Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E5224864743711EEB791F04D4AD9E6FC.roa
File:                     E5224864743711EEB791F04D4AD9E6FC.roa (raw, json)
Hash identifier:          y/yszmKb2wq9Oy86K+FpFGz8SCtlGsLS1Wo/xussXiI=
Subject key identifier:   4F:7B:F1:83:10:A8:5C:31:0C:E9:FC:66:2D:06:09:46:88:24:63:2D
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0C5A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E5224864743711EEB791F04D4AD9E6FC.roa
Signing time:             Thu 26 Oct 2023 19:43:11 +0000
ROA not before:           Thu 26 Oct 2023 19:43:08 +0000
ROA not after:            Sat 26 Oct 2024 19:43:08 +0000
asID:                     216440
IP address blocks:        161.123.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3162 (0xc5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 26 19:43:08 2023 GMT
            Not After : Oct 26 19:43:08 2024 GMT
        Subject: CN=653ac14f-5c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:32:ab:9b:94:2e:5c:5f:82:1f:eb:c5:a7:
                    77:e6:64:d5:63:84:96:6e:56:6f:21:fa:86:c3:7c:
                    31:b9:16:15:c0:32:69:76:fd:e8:1a:03:78:c5:59:
                    4f:cb:1a:a6:2c:4c:b5:65:e4:1e:7a:14:3f:68:8c:
                    44:11:b8:e0:19:39:13:55:6e:70:3d:ca:1b:7b:34:
                    02:ed:56:47:43:52:b0:b6:19:e9:a3:12:d7:b2:38:
                    13:f9:65:4c:00:67:37:11:be:c8:af:d5:fc:07:3f:
                    4f:9c:bb:cb:b0:b9:18:bd:9b:26:11:e9:6e:5a:87:
                    a9:80:1b:53:3d:f6:62:49:ab:ea:20:39:2e:10:83:
                    b2:73:2b:48:0f:05:ea:e7:fe:cd:f5:86:1e:66:06:
                    ad:97:01:e7:32:0c:21:3f:52:6f:53:5a:5d:94:33:
                    6c:6c:6c:2e:76:19:81:12:84:11:ba:89:ac:4d:b9:
                    60:9b:0d:63:ba:26:99:b5:32:6a:b9:2a:63:9e:50:
                    6c:72:74:8c:2a:07:5b:d0:d6:bf:a8:7e:ad:98:44:
                    23:2f:ce:14:d7:ab:38:8a:77:c0:b6:60:6b:97:65:
                    03:39:72:2d:c1:52:cc:93:12:57:4b:7f:ab:07:2d:
                    1b:8f:14:29:2e:c5:45:b9:34:1c:81:8f:c5:e3:72:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:F1:83:10:A8:5C:31:0C:E9:FC:66:2D:06:09:46:88:24:63:2D
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E5224864743711EEB791F04D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d2:22:ac:c8:c3:ea:dc:7a:9f:bc:85:eb:43:6c:73:0e:e0:
         a7:4e:a4:70:ca:89:38:4d:1c:41:db:b0:ea:2b:4a:3b:dd:ba:
         20:d8:65:9d:f1:2d:c1:32:bc:cf:15:78:3d:4f:38:07:7b:2e:
         8b:42:93:98:27:88:4b:3d:10:ab:c6:64:fc:d8:80:be:c9:83:
         67:fc:c1:34:25:90:eb:17:c8:58:f1:da:83:c7:9c:a8:a4:5c:
         0b:26:ce:01:65:3a:ef:4f:8d:54:1a:65:2b:c1:40:29:d7:6b:
         80:73:92:e8:7f:1f:a0:47:ca:44:be:f7:9c:df:48:82:91:03:
         f1:be:65:90:64:20:57:c1:7e:d2:ac:ea:ef:56:06:b1:57:4a:
         2d:5a:bd:0c:eb:6a:dd:19:24:e4:6c:18:fc:98:f3:01:f4:36:
         11:c5:61:fb:60:7f:7f:b0:e6:38:9c:af:3b:4d:94:4d:99:2b:
         0a:f6:63:31:f2:78:6e:38:c2:9f:d4:40:cb:a5:47:e4:4d:81:
         d2:2e:66:51:c8:6f:b2:11:18:0c:a3:9d:8b:d1:c9:d9:2e:b4:
         b8:03:b4:9d:c1:75:30:77:6b:ac:a1:f8:3b:97:fc:c0:b7:29:
         aa:b5:fd:6f:eb:92:99:cb:51:08:ca:a3:d1:e5:fd:20:29:07:
         72:b8:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 16:59:57 2023 by rpki-client on console-fra.rpki-client.org