Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7738AF2C3D7F11ED902CEDACF1222468.roa
File:                     7738AF2C3D7F11ED902CEDACF1222468.roa (raw, json)
Hash identifier:          5GHVlFqJx2U69EPdW1/OdiBZ34Q6bPC2gM0tcby52vQ=
Subject key identifier:   48:6E:D8:8E:70:B9:ED:84:89:8A:15:23:5D:7A:BC:CF:3A:D8:5D:24
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0851
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7738AF2C3D7F11ED902CEDACF1222468.roa
Signing time:             Mon 26 Sep 2022 09:41:59 +0000
ROA not before:           Mon 26 Sep 2022 09:41:55 +0000
ROA not after:            Tue 26 Sep 2023 09:41:55 +0000
asID:                     203999
IP address blocks:        161.123.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:41:55 2022 GMT
            Not After : Sep 26 09:41:55 2023 GMT
        Subject: CN=633173e7-3c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:a0:86:b1:23:a9:d8:56:1b:1b:de:2d:93:
                    c6:71:c4:89:4d:29:81:78:20:0c:4f:c1:3f:05:26:
                    1d:d8:9d:e5:c5:ff:9f:b0:8e:19:d8:0e:af:e4:fd:
                    52:bb:6f:64:db:27:bb:ed:d5:4c:25:b2:a9:9c:4b:
                    9f:6f:04:4f:60:71:18:e2:31:1e:21:7c:dc:e5:f4:
                    c2:26:35:f5:d8:79:6f:c9:3b:f8:b8:d5:c5:6d:03:
                    1d:1b:f9:1e:01:31:a4:5e:26:88:83:f4:af:23:38:
                    76:10:d4:43:72:f3:fa:32:18:e7:59:5a:55:37:ec:
                    1e:a0:ff:c6:3e:50:48:45:f4:21:2e:0f:99:42:81:
                    2e:af:fe:2c:e1:65:e3:8e:66:dc:89:e9:7e:64:c0:
                    5c:c6:95:b4:60:fa:ec:ee:c4:9b:e8:82:ac:fa:62:
                    84:ea:d0:d7:65:b6:eb:c7:73:50:e9:d2:b3:81:b5:
                    25:7a:82:35:3f:e1:37:43:49:7f:c3:11:39:60:c3:
                    14:f2:10:3f:95:74:92:36:b7:88:7a:7a:48:17:bc:
                    86:be:a2:36:cf:8c:ed:5a:5e:57:85:23:07:68:f9:
                    29:ff:a2:8f:4b:c3:ec:86:32:b5:5f:a1:13:de:dd:
                    1c:da:33:0f:28:cf:c6:7e:7d:93:0b:bc:53:43:37:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6E:D8:8E:70:B9:ED:84:89:8A:15:23:5D:7A:BC:CF:3A:D8:5D:24
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7738AF2C3D7F11ED902CEDACF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:e3:fb:57:04:0e:4a:35:10:5b:91:89:4e:d1:97:54:40:
         af:2c:cd:ce:8c:96:3f:d5:d6:a7:7d:1f:87:b8:8f:db:0f:60:
         59:47:86:c1:b2:81:a7:10:b6:0c:2b:1a:04:bc:b3:84:e1:3f:
         86:ac:a3:5a:55:a7:4d:8a:d5:55:db:c6:6b:58:9a:68:ed:9c:
         8f:94:d6:94:05:2d:3e:3f:30:bb:b8:0e:8a:90:32:86:25:0a:
         eb:55:47:10:c6:6d:a4:dc:b4:95:f3:9c:88:70:81:d7:95:14:
         56:bd:71:4e:66:80:6a:bb:b1:c7:59:e6:9f:0b:f4:61:15:b5:
         06:95:7c:2b:8a:f2:14:82:52:22:77:d4:55:80:b4:f6:c8:53:
         91:23:13:83:e4:04:b3:14:99:9a:83:d9:ea:a2:ca:e6:a4:b9:
         e0:94:1b:34:fa:de:ed:f2:75:5a:d9:45:a9:a8:8b:34:25:00:
         6a:1e:1c:81:af:7f:f4:87:a0:d9:df:4f:c1:21:d9:81:3a:9b:
         38:40:4c:3d:00:b2:2f:bb:5a:b4:d7:66:04:d6:f7:ee:d2:d8:
         3f:2c:7d:5e:98:f3:f4:63:03:76:69:91:73:52:19:99:db:a6:
         0e:85:de:c8:2e:60:a6:99:41:e6:55:1d:fb:f2:f7:21:7f:6a:
         49:2d:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org