Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/68DB295ACF1011ED87F14AF6F1222468.roa
File:                     68DB295ACF1011ED87F14AF6F1222468.roa (raw, json)
Hash identifier:          ubzuzHDwBAJ6EqgBak/slUV6X+5UVr508JwMuxoi+KQ=
Subject key identifier:   52:31:C9:37:69:FA:17:12:F1:04:53:75:B7:25:D0:5B:3A:71:53:B9
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0A5C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/68DB295ACF1011ED87F14AF6F1222468.roa
Signing time:             Thu 30 Mar 2023 15:34:50 +0000
ROA not before:           Thu 30 Mar 2023 15:34:47 +0000
ROA not after:            Sat 30 Mar 2024 15:34:47 +0000
asID:                     204765
IP address blocks:        161.123.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652 (0xa5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Mar 30 15:34:47 2023 GMT
            Not After : Mar 30 15:34:47 2024 GMT
        Subject: CN=6425ac1a-af90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:81:2b:1a:4d:6e:42:b5:c4:2a:32:cd:06:
                    b9:45:c2:4e:55:f1:64:ed:f6:5b:9a:fc:5c:1b:fa:
                    db:5a:99:17:57:45:b5:b2:4f:ae:32:9c:08:b2:49:
                    3f:6e:b9:72:3a:6e:9b:13:e2:35:b4:27:e3:35:94:
                    30:6d:57:9e:c6:37:7e:de:a8:ef:29:df:20:47:90:
                    96:2e:4a:83:7c:47:8f:07:fa:d5:f8:cb:28:80:32:
                    e0:86:3e:d9:6a:54:1e:93:3b:6c:83:cd:fe:e5:50:
                    dd:2d:9b:56:72:b0:47:d4:27:ef:b8:4b:e5:76:bd:
                    84:5b:ea:c4:4c:ff:cb:6d:c6:6a:48:4f:db:18:03:
                    28:19:0d:fd:c2:3b:e6:80:bd:d0:06:38:a5:70:a8:
                    2c:98:32:95:95:75:af:8d:06:7d:b5:9b:c8:5f:ee:
                    1b:12:f0:3a:56:90:94:77:83:56:42:0f:42:61:ae:
                    0d:02:db:99:ea:cb:66:59:a8:09:63:cd:c4:e3:25:
                    90:54:a2:b8:06:29:33:bd:51:c5:d7:fb:1d:b5:21:
                    b7:e8:63:bb:17:5b:78:0f:58:4a:45:fa:8a:75:1a:
                    1d:8e:f7:f1:08:58:6f:de:52:2c:d3:9c:ef:ac:cb:
                    22:a8:3e:fd:d9:ac:9d:d3:cf:6f:cc:3c:ca:1f:d7:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:31:C9:37:69:FA:17:12:F1:04:53:75:B7:25:D0:5B:3A:71:53:B9
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/68DB295ACF1011ED87F14AF6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:4b:06:76:f9:32:9a:b4:d1:5f:87:f2:13:2b:5c:61:61:88:
         8f:39:51:3a:62:31:2b:be:df:ce:fb:fa:9a:44:75:66:04:69:
         fe:1f:ee:25:f3:e8:5e:28:70:de:2c:4d:55:48:9e:e3:7e:50:
         8a:b8:3c:c1:a6:32:a7:14:c7:ee:b8:a9:48:66:ad:d4:ad:2f:
         b1:b1:e8:c6:05:c6:36:c7:b6:ea:f6:63:35:41:56:d9:2d:61:
         8e:4c:f5:ae:ba:2c:f8:f5:b6:88:95:72:06:bd:17:2c:51:53:
         e1:94:06:39:23:8a:f8:05:d7:5c:4d:d8:72:50:e0:a0:98:df:
         7f:2c:01:89:9d:85:d6:50:b0:78:0e:2e:19:67:5c:b9:6b:13:
         4c:20:af:91:4d:98:94:5b:a3:ba:42:d3:7a:ad:99:a4:f7:10:
         63:0f:da:2f:46:8e:1b:84:3d:8c:27:6b:2a:1e:d5:34:38:17:
         72:fc:0f:23:1f:15:00:8b:56:00:e4:94:ca:43:5a:1d:57:0a:
         f4:67:5b:f3:ff:6d:2a:c4:61:fb:e1:3d:03:ca:1b:45:4f:8c:
         d1:d5:83:b5:91:6f:73:ff:2d:6c:51:ac:44:a5:62:e8:db:2b:
         de:13:a3:bb:d2:59:e4:d4:89:29:cc:4a:67:b4:cb:ff:61:67:
         3e:d9:ed:14
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICClwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAzMzAxNTM0NDdaFw0yNDAzMzAxNTM0NDdaMBgxFjAU
BgNVBAMMDTY0MjVhYzFhLWFmOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDphoErGk1uQrXEKjLNBrlFwk5V8WTt9lua/Fwb+ttamRdXRbWyT64ynAiy
ST9uuXI6bpsT4jW0J+M1lDBtV57GN37eqO8p3yBHkJYuSoN8R48H+tX4yyiAMuCG
PtlqVB6TO2yDzf7lUN0tm1ZysEfUJ++4S+V2vYRb6sRM/8ttxmpIT9sYAygZDf3C
O+aAvdAGOKVwqCyYMpWVda+NBn21m8hf7hsS8DpWkJR3g1ZCD0Jhrg0C25nqy2ZZ
qAljzcTjJZBUorgGKTO9UcXX+x21IbfoY7sXW3gPWEpF+op1Gh2O9/EIWG/eUizT
nO+syyKoPv3ZrJ3Tz2/MPMof16dxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUjHJ
N2n6FxLxBFN1tyXQWzpxU7kwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzY4REIyOTVBQ0YxMDExRUQ4N0YxNEFGNkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe2YwDQYJKoZIhvcNAQELBQAD
ggEBAHVLBnb5Mpq00V+H8hMrXGFhiI85UTpiMSu+3877+ppEdWYEaf4f7iXz6F4o
cN4sTVVInuN+UIq4PMGmMqcUx+64qUhmrdStL7Gx6MYFxjbHtur2YzVBVtktYY5M
9a66LPj1toiVcga9FyxRU+GUBjkjivgF11xN2HJQ4KCY338sAYmdhdZQsHgOLhln
XLlrE0wgr5FNmJRbo7pC03qtmaT3EGMP2i9GjhuEPYwnayoe1TQ4F3L8DyMfFQCL
VgDklMpDWh1XCvRnW/P/bSrEYfvhPQPKG0VPjNHVg7WRb3P/LWxRrESlYujbK94T
o7vSWeTUiSnMSme0y/9hZz7Z7RQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org