Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/985E2204C3FC11E9A734FF81F8AEA228.roa
File:                     985E2204C3FC11E9A734FF81F8AEA228.roa (raw, json)
Hash identifier:          eJ6J1EgsvpaT7KJ6drdMuJe/PbY1XvKqNrwJdF7cfic=
Subject key identifier:   AA:9E:AC:56:BF:77:71:36:96:01:BE:B1:8A:1D:A2:B1:F3:3E:08:0B
Certificate issuer:       /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial:       02
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/985E2204C3FC11E9A734FF81F8AEA228.roa
Signing time:             Wed 21 Aug 2019 10:15:27 +0000
ROA not before:           Wed 21 Aug 2019 10:15:20 +0000
ROA not after:            Tue 21 Aug 2029 10:15:20 +0000
asID:                     16637
IP address blocks:        152.108.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Dec 2023 19:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
        Validity
            Not Before: Aug 21 10:15:20 2019 GMT
            Not After : Aug 21 10:15:20 2029 GMT
        Subject: CN=5d5d19bf-57cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:86:67:c0:52:bc:4b:51:9a:8c:e1:a1:48:
                    b5:48:f4:d1:81:49:e9:3b:09:18:66:5c:ea:57:42:
                    64:e7:d0:1a:c8:6e:51:2f:09:7a:05:2f:b2:5d:36:
                    f5:65:d2:27:26:87:5c:44:9b:b9:53:20:73:5d:21:
                    f8:f2:70:70:2a:6b:ea:99:c6:61:33:0a:87:c2:fd:
                    17:1c:af:d3:fe:c2:4b:f3:d7:f4:d2:8b:72:69:96:
                    a7:9e:2f:95:66:4d:5c:9b:e6:e2:9f:57:28:85:10:
                    42:06:95:19:eb:be:a1:9d:a0:80:c7:53:c6:dc:54:
                    d7:8a:c1:26:84:3d:db:c4:a3:e9:e7:a3:43:42:94:
                    cd:da:d9:a3:5a:9d:3f:27:50:8b:11:ed:d7:bd:49:
                    b5:46:92:7a:26:86:71:79:b2:f1:15:6e:4a:33:e2:
                    10:37:d8:07:44:fc:09:0a:c3:00:06:75:2c:db:8e:
                    42:7f:c3:08:be:1f:20:72:03:b8:f4:a9:1b:49:21:
                    af:64:f0:5f:b6:52:9a:aa:de:a6:6b:de:05:4f:49:
                    56:ad:73:ff:e6:ee:4d:f0:33:d7:0c:84:c4:e8:8d:
                    7f:e0:97:bb:0b:64:8b:2a:e9:f1:69:f2:08:a4:2d:
                    f5:c9:c5:3c:e7:cf:93:ee:9f:52:cd:b5:85:34:d8:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:AC:56:BF:77:71:36:96:01:BE:B1:8A:1D:A2:B1:F3:3E:08:0B
            X509v3 Authority Key Identifier:
                keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/985E2204C3FC11E9A734FF81F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.108.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:03:83:7d:6d:10:85:68:1a:01:0f:96:5f:cf:5a:24:5a:ea:
