Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/502838360A8D11EE901981824AD9E6FC.roa
File:                     502838360A8D11EE901981824AD9E6FC.roa (raw, json)
Hash identifier:          93i7nv31TkeXn9E/mr/56HKCmu7/G76luiX7DYA1xn0=
Subject key identifier:   CA:14:88:31:76:8F:FB:7C:F6:36:DF:FE:A4:35:4F:C7:1C:0E:4B:55
Certificate issuer:       /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial:       03C0
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/502838360A8D11EE901981824AD9E6FC.roa
Signing time:             Wed 14 Jun 2023 08:27:35 +0000
ROA not before:           Wed 14 Jun 2023 08:27:31 +0000
ROA not after:            Fri 14 Jun 2024 08:27:31 +0000
asID:                     57097
IP address blocks:        156.0.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
        Validity
            Not Before: Jun 14 08:27:31 2023 GMT
            Not After : Jun 14 08:27:31 2024 GMT
        Subject: CN=648979f7-fbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:01:06:58:ae:37:c0:5d:06:f3:69:79:ab:
                    ac:70:e2:81:8a:c9:af:79:01:53:c6:5e:04:fd:0a:
                    0c:07:19:69:bb:24:71:b4:14:80:78:4b:a1:59:27:
                    13:b2:16:80:df:f5:5f:ba:54:99:e1:80:15:17:11:
                    7d:b6:e5:c3:93:9a:a6:3b:ea:db:e4:56:8f:0a:8d:
                    55:71:07:a4:b7:db:28:4f:3d:16:6b:37:7a:16:65:
                    66:fd:5e:b9:99:bb:80:44:85:f3:0a:71:f7:45:00:
                    16:88:60:b6:90:bb:fb:4e:58:a6:0f:03:96:1c:33:
                    ca:f8:fa:e9:80:73:58:63:5c:eb:5c:ea:89:46:9e:
                    0f:8d:c7:71:f1:ae:54:75:64:d8:e1:d7:e2:1c:82:
                    f9:c4:ec:b2:a2:6c:a6:73:cc:34:06:b0:5c:6b:4d:
                    a2:3d:89:17:25:be:42:a4:6f:ab:cc:de:24:41:f0:
                    43:44:48:06:be:a5:84:2f:3c:bf:0f:b1:41:13:d0:
                    61:83:ff:ca:1c:e6:71:34:d3:f3:9c:de:0a:ec:26:
                    d6:e2:1f:bb:0a:0d:ed:57:64:a0:21:87:02:87:2f:
                    24:54:4c:b8:ba:02:b5:ed:99:a5:b1:c2:b2:d0:86:
                    6b:15:51:5a:67:51:f5:cd:50:20:b6:2b:66:24:2d:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:14:88:31:76:8F:FB:7C:F6:36:DF:FE:A4:35:4F:C7:1C:0E:4B:55
            X509v3 Authority Key Identifier:
                keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/502838360A8D11EE901981824AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d0:83:10:63:59:be:5f:86:34:06:25:b5:27:f9:00:ff:e4:
         d3:bb:3f:9a:f2:00:5b:e7:d2:3d:d2:f1:17:46:80:d7:6c:dd:
         87:5a:16:ac:0d:4d:10:a0:e9:6b:e8:09:ca:00:6f:c3:88:18:
         5d:13:0f:8a:06:24:c4:85:f3:fc:6d:97:3c:8c:ef:ac:d6:cc:
         99:63:ac:f4:de:c6:8d:a8:52:38:b2:a3:11:30:28:c1:9d:6e:
         27:3b:10:94:f8:b0:7c:ca:9f:99:e5:9f:ad:db:fb:39:14:0d:
         89:75:5e:93:52:6c:16:63:da:e1:2f:40:a5:96:42:f6:63:b3:
         46:5e:58:87:24:b9:4b:db:31:97:3c:51:28:4e:df:7a:f2:46:
         f4:45:f4:26:be:f5:76:d5:1e:59:5b:e1:9a:17:df:dc:68:45:
         92:6d:e0:b9:0c:8b:fa:db:92:5d:69:52:cf:17:a7:9b:a8:08:
         45:b2:b0:ca:65:78:4a:57:a2:dd:fd:05:0a:e2:05:3f:0f:9a:
         b3:cd:b5:38:cd:a5:a2:a7:3b:7f:9b:c9:6f:d3:5a:21:e2:ec:
         14:1c:48:e6:b8:c3:dd:c5:bd:e2:6d:69:34:72:5b:c5:bb:78:
         60:ea:a8:f9:d2:86:2d:79:66:e9:58:ec:fd:fa:64:f2:43:30:
         48:01:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 08:02:13 2023 by rpki-client on console-fra.rpki-client.org