Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8C5753A6652D11EDB90D579BF1222468.roa
File:                     8C5753A6652D11EDB90D579BF1222468.roa (raw, json)
Hash identifier:          YATTxKX9ecrASUqIuC3zCB8fNDX1cjvTZhnk1q0jrXQ=
Subject key identifier:   CE:91:59:88:60:B4:03:46:F7:89:8E:3D:DE:85:29:D2:18:16:F5:EA
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       08F1
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8C5753A6652D11EDB90D579BF1222468.roa
Signing time:             Tue 15 Nov 2022 21:36:22 +0000
ROA not before:           Tue 15 Nov 2022 21:36:19 +0000
ROA not after:            Wed 15 Nov 2023 21:36:19 +0000
asID:                     205431
IP address blocks:        161.123.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Nov 15 21:36:19 2022 GMT
            Not After : Nov 15 21:36:19 2023 GMT
        Subject: CN=63740656-466b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:4e:2e:83:1d:5d:34:7a:b5:f4:c6:9f:05:
                    5d:b8:1f:06:68:1d:6b:5d:8c:a5:5d:24:40:fd:ba:
                    ef:1a:30:32:27:07:46:4a:3a:04:25:4a:4b:d6:6c:
                    d2:08:5b:69:09:31:65:1f:b9:2f:a3:06:40:08:7b:
                    9d:ae:3f:c4:a0:df:ad:fe:9d:b5:a2:4f:c8:14:5c:
                    66:4e:99:87:f7:9b:8a:e0:ad:e5:7f:62:d7:5a:24:
                    f0:3b:92:94:14:db:12:98:91:f2:81:0b:58:7f:bf:
                    16:12:d7:e8:ff:17:18:00:f7:77:f3:f9:3e:0e:34:
                    34:d9:f6:db:21:34:0a:6c:13:e6:15:01:0c:37:e5:
                    55:95:9c:b7:a2:49:2e:df:e6:28:1c:f7:be:c6:bd:
                    c2:48:79:0e:ea:65:1b:1e:7b:a0:91:c3:39:da:3e:
                    9d:6b:15:0e:ab:30:50:e1:a9:a1:ea:63:2c:0a:5d:
                    3d:bc:60:10:49:8a:8f:80:0c:da:60:12:6b:be:e0:
                    d9:a9:91:99:33:bb:3a:96:75:16:56:9e:8f:a9:21:
                    9b:4f:14:e0:ca:51:c8:95:29:68:c7:24:22:31:62:
                    84:80:03:c8:38:0d:6a:d3:dd:fe:5f:44:7b:b0:e7:
                    a6:a3:90:c6:78:70:37:9d:de:9a:57:b0:0f:90:7c:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:59:88:60:B4:03:46:F7:89:8E:3D:DE:85:29:D2:18:16:F5:EA
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8C5753A6652D11EDB90D579BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:f8:f6:0c:8e:6c:81:c5:84:a9:c5:7e:98:74:65:94:e5:bd:
         8d:be:cb:75:4a:52:8b:6e:29:ad:79:d7:68:ee:20:26:f5:af:
         90:17:9b:3f:fa:16:89:8a:98:ed:6f:65:87:ac:19:6a:5c:93:
         aa:f0:a1:e3:66:4e:84:67:88:be:84:f8:9d:65:b5:08:75:1d:
         64:30:93:2f:25:f4:76:e6:1b:fe:c6:83:b0:96:f1:d0:4b:b1:
         7e:44:bf:95:98:21:8b:53:e1:eb:7c:ea:9c:e0:43:98:18:44:
         64:e4:15:18:b4:fc:67:36:95:1c:f2:91:3b:0b:e8:45:61:15:
         b1:55:5c:15:33:75:10:ee:d3:b0:53:90:d3:3a:55:15:bc:f3:
         6d:46:2f:a1:46:64:ff:c9:26:12:97:0e:d8:8a:3f:cd:d2:f5:
         84:09:43:3b:1d:20:e8:7b:d0:9b:17:aa:05:59:0d:1a:bf:98:
         b1:6a:14:b4:9d:a7:0d:54:04:83:65:d1:d9:6d:9e:fe:94:2b:
         1d:81:e7:68:55:e5:ed:56:19:7f:3d:57:35:8f:b1:7c:b0:8b:
         f2:25:c2:ef:b4:1d:25:06:27:68:81:56:8e:58:73:0c:93:e5:
         0a:e7:1f:71:1d:27:cb:2b:97:97:99:de:8e:95:38:c3:e1:c4:
         51:9f:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org