         ef:af:c0:ce:df:9b:51:4a:1e:88:32:b4:6c:07:e7:2a:0c:e3:
         9f:c5:28:2d:44:f7:3e:ab:74:0e:a2:97:06:2e:26:0d:97:b6:
         af:d1:7b:2f:77:06:c8:07:27:58:89:ad:b8:1a:ba:b5:a4:66:
         0e:8b:81:cb:c8:2b:f5:5b:6b:58:95:cb:26:83:70:61:04:ba:
         34:52:12:02:30:8a:e3:fe:77:35:a5:58:b5:4c:ea:da:ad:83:
         84:8e:fc:fb:b2:cc:1f:20:21:c8:e9:be:56:cb:bb:d9:23:85:
         a1:a1:b6:03:f1:4a:70:aa:6f:e6:d0:6b:25:f7:99:25:f6:46:
         29:a7:bf:45:b4:93:e1:82:6a:59:32:d9:a2:59:05:6c:b1:9f:
         b0:f7:e3:8d:b0:03:ec:d5:fe:e1:32:3c:2e:e4:9b:1c:c6:44:
         31:5f:e0:34:f9:ff:ee:49:62:0b:bf:6c:77:b5:db:de:fd:50:
         ea:4f:e9:c3:72:c0:8d:ec:4e:0a:92:5e:69:da:d4:70:35:79:
         a7:e5:f9:b8:82:42:d4:83:13:b2:59:00:2a:aa:ea:a4:7d:3f:
         e1:19:24:3f:97:78:e2:bc:52:fe:38:78:36:95:94:dd:a7:4c:
         bb:d4:09:00
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
ODAzN0FSMTEwLwYDVQQFEyg2RUYwN0NGMjA3NkNDNUE2MDk2QjI1NzJBRTA4OTVG
RDY3M0Y0NzEyMB4XDTE5MDgyMTEwMTUyMFoXDTI5MDgyMTEwMTUyMFowGDEWMBQG
A1UEAxMNNWQ1ZDE5YmYtNTdjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMp0hmfAUrxLUZqM4aFItUj00YFJ6TsJGGZc6ldCZOfQGshuUS8JegUvsl02
9WXSJyaHXESbuVMgc10h+PJwcCpr6pnGYTMKh8L9Fxyv0/7CS/PX9NKLcmmWp54v
lWZNXJvm4p9XKIUQQgaVGeu+oZ2ggMdTxtxU14rBJoQ928Sj6eejQ0KUzdrZo1qd
PydQixHt171JtUaSeiaGcXmy8RVuSjPiEDfYB0T8CQrDAAZ1LNuOQn/DCL4fIHID
uPSpG0khr2TwX7ZSmqrepmveBU9JVq1z/+buTfAz1wyExOiNf+CXuwtkiyrp8Wny
CKQt9cnFPOfPk+6fUs21hTTYzH0CAwEAAaOCAmswggJnMB0GA1UdDgQWBBSqnqxW
v3dxNpYBvrGKHaKx8z4ICzAfBgNVHSMEGDAWgBRu8HzyB2zFpglrJXKuCJX9Zz9H
EjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjgwMzcvMTE1OTcwN0VDM0ZDMTFFOUE5NzI2OTgxRjhBRUEyMjgvYnZCODhn
ZHN4YVlKYXlWeXJnaVZfV2NfUnhJLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
YnZCODhnZHN4YVlKYXlWeXJnaVZfV2NfUnhJLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjgwMzcvMTE1OTcwN0VDM0ZDMTFFOUE5NzI2OTgxRjhBRUEy
MjgvOTg1RTIyMDRDM0ZDMTFFOUE3MzRGRjgxRjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAmGzUMA0GCSqGSIb3DQEBCwUAA4IBAQCEA4N9
bRCFaBoBD5Zfz1okWurvr8DO35tRSh6IMrRsB+cqDOOfxSgtRPc+q3QOopcGLiYN
l7av0XsvdwbIBydYia24Grq1pGYOi4HLyCv1W2tYlcsmg3BhBLo0UhICMIrj/nc1
pVi1TOrarYOEjvz7sswfICHI6b5Wy7vZI4WhobYD8Upwqm/m0Gsl95kl9kYpp79F
tJPhgmpZMtmiWQVssZ+w9+ONsAPs1f7hMjwu5JscxkQxX+A0+f/uSWILv2x3tdve
/VDqT+nDcsCN7E4Kkl5p2tRwNXmn5fm4gkLUgxOyWQAqquqkfT/hGSQ/l3jivFL+
OHg2lZTdp0y71AkA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org