Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/63C1D890778111EF87DC89B8762E951A.roa
File:                     63C1D890778111EF87DC89B8762E951A.roa (raw, json)
Hash identifier:          EAwDViqNHDxcIhmmQDWq25LPB/VyXip8nZ9UX/NSAaA=
Subject key identifier:   4E:BF:C2:45:DA:6A:16:1C:01:2A:01:F9:95:C6:84:0B:87:4C:E1:4C
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       02
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/63C1D890778111EF87DC89B8762E951A.roa
Signing time:             Fri 20 Sep 2024 18:51:48 +0000
ROA not before:           Fri 20 Sep 2024 18:51:44 +0000
ROA not after:            Fri 25 Sep 2026 18:51:44 +0000
asID:                     55933
IP address blocks:        45.221.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 03:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Sep 20 18:51:44 2024 GMT
            Not After : Sep 25 18:51:44 2026 GMT
        Subject: CN=66edc444-42fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:3b:e7:6a:85:34:e5:38:01:86:59:9d:19:
                    3a:6d:f0:ef:07:71:48:9b:c5:c5:28:20:8b:0e:48:
                    32:4b:57:95:3a:6a:e2:b6:c9:69:4d:1b:ba:99:59:
                    ac:f7:40:34:64:a2:8c:0f:e7:dc:20:08:65:9c:99:
                    e8:67:8d:a2:ba:a1:b3:c2:8b:1d:b6:74:90:38:06:
                    f2:20:67:a5:17:87:d2:b4:82:91:15:dc:0f:30:4d:
                    eb:dc:c3:ef:74:c0:4e:b5:83:5f:c4:1e:85:57:23:
                    cf:ff:52:5b:b0:51:ae:f6:f7:56:9b:87:bf:10:3c:
                    db:2c:07:ff:fd:25:93:fe:c2:39:a7:cb:a0:fd:b0:
                    08:36:b5:51:ae:a1:e9:89:23:75:e1:5d:4d:65:ed:
                    e5:f1:d7:60:52:92:ba:7b:0f:c9:c9:69:94:38:24:
                    5d:d0:0e:0a:bc:06:0f:db:3b:03:33:6c:c0:4c:86:
                    48:e0:ad:38:04:3d:02:85:f1:5f:e9:b8:3f:c6:ce:
                    b5:cc:1e:91:2b:c7:57:ad:aa:6e:cf:4f:56:e3:6a:
                    2a:13:d2:b7:3f:18:1b:47:d7:31:37:72:c8:af:ec:
                    b6:6c:64:81:ed:0d:16:6d:d7:53:f3:b4:cf:d5:1d:
                    01:b8:52:79:78:66:a9:0c:39:95:b0:e8:41:60:cd:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BF:C2:45:DA:6A:16:1C:01:2A:01:F9:95:C6:84:0B:87:4C:E1:4C
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/63C1D890778111EF87DC89B8762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:77:25:35:b4:d3:2c:58:a0:f8:d8:84:c7:f4:3e:11:ba:b9:
         45:2d:da:ad:ae:59:09:03:0b:a4:2d:2e:fc:b3:76:43:55:fe:
         29:a3:db:5c:17:56:4d:7c:7d:51:1c:a0:54:77:bc:51:1e:84:
         92:cf:cb:2a:e1:40:77:79:36:41:21:ce:7c:d7:64:aa:d1:e2:
         55:54:31:60:03:69:63:f4:11:6a:3b:8d:26:45:b5:b2:9f:7a:
         aa:d7:f6:ea:0b:92:aa:a1:3b:a7:70:a7:97:31:bf:01:a7:91:
         03:68:89:9c:6b:2d:fc:30:37:e5:15:1b:c0:ae:f1:fd:97:72:
         4f:e1:e5:e5:0c:dc:44:97:12:76:2c:a8:ea:24:c5:26:ff:9d:
         ee:b8:33:d9:63:be:1c:2f:81:42:b4:bb:a8:d7:99:7c:a7:bb:
         b7:dd:88:08:4e:00:09:c8:d1:6c:e4:f9:d8:18:65:1b:d7:ca:
         42:76:55:2e:48:35:c6:0f:f3:0d:d6:17:72:23:80:48:3d:38:
         5f:63:95:94:ec:56:b2:6e:b7:8b:3e:2b:43:29:79:d6:48:83:
         c3:8d:5a:40:60:68:67:97:12:ec:c8:ec:c4:83:f3:eb:f2:93:
         af:ad:49:82:58:18:08:7e:20:2d:dc:34:26:09:2a:fa:6c:6c:
         b7:16:2c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 06:24:17 2024 by rpki-client on console-fra.rpki-client.org