Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/669E34763D8311ED9D67A5B7F1222468.roa
File:                     669E34763D8311ED9D67A5B7F1222468.roa (raw, json)
Hash identifier:          qemb6qh5AH/lYtNlv7tLo6ZyMMLQHWaezTkfPmd/HtI=
Subject key identifier:   FD:6F:51:19:FD:33:D2:8F:70:96:59:91:12:C8:E9:BE:2D:39:92:64
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       089D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/669E34763D8311ED9D67A5B7F1222468.roa
Signing time:             Mon 26 Sep 2022 10:10:09 +0000
ROA not before:           Mon 26 Sep 2022 10:10:06 +0000
ROA not after:            Tue 26 Sep 2023 10:10:06 +0000
asID:                     203999
IP address blocks:        161.123.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205 (0x89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 10:10:06 2022 GMT
            Not After : Sep 26 10:10:06 2023 GMT
        Subject: CN=63317a81-dad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:ae:ed:8c:22:df:4d:ca:41:37:8e:c6:b3:
                    6f:62:5f:b1:19:c4:41:2d:cf:73:6d:5f:ef:67:4e:
                    ab:2e:f4:80:9b:0b:1f:cf:ff:ab:a5:56:24:60:4c:
                    33:ab:d5:d4:01:8d:12:d9:66:10:9d:61:ef:b4:15:
                    10:37:c0:67:cb:6e:67:56:14:56:7f:1c:0d:23:08:
                    7f:13:2a:00:ca:d9:3a:be:7d:fe:87:9a:9c:af:35:
                    e5:a4:f8:ed:02:d0:35:62:a6:80:48:13:d6:78:70:
                    23:c4:c5:03:3a:ef:e6:51:e0:98:b2:9c:37:b2:6c:
                    24:19:eb:e9:de:52:a1:4b:76:ff:6c:c0:f8:e7:3d:
                    fd:2c:8f:d3:96:ef:55:0a:d4:ac:56:ef:82:6d:b4:
                    6b:ad:ed:3f:04:a4:34:38:22:6a:73:77:c2:e3:c7:
                    1f:60:e0:a3:fa:0a:1d:4e:1d:59:a7:2d:7f:de:5c:
                    b3:01:15:7d:06:81:ba:e0:7f:f1:b1:12:da:e9:c1:
                    cb:f3:d9:77:78:af:06:ce:f2:03:27:b5:01:d9:e3:
                    df:70:91:0f:99:76:00:25:9b:53:cc:8b:29:29:82:
                    04:51:f3:1b:2a:db:c3:ce:60:a5:8a:54:6e:6a:34:
                    bc:a0:23:1b:e7:0c:87:90:b0:51:de:12:6b:62:00:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:51:19:FD:33:D2:8F:70:96:59:91:12:C8:E9:BE:2D:39:92:64
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/669E34763D8311ED9D67A5B7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:0b:81:ec:35:0f:e2:bb:f9:ec:77:fd:9c:7b:38:f6:90:3a:
         21:cd:20:0b:74:46:71:d2:36:cd:63:16:b9:87:a5:6b:78:54:
         8a:0e:c3:07:04:79:c6:a5:b1:a5:69:59:af:ca:21:50:4d:bd:
         28:1b:29:92:f1:d2:3d:b8:bd:ad:05:2d:dc:a2:e9:69:f2:13:
         c7:6d:b1:59:2a:02:09:6f:3d:1c:56:dd:be:72:18:34:b3:ad:
         2d:57:44:65:ff:de:e8:78:a3:b9:a3:f6:49:59:a3:ae:92:61:
         c0:04:d3:bc:d9:35:69:45:58:5b:e1:a7:19:76:ff:45:e4:fb:
         cf:a7:df:c1:fe:c1:c9:20:5a:33:47:d7:e1:03:c8:dc:f9:a2:
         ca:9c:40:80:83:48:6b:dc:8b:f5:6b:37:8d:4d:fa:d5:50:ad:
         49:ad:77:fb:4b:de:80:0d:c4:37:1d:5e:2a:ee:33:ea:4d:fe:
         ec:77:b3:09:41:7e:32:e8:be:b9:45:ee:d4:35:dc:0d:ca:8d:
         ed:40:53:c1:74:e5:0c:85:aa:7c:3f:3c:0b:86:d3:43:a2:19:
         af:d1:bd:2d:15:7c:37:f4:98:8e:d9:19:99:97:75:d7:25:42:
         5f:7c:e5:12:01:05:b8:de:61:9e:99:fc:18:10:1a:7f:62:08:
         6b:eb:ec:31
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA5MjYxMDEwMDZaFw0yMzA5MjYxMDEwMDZaMBgxFjAU
BgNVBAMMDTYzMzE3YTgxLWRhZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkiq7tjCLfTcpBN47Gs29iX7EZxEEtz3NtX+9nTqsu9ICbCx/P/6ulViRg
TDOr1dQBjRLZZhCdYe+0FRA3wGfLbmdWFFZ/HA0jCH8TKgDK2Tq+ff6HmpyvNeWk
+O0C0DVipoBIE9Z4cCPExQM67+ZR4JiynDeybCQZ6+neUqFLdv9swPjnPf0sj9OW
71UK1KxW74JttGut7T8EpDQ4Impzd8Ljxx9g4KP6Ch1OHVmnLX/eXLMBFX0Ggbrg
f/GxEtrpwcvz2Xd4rwbO8gMntQHZ499wkQ+ZdgAlm1PMiykpggRR8xsq28POYKWK
VG5qNLygIxvnDIeQsFHeEmtiACYDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU/W9R
Gf0z0o9wllmREsjpvi05kmQwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzY2OUUzNDc2M0Q4MzExRUQ5RDY3QTVCN0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe+gwDQYJKoZIhvcNAQELBQAD
ggEBADsLgew1D+K7+ex3/Zx7OPaQOiHNIAt0RnHSNs1jFrmHpWt4VIoOwwcEecal
saVpWa/KIVBNvSgbKZLx0j24va0FLdyi6WnyE8dtsVkqAglvPRxW3b5yGDSzrS1X
RGX/3uh4o7mj9klZo66SYcAE07zZNWlFWFvhpxl2/0Xk+8+n38H+wckgWjNH1+ED
yNz5osqcQICDSGvci/VrN41N+tVQrUmtd/tL3oANxDcdXiruM+pN/ux3swlBfjLo
vrlF7tQ13A3Kje1AU8F05QyFqnw/PAuG00OiGa/RvS0VfDf0mI7ZGZmXddclQl98
5RIBBbjeYZ6Z/BgQGn9iCGvr7DE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org