Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3AE0C366531311EE8AD7811A4AD9E6FC.roa
File:                     3AE0C366531311EE8AD7811A4AD9E6FC.roa (raw, json)
Hash identifier:          i/xS+crsp7X+1ZL0oqTDM1LhjEHpmaXX7iOamMkRqkk=
Subject key identifier:   6B:E7:0E:5F:54:48:2D:C4:49:3C:09:F2:AC:90:20:5C:6A:01:34:7A
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       0185
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3AE0C366531311EE8AD7811A4AD9E6FC.roa
Signing time:             Thu 14 Sep 2023 15:27:35 +0000
ROA not before:           Thu 14 Sep 2023 15:27:32 +0000
ROA not after:            Fri 13 Sep 2024 15:27:32 +0000
asID:                     1239
IP address blocks:        66.251.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Sep 14 15:27:32 2023 GMT
            Not After : Sep 13 15:27:32 2024 GMT
        Subject: CN=65032667-6542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:4a:b2:15:52:c7:29:8d:2c:92:44:93:3c:
                    66:01:3e:3e:9a:d3:8c:96:c7:3e:81:0f:c5:de:a2:
                    38:4e:2b:e4:1b:ec:fd:69:3d:77:b3:11:f9:88:52:
                    0f:0c:92:d9:7a:5e:aa:17:45:4e:70:ec:1f:9a:d3:
                    f5:87:94:09:6e:30:d0:75:7b:14:3c:98:4b:62:fc:
                    0a:9b:f5:ae:da:fd:5c:a4:8e:cb:cd:83:ee:26:69:
                    e4:6b:a5:2a:29:fe:00:60:6b:74:25:b1:a8:6e:0f:
                    69:e6:a5:87:60:f6:25:85:c8:d9:19:d4:57:87:40:
                    40:02:76:71:af:65:1f:e8:d4:87:37:69:f9:fb:54:
                    5a:40:a1:96:61:35:49:53:1b:b9:c9:5a:84:47:14:
                    6d:73:39:27:5f:13:bb:7f:73:ce:6f:4d:c8:f6:f8:
                    41:21:cf:d4:f2:bd:0f:d5:47:6b:83:cb:c4:15:62:
                    d4:b8:aa:54:a1:2b:19:c4:8b:d9:df:ac:0f:34:89:
                    60:75:92:d6:23:35:81:4e:5e:72:4f:bc:f5:11:d7:
                    dd:87:f6:75:de:84:ec:9d:ee:3e:bc:72:f1:2f:81:
                    80:0c:b2:13:66:33:7e:5c:6e:28:eb:c8:7f:04:67:
                    ca:c9:fc:71:0e:fe:7d:89:87:39:8f:ca:d7:2c:aa:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:0E:5F:54:48:2D:C4:49:3C:09:F2:AC:90:20:5C:6A:01:34:7A
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3AE0C366531311EE8AD7811A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.251.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:3b:72:ec:54:8d:4a:38:4b:3d:15:e2:00:3a:b8:ac:7a:20:
         c2:22:b0:59:3e:9a:c6:1b:2e:19:20:47:31:73:53:8d:09:af:
         e4:b5:30:e6:03:f3:a5:8d:df:c0:35:f8:8f:5f:f7:10:31:04:
         9f:9a:c2:aa:64:7b:8e:95:ad:8b:e5:fc:f0:2e:d0:4f:00:2b:
         49:e6:8e:48:83:d2:8b:e0:6c:c9:0d:f5:e7:40:94:4f:79:c7:
         d8:7f:ab:5e:87:f7:c0:7c:97:4e:26:e3:b9:d7:b8:8b:d0:e8:
         40:f5:40:e5:50:ff:12:dc:24:ac:fc:16:d0:f5:cd:9d:4a:f5:
         ee:83:e1:60:13:87:d1:a3:83:e7:d3:24:44:45:8e:9f:a0:3d:
         67:75:4e:fc:bf:c9:97:0f:54:02:f8:ce:32:fd:48:6d:88:85:
         66:42:49:5c:20:39:0e:d7:a2:a0:0c:71:47:78:24:d0:f6:db:
         d9:e2:04:bd:94:85:48:fb:40:1e:d2:2d:91:bc:fa:9f:01:3b:
         8d:4c:32:56:1d:1b:c2:d0:c9:f6:58:f9:e9:6a:78:e9:90:e4:
         6f:c4:d9:d9:ce:6d:a7:55:e2:50:5a:c6:06:32:2e:fe:9b:7f:
         c1:63:cd:1d:80:09:17:c1:94:8c:c9:5d:54:3b:16:da:ed:d7:
         b1:b8:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 11:11:18 2023 by rpki-client on console-ams.rpki-client.org