:08:e2:cf:fc:93:4d:8b:1b:d2:35:40:3c:e2:
                    64:02:bd:fe:cf:44:f6:7d:10:84:0c:b8:f4:25:da:
                    fc:56:06:31:56:47:f2:8e:a8:03:62:01:46:97:f4:
                    ce:bb:18:2c:12:8c:01:fb:de:24:68:2d:8c:c9:10:
                    37:fe:62:65:44:db:ee:fb:45:36:6a:15:3f:cc:9c:
                    11:83:c9:84:b6:cd:06:ca:dd:09:4f:f3:25:00:7a:
                    22:b7:6e:50:1c:4f:c8:7a:86:72:18:78:39:7f:6d:
                    97:48:41:00:7f:db:29:df:65:8b:73:ec:9a:d2:b7:
                    6b:ad:63:f6:9d:1b:51:26:ff:3f:37:e2:45:e5:1a:
                    6c:1f:1d:5a:53:48:97:68:53:32:23:86:47:bb:3d:
                    3e:55:ee:00:ab:a6:ed:cb:6d:04:bf:23:a5:90:dc:
                    d1:67:5d:cc:82:9f:18:01:63:d4:03:67:ca:7d:c0:
                    a7:45:7c:6c:17:fa:63:30:f8:f2:01:60:d8:3a:31:
                    c3:f1:64:1a:50:39:80:b6:4f:e2:3e:3a:50:18:66:
                    7f:70:e7:04:62:b0:2f:23:8b:47:73:13:d9:74:ad:
                    c4:5c:d2:0c:81:7e:91:a7:a6:00:81:96:52:46:1f:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:56:46:5F:6E:2E:F7:68:A5:9C:AF:80:DC:6E:A9:A8:A2:89:89:1A
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/613A2FE0A89411ED9A5B647DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:9f:f3:a5:a6:cb:3e:a3:e2:18:af:3f:04:03:91:89:5f:5a:
         81:5a:c6:17:29:28:dc:30:7a:c3:ee:69:27:83:dc:ec:d4:34:
         a5:01:a8:fe:ca:c9:ab:31:c0:70:3c:ef:99:8e:16:e6:41:a7:
         a7:4b:9d:ab:db:76:d1:b6:09:2a:77:a8:3e:ae:3d:22:dd:b9:
         d1:b8:c8:a2:3f:a0:b8:a7:dd:b7:c9:fe:9b:a3:9e:8f:8c:06:
         98:ee:61:e1:b0:dc:e0:50:bc:5d:26:0b:ad:46:6a:43:32:d5:
         5e:f9:86:8c:a1:80:be:ba:10:b3:c9:05:99:59:8c:b1:76:9c:
         3f:d6:8b:0a:f2:84:6d:4d:99:f3:83:2e:c1:d5:6b:4b:90:de:
         0a:a1:44:88:40:aa:53:67:fd:4a:a2:d9:f2:58:1d:6a:04:44:
         1b:2d:67:5b:ba:af:bb:23:78:8e:77:5e:e0:ea:c6:18:93:0e:
         cc:09:22:c5:f0:ae:9d:35:cf:9c:bc:a0:74:f9:b6:42:2c:49:
         a4:2a:e9:a6:f2:af:63:99:b4:dc:85:bd:db:66:6c:9f:21:9c:
         32:e4:ae:0d:6f:ba:71:83:d8:e8:b8:58:91:2d:c4:b4:29:d8:
         a2:ec:72:c4:40:4f:0d:73:9a:5d:7f:28:9e:bd:03:4c:1d:59:
         01:5a:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org