Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/809997583D8311EDA08FE8B7F1222468.roa
File:                     809997583D8311EDA08FE8B7F1222468.roa (raw, json)
Hash identifier:          pia1pezyX3xzwzjvBixQe2YpDahx8uY2B78ETZ0ntKE=
Subject key identifier:   5F:DB:69:29:5D:39:7B:4E:36:92:86:24:7A:06:3B:29:B0:F4:12:E1
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       089F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/809997583D8311EDA08FE8B7F1222468.roa
Signing time:             Mon 26 Sep 2022 10:10:53 +0000
ROA not before:           Mon 26 Sep 2022 10:10:49 +0000
ROA not after:            Tue 26 Sep 2023 10:10:49 +0000
asID:                     203999
IP address blocks:        161.123.238.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 10:10:49 2022 GMT
            Not After : Sep 26 10:10:49 2023 GMT
        Subject: CN=63317aac-14bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:7e:19:42:83:30:eb:a6:fc:09:04:61:72:
                    b5:3b:92:35:dc:5d:f0:7f:03:53:ff:50:9c:91:98:
                    b2:a9:64:b9:d7:db:99:3b:5b:63:8b:98:f8:f8:bf:
                    e6:b9:02:22:98:8f:23:9a:8a:d5:b5:10:a7:ab:c5:
                    f5:ed:63:ea:fe:ae:f7:07:75:5c:c6:87:b7:89:75:
                    ab:bb:c0:b6:11:b5:63:35:9f:4b:6d:0e:34:75:6e:
                    f5:ed:f3:5f:ae:48:4b:56:f5:3d:99:5d:61:81:86:
                    2e:e0:f1:d2:44:08:66:11:de:b8:ed:14:49:f3:87:
                    b4:1f:d1:de:14:3f:81:99:de:9e:fe:a5:c0:73:50:
                    f0:a9:88:6d:74:33:5c:92:d3:5f:ea:87:ee:14:61:
                    19:96:87:4c:e6:47:e6:33:50:59:73:c8:d5:d0:e0:
                    75:7a:21:93:5b:79:eb:09:41:0c:4f:6f:5d:2b:4d:
                    16:bd:5c:09:25:d0:25:82:9c:ca:b1:9c:99:39:72:
                    6b:b0:ef:bb:f8:2f:74:68:51:65:35:a7:30:25:d2:
                    06:08:d3:48:36:fe:e0:15:2a:fa:bd:f5:d3:e5:00:
                    5d:a3:8e:01:a6:61:95:9c:5f:d9:41:73:75:c5:e5:
                    30:81:be:fd:db:4b:07:4c:2c:06:0a:f6:92:02:ab:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DB:69:29:5D:39:7B:4E:36:92:86:24:7A:06:3B:29:B0:F4:12:E1
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/809997583D8311EDA08FE8B7F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:85:c1:4d:5b:e1:60:4f:aa:47:ca:b8:9b:71:93:a1:c8:
         37:bb:d2:10:f2:6b:0e:44:5b:6f:bd:b6:36:f6:63:0f:dc:b0:
         67:a9:ae:c5:e2:55:84:79:cb:51:15:eb:76:ce:22:19:2a:f0:
         3f:2d:a1:8e:a8:32:82:41:23:f7:a2:5a:51:dc:ef:88:fd:24:
         c4:a1:77:be:3a:1e:2b:11:c5:d5:0d:54:ae:cf:c5:ae:5d:67:
         bb:e2:25:01:87:e5:29:d4:3d:73:95:fa:57:aa:ae:90:a3:f5:
         04:77:76:8d:f5:55:af:58:df:87:a9:c0:3e:07:d7:6c:6b:53:
         07:33:ff:3e:4e:2d:37:ae:35:88:84:96:a2:d8:a5:50:4c:fd:
         d2:8d:7f:c4:0c:86:e3:fa:79:6f:8a:0c:b0:66:12:2f:6f:02:
         92:b4:f4:c0:b0:b4:2b:64:af:3a:ff:92:3d:37:af:ea:23:07:
         32:5d:66:d7:8a:b0:ae:de:c9:85:66:99:1e:10:51:39:65:0a:
         44:4f:6c:4b:13:3f:ab:fa:9e:0e:10:0d:74:35:40:52:4a:ef:
         fe:51:b6:82:ef:5d:1f:f7:06:9e:0a:51:fd:4c:4f:2b:3a:e8:
         d1:39:90:0a:b7:ab:5c:84:7d:21:28:8b:cb:f2:10:4e:f1:41:
         67:43:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 18:27:21 2023 by rpki-client on console-fra.rpki-client.org