Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/456152D0174311EEB0D0248B4AD9E6FC.roa
File:                     456152D0174311EEB0D0248B4AD9E6FC.roa (raw, json)
Hash identifier:          jn0d/mZevwAgM+NiHyNOYepi3QVVDiRxZbStKKpjoFo=
Subject key identifier:   87:DF:71:EC:72:B1:5C:F1:A6:56:A4:27:47:ED:5E:CC:D7:27:76:5A
Certificate issuer:       /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial:       03D8
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/456152D0174311EEB0D0248B4AD9E6FC.roa
Signing time:             Fri 30 Jun 2023 12:40:19 +0000
ROA not before:           Fri 30 Jun 2023 12:40:15 +0000
ROA not after:            Sun 30 Jun 2024 12:40:15 +0000
asID:                     328227
IP address blocks:        156.0.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Dec 2023 07:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
        Validity
            Not Before: Jun 30 12:40:15 2023 GMT
            Not After : Jun 30 12:40:15 2024 GMT
        Subject: CN=649ecd33-0324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:ae:4e:23:ad:10:1f:a1:bc:77:82:29:54:
                    14:98:dc:15:e8:97:51:8a:dd:28:90:d8:fb:6a:9c:
                    18:0d:14:31:c0:25:92:ae:21:1b:de:79:c3:9c:14:
                    c6:5f:35:1a:04:44:93:3b:97:51:32:8c:54:2e:e2:
                    07:57:1e:d0:1d:9d:5c:27:76:95:b7:f4:b6:e3:ff:
                    a1:4b:db:49:24:51:9f:96:cb:29:95:ce:84:74:8f:
                    26:56:cf:4d:3d:04:d3:dd:d6:a9:8c:d1:8a:48:b1:
                    f1:e1:99:93:d4:b3:ee:3e:3e:3c:a5:06:0d:ac:60:
                    c7:a4:82:fd:34:60:7b:be:22:74:11:e6:0a:4c:ca:
                    2f:54:14:00:41:c4:8d:b1:d7:c0:6e:b7:15:b5:a3:
                    04:b4:2e:57:34:49:97:0b:16:12:5e:0e:b2:13:be:
                    8a:45:cf:e8:e9:96:40:8b:f3:73:a9:b3:54:18:fa:
                    d8:6b:5e:55:8e:cd:68:fd:c7:a3:9a:e7:46:13:f9:
                    ed:bf:f1:b8:45:11:48:bc:5f:b2:e4:2e:a1:ac:cc:
                    21:37:66:bc:a2:9b:07:a9:21:e2:d8:b0:1b:c7:c5:
                    1a:f3:3d:76:5d:62:ca:d6:84:80:ae:4e:be:f0:b5:
                    ac:5f:7e:93:4c:c7:16:fe:6f:ce:10:41:33:4d:56:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:71:EC:72:B1:5C:F1:A6:56:A4:27:47:ED:5E:CC:D7:27:76:5A
            X509v3 Authority Key Identifier:
                keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/456152D0174311EEB0D0248B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:75:da:51:6b:3a:84:5b:31:30:ee:f5:c0:81:29:d7:e3:
         8f:ec:b3:ef:3e:f2:c6:1b:87:ed:0d:69:24:dc:6a:28:62:d1:
         2f:ae:c4:26:1d:3a:d2:ca:ac:d8:10:67:dd:e2:f3:38:77:08:
         48:da:63:4e:a6:d8:16:f2:4d:ad:98:39:be:bd:d3:31:08:2f:
         5d:46:db:e5:5c:59:51:80:28:3b:6d:a3:80:ba:8c:27:fb:94:
         fb:67:ed:2e:12:f6:cf:8e:4a:73:a1:70:06:37:dc:fa:fe:68:
         a2:cf:42:09:23:38:1c:ee:dd:c5:97:e5:a7:30:c6:7a:fb:db:
         3c:65:cf:5a:d6:3b:3d:c2:60:d9:be:29:29:d3:46:4d:9e:67:
         8f:a0:af:f5:2f:fd:f8:69:37:07:2f:5d:90:99:ad:7c:cf:3f:
         c4:60:dc:db:0a:ee:df:08:39:2b:99:b8:6a:c5:73:4e:f5:02:
         22:86:f4:87:82:39:ca:eb:fc:51:1b:e8:2b:23:5a:7d:58:5f:
         07:88:bb:f2:85:79:a4:24:99:61:2f:09:64:ef:87:ec:c4:25:
         ab:16:93:04:1d:6e:c7:b8:98:5c:e4:6c:07:5f:b8:12:fe:7c:
         80:b6:b6:36:80:c6:83:97:67:68:db:56:83:b3:83:1d:f0:46:
         bb:38:de:25
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yMzA2MzAxMjQwMTVaFw0yNDA2MzAxMjQwMTVaMBgxFjAU
BgNVBAMTDTY0OWVjZDMzLTAzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuSK5OI60QH6G8d4IpVBSY3BXol1GK3SiQ2PtqnBgNFDHAJZKuIRveecOc
FMZfNRoERJM7l1EyjFQu4gdXHtAdnVwndpW39Lbj/6FL20kkUZ+WyymVzoR0jyZW
z009BNPd1qmM0YpIsfHhmZPUs+4+PjylBg2sYMekgv00YHu+InQR5gpMyi9UFABB
xI2x18ButxW1owS0Llc0SZcLFhJeDrITvopFz+jplkCL83Ops1QY+thrXlWOzWj9
x6Oa50YT+e2/8bhFEUi8X7LkLqGszCE3ZryimwepIeLYsBvHxRrzPXZdYsrWhICu
Tr7wtaxffpNMxxb+b84QQTNNVpoDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUh99x
7HKxXPGmVqQnR+1ezNcndlowHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVB
MjI4LzQ1NjE1MkQwMTc0MzExRUVCMEQwMjQ4QjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcAGIwDQYJKoZIhvcNAQELBQAD
ggEBAKfrddpRazqEWzEw7vXAgSnX44/ss+8+8sYbh+0NaSTcaihi0S+uxCYdOtLK
rNgQZ93i8zh3CEjaY06m2BbyTa2YOb690zEIL11G2+VcWVGAKDtto4C6jCf7lPtn
7S4S9s+OSnOhcAY33Pr+aKLPQgkjOBzu3cWX5acwxnr72zxlz1rWOz3CYNm+KSnT
Rk2eZ4+gr/Uv/fhpNwcvXZCZrXzPP8Rg3NsK7t8IOSuZuGrFc071AiKG9IeCOcrr
/FEb6CsjWn1YXweIu/KFeaQkmWEvCWTvh+zEJasWkwQdbse4mFzkbAdfuBL+fIC2
tjaAxoOXZ2jbVoOzgx3wRrs43iU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org