Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6CB0478A173211EEAA886C5A4AD9E6FC.roa
File:                     6CB0478A173211EEAA886C5A4AD9E6FC.roa (raw, json)
Hash identifier:          OmCiscQpWPG5N3cUilDcWVg5AbjTUni3dIjm9Ykh38Y=
Subject key identifier:   AE:1B:34:28:89:0C:64:C5:E6:3C:29:F9:C8:43:46:87:40:AD:FF:17
Certificate issuer:       /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial:       03D6
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6CB0478A173211EEAA886C5A4AD9E6FC.roa
Signing time:             Fri 30 Jun 2023 10:39:43 +0000
ROA not before:           Fri 30 Jun 2023 10:39:39 +0000
ROA not after:            Sun 30 Jun 2024 10:39:39 +0000
asID:                     21082
IP address blocks:        156.0.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
        Validity
            Not Before: Jun 30 10:39:39 2023 GMT
            Not After : Jun 30 10:39:39 2024 GMT
        Subject: CN=649eb0ef-ad5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:18:43:39:ee:da:45:9c:9b:64:3f:90:fb:
                    a3:f5:ca:d3:5a:0f:84:1a:af:5a:5f:18:bc:3a:28:
                    60:49:b7:55:08:23:44:88:93:da:aa:5c:d7:34:56:
                    bc:15:65:23:f6:d1:71:f1:6e:ec:61:75:93:cb:d7:
                    ae:63:51:d3:7d:b3:44:51:af:7c:bc:0c:4d:30:cc:
                    8a:cc:d0:93:ec:a8:96:ca:50:72:77:53:24:d9:72:
                    c8:55:77:7a:34:14:e5:ba:12:53:79:ce:c9:45:5b:
                    db:2b:9e:db:d1:c4:f8:db:df:37:3f:4c:65:f0:29:
                    f4:46:8d:ee:e4:bd:83:ca:9c:fa:32:b4:43:fc:43:
                    01:63:8c:c6:81:c9:84:a1:e9:5d:30:19:40:6a:ce:
                    0e:c6:c0:38:13:5e:b9:43:e1:c8:78:81:6b:f3:c7:
                    16:6d:7e:82:5c:f1:34:22:92:ff:88:dd:0e:05:b3:
                    0e:8b:b7:b6:f1:6b:c5:ee:b4:21:b0:82:e7:54:b3:
                    23:a8:9f:a8:df:22:6b:46:40:d5:8a:e9:97:b5:ae:
                    0d:d0:65:f1:02:fc:ae:71:54:e9:e5:25:e1:ed:49:
                    09:f9:13:63:21:0f:40:26:43:f3:d0:9f:e5:07:3b:
                    86:7b:34:9c:bc:e7:bd:25:8d:ad:ec:be:21:e4:5b:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1B:34:28:89:0C:64:C5:E6:3C:29:F9:C8:43:46:87:40:AD:FF:17
            X509v3 Authority Key Identifier:
                keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6CB0478A173211EEAA886C5A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:ae:99:96:56:52:b5:d3:7c:b6:68:c7:88:12:70:07:17:
         51:16:f4:c2:4f:e1:2d:af:2c:54:42:ea:80:ba:ea:d6:1e:47:
         84:f9:5b:27:5a:14:bd:f7:98:ff:dc:26:2e:3d:44:fb:ac:e0:
         2f:39:7b:2b:69:e1:8a:71:42:62:40:3b:d7:78:cb:45:58:97:
         8a:b9:c4:46:b1:87:1d:89:2b:59:3d:ba:0c:be:96:18:4b:6f:
         ee:2f:c2:07:e0:99:0d:b9:1c:16:fd:c0:75:d0:88:54:a2:0f:
         9d:69:4d:95:b4:b5:c7:ad:5a:34:c1:a4:92:c4:f3:3d:cc:74:
         96:82:14:c4:7c:3b:6b:2b:93:eb:0e:d5:12:ae:41:8d:9f:57:
         4f:3c:8e:49:10:8a:c8:dd:21:7d:a7:d9:12:29:25:3c:62:28:
         55:19:d8:49:85:b0:f5:66:eb:24:dc:6b:ed:67:e3:ac:3c:32:
         c2:4c:2e:54:fe:01:93:38:91:7f:d1:b4:d7:71:b2:4e:c5:a3:
         4c:af:81:c5:92:4d:57:1d:5f:2e:8c:f1:5d:d9:8c:f0:b6:40:
         06:95:c9:27:29:ec:2c:5f:32:fc:59:df:55:c0:70:cd:25:4f:
         fe:87:9c:c4:bc:bf:20:43:af:2e:16:fa:f9:33:2d:a4:c9:fa:
         23:69:98:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 13:58:53 2023 by rpki-client on console-ams.rpki-client.org