Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/906589FC3D7F11ED9D9332ADF1222468.roa
File:                     906589FC3D7F11ED9D9332ADF1222468.roa (raw, json)
Hash identifier:          MEKYtiFa9A33AMBJc8+EpXtlN23PBXeajdIg7uaEB6Q=
Subject key identifier:   8B:23:D5:BA:39:90:F3:06:41:7F:5C:07:8E:C2:11:65:16:0A:F9:6E
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0853
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/906589FC3D7F11ED9D9332ADF1222468.roa
Signing time:             Mon 26 Sep 2022 09:42:41 +0000
ROA not before:           Mon 26 Sep 2022 09:42:37 +0000
ROA not after:            Tue 26 Sep 2023 09:42:37 +0000
asID:                     203999
IP address blocks:        161.123.52.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 09:42:37 2022 GMT
            Not After : Sep 26 09:42:37 2023 GMT
        Subject: CN=63317411-13e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:af:6b:fd:13:b5:ba:29:ea:88:f3:4d:6f:
                    11:4d:26:b4:ed:1d:52:5b:07:ea:c2:f9:33:3e:3a:
                    94:cc:98:4a:53:ce:7f:27:3c:fd:4c:e4:b5:a0:6e:
                    4d:ef:9a:7c:3e:16:3c:46:62:7a:07:d6:14:79:ba:
                    4f:fa:b7:1a:36:a1:b0:03:10:d2:82:0e:de:fb:a3:
                    06:c2:f2:c1:cc:15:2a:2c:38:99:b6:3b:70:e7:9a:
                    37:05:9b:56:ea:06:05:1f:4d:6f:b0:10:af:bf:11:
                    c2:51:b1:e0:b3:b9:05:c7:3a:8e:b8:12:fa:ce:5b:
                    4d:64:f4:9e:17:98:91:e3:74:78:a9:90:b7:d5:89:
                    4e:08:4f:17:4c:27:22:91:78:59:28:55:d8:56:4d:
                    c1:f4:ed:78:d1:a4:1a:15:8b:ae:07:d5:09:65:ad:
                    20:d8:26:4e:52:84:3e:ae:2f:83:d5:62:cb:c4:0f:
                    c0:45:49:d6:5d:a7:78:0a:fe:41:69:b4:21:7c:6f:
                    99:7c:6f:fa:27:47:af:22:79:fa:33:9f:55:f7:0b:
                    db:51:72:a6:8e:c2:84:8d:38:ff:67:67:29:66:fa:
                    a7:43:64:8e:26:75:e5:be:98:ed:7f:4c:8d:bd:68:
                    8b:90:3c:82:69:1c:a7:b5:ab:c8:f4:11:31:d9:bd:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:23:D5:BA:39:90:F3:06:41:7F:5C:07:8E:C2:11:65:16:0A:F9:6E
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/906589FC3D7F11ED9D9332ADF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:61:bc:bb:8a:07:e7:70:da:be:44:c8:b3:bb:c8:5d:4b:c2:
         6e:54:84:f9:d5:00:7a:b9:ef:4b:e6:3d:40:de:1b:23:6c:85:
         40:c8:6f:67:37:f9:28:88:58:56:1e:2d:ce:e9:f8:6a:44:85:
         27:b8:78:56:1f:92:27:e2:58:eb:e1:ef:63:b4:db:c7:39:a1:
         8e:3f:8e:23:1f:a5:db:65:57:ef:11:4e:44:e5:93:8b:69:35:
         93:27:53:67:ba:f7:26:69:6d:0a:6b:93:47:22:fb:7f:8a:0f:
         86:ad:b3:ec:6f:42:98:37:cd:d8:27:ba:8b:d3:69:a3:14:9d:
         93:af:25:7e:33:5d:bf:e2:da:2a:a2:07:46:10:06:75:c2:8b:
         8c:97:19:06:3c:0d:a2:14:34:28:d4:66:7f:5e:cf:7d:d4:fe:
         4e:68:d7:88:85:50:fb:4b:67:13:69:93:bb:9a:ad:f1:c4:1c:
         e6:cc:ae:70:f1:87:52:c4:39:0a:27:ea:af:3f:96:ef:b2:b0:
         75:71:35:f4:03:24:cd:03:ce:ad:4f:9b:ef:fd:c2:f7:c6:9f:
         a7:77:77:f4:6c:4f:1a:6c:d5:18:06:99:8e:8e:08:a8:43:0a:
         51:58:70:fd:4b:0a:a7:6b:ee:34:55:4d:83:6b:20:89:fb:14:
         a7:b3:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org