Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/1A026D82289111EDB4E78E96F1222468.roa
File:                     1A026D82289111EDB4E78E96F1222468.roa (raw, json)
Hash identifier:          XVeSPQPHO1ZPK+ujVr5KB5zd3FbxQ9/WGt3QHvy88Bo=
Subject key identifier:   3B:0C:65:51:CE:A5:F1:8C:FB:10:7E:96:6F:8E:EE:54:D6:2C:B4:EE
Certificate issuer:       /CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
Certificate serial:       02
Authority key identifier: 0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/1A026D82289111EDB4E78E96F1222468.roa
Signing time:             Tue 30 Aug 2022 18:25:19 +0000
ROA not before:           Tue 30 Aug 2022 18:25:08 +0000
ROA not after:            Sun 29 Aug 2032 18:25:08 +0000
asID:                     328111
IP address blocks:        169.239.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 30 Aug 2022 22:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
        Validity
            Not Before: Aug 30 18:25:08 2022 GMT
            Not After : Aug 29 18:25:08 2032 GMT
        Subject: CN=630e560f-ac8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:11:f9:5b:6b:0d:4b:ba:84:72:46:71:50:
                    83:0b:16:43:14:b9:22:8f:6f:ca:94:27:8f:47:56:
                    8a:63:17:34:1d:66:a0:da:2f:5a:1b:ae:31:08:5c:
                    39:4b:25:fb:29:9f:97:59:82:a1:32:22:be:d5:e6:
                    73:62:40:8e:fa:68:77:6e:6d:de:95:e9:89:8c:e5:
                    28:96:7c:49:78:34:4f:1c:fa:77:e5:6f:21:a5:18:
                    8f:9d:1b:95:5f:07:a9:90:b8:4e:21:6b:e5:17:b5:
                    88:38:54:3f:16:41:da:6a:e2:a6:bc:bc:df:f2:05:
                    c2:30:af:bd:39:45:10:ea:a1:48:ea:db:92:4f:44:
                    ba:fe:d6:f7:b1:87:9e:97:d6:d9:ed:a0:bb:44:fe:
                    58:50:59:d3:76:ad:6e:33:a5:09:23:68:1c:02:14:
                    13:62:f2:b5:ed:36:8e:3a:2d:67:48:6f:63:7c:5c:
                    4f:d5:3c:60:f0:04:17:6c:be:e2:56:a7:a2:ca:37:
                    5b:ee:1a:20:d4:1f:dc:8a:10:d9:39:0a:43:66:40:
                    5d:0f:60:18:bd:a1:31:e4:4d:7a:ff:76:56:a2:24:
                    e7:eb:e4:2b:85:49:31:ee:27:e8:35:a2:9c:0f:c0:
                    34:c9:8f:7f:f4:19:de:95:11:2b:d4:9e:56:c9:46:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:65:51:CE:A5:F1:8C:FB:10:7E:96:6F:8E:EE:54:D6:2C:B4:EE
            X509v3 Authority Key Identifier:
                keyid:0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/1A026D82289111EDB4E78E96F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:22:de:f6:7b:6a:ac:5c:42:ec:70:80:b3:94:d0:64:34:46:
         de:9f:9c:1d:83:79:54:65:a8:51:76:72:8e:29:75:9e:1f:92:
         36:47:5a:cb:3c:f6:17:6e:eb:08:38:01:a6:12:34:e9:74:83:
         de:7d:b7:fc:3d:e5:38:7c:4a:60:cb:c5:6a:2b:99:b9:59:b0:
         26:b0:66:5b:4c:e3:1c:93:c3:bc:60:5d:4a:58:2a:14:2d:1d:
         f5:b3:1f:39:82:d3:78:9d:09:5a:fe:6b:5d:a9:f7:0d:b5:46:
         7d:97:f9:ba:eb:14:3e:41:1e:b4:ba:d0:9a:94:f2:c2:1b:d3:
         65:6a:07:c6:ae:2c:b1:6e:ef:84:16:70:6d:3e:52:0d:ec:9e:
         24:10:6b:2f:ca:69:38:e4:8a:6e:8e:69:f9:cc:1e:44:64:3a:
         0a:eb:01:e4:21:3a:f6:77:62:7b:0b:e5:fd:6c:60:9e:21:11:
         57:38:5b:9b:f0:55:83:16:69:9f:2e:80:dd:21:ea:db:34:b1:
         9e:1d:33:bb:1e:ee:bc:2c:75:bc:e9:a8:53:cd:f4:a4:8a:1a:
         2a:cf:26:6c:63:5b:0d:f3:51:2c:20:16:02:5c:fa:0a:ac:72:
         71:53:b0:b9:34:80:91:1e:0d:8f:b2:fb:04:03:92:0f:6c:32:
         10:b9:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org