Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2B07CEE0B95D11EC9A917CC75A40D577.roa
File:                     2B07CEE0B95D11EC9A917CC75A40D577.roa (raw, json)
Hash identifier:          6hXY8G+nATSzc0U6KwJCTSg0pEqQ93vXGMvR9S8KCsQ=
Subject key identifier:   32:FD:C2:CF:31:30:BC:58:75:CC:3B:E0:FE:DF:E6:03:CC:33:D9:01
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       048E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2B07CEE0B95D11EC9A917CC75A40D577.roa
Signing time:             Mon 11 Apr 2022 06:03:55 +0000
ROA not before:           Mon 11 Apr 2022 06:03:50 +0000
ROA not after:            Mon 10 Apr 2028 06:03:50 +0000
asID:                     210619
IP address blocks:        192.142.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Oct 2022 13:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Apr 11 06:03:50 2022 GMT
            Not After : Apr 10 06:03:50 2028 GMT
        Subject: CN=6253c4cb-9cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:ba:88:03:e1:6b:cd:63:93:86:1a:e0:73:
                    0a:91:c8:63:4e:7a:4e:dc:44:1b:ac:9c:8a:5f:75:
                    10:1b:52:48:08:a4:0d:54:a6:ee:2c:bc:4a:a3:20:
                    d0:30:ca:8b:ed:93:0c:ff:8b:7b:6f:f5:c0:67:ca:
                    b0:ea:f1:0d:1e:98:9a:db:0d:08:94:6f:d9:66:79:
                    ec:e9:94:99:4b:34:7b:a0:6d:0d:72:51:e9:d7:87:
                    91:86:a0:10:10:a6:43:53:b6:78:bd:c0:fe:ca:3d:
                    0d:e2:d7:b6:a4:a0:15:4e:3e:ba:64:1f:02:73:de:
                    0f:7a:7e:2f:72:15:10:d7:96:31:a9:68:02:70:98:
                    30:1c:d0:1b:73:17:2a:60:db:6c:34:b5:9f:ca:20:
                    f4:5c:02:27:19:37:9f:ca:46:0d:10:53:08:25:03:
                    53:a1:d9:55:95:2b:3a:a6:7c:31:35:2c:f6:6c:36:
                    e5:d6:65:87:f4:be:50:ae:03:5e:0d:c7:6f:76:8f:
                    97:b2:79:86:62:a1:c0:c5:1f:1b:e2:a8:14:ea:b2:
                    4b:f6:72:06:95:a3:35:24:8f:e9:0f:80:d9:e9:68:
                    fc:00:18:52:84:c9:0f:28:d0:1a:2d:3c:92:a4:7f:
                    9d:4c:4c:0e:05:e0:0a:8a:03:65:cf:04:fe:a1:4a:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FD:C2:CF:31:30:BC:58:75:CC:3B:E0:FE:DF:E6:03:CC:33:D9:01
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2B07CEE0B95D11EC9A917CC75A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:37:8d:77:dc:d5:b3:28:60:2e:f4:be:ab:23:14:47:78:a3:
         56:75:ba:e7:e9:77:2c:ae:86:ab:62:e0:ee:88:7a:fd:6e:80:
         00:a9:7e:5b:94:76:62:25:64:2c:a0:65:03:97:ce:1f:06:7e:
         32:b7:7c:5c:b8:5e:79:98:2e:ea:e7:fe:3b:3f:1c:b2:c3:f6:
         11:08:fe:a4:bc:db:c8:e5:b4:aa:70:be:5f:ef:a1:da:ac:7c:
         6f:92:35:43:f5:0b:de:d2:2c:88:9d:f3:86:2e:3b:63:5d:c5:
         3e:91:e3:46:bb:15:0b:24:f6:b4:d8:d0:f6:c7:de:15:e1:e3:
         8c:53:b2:f5:79:04:3f:25:fa:d2:33:a9:cc:41:19:dc:b7:7d:
         ca:82:f0:81:44:96:1b:cb:a4:02:b9:cb:d5:8f:0b:2a:39:c4:
         cd:0c:4f:2a:98:8b:d9:11:38:eb:58:27:3c:55:7a:68:0e:b7:
         cf:fd:8e:ba:82:87:e2:71:45:0f:6c:cc:85:5a:ff:d1:64:44:
         0d:82:f4:3b:f0:e4:f1:f3:a9:49:41:4e:de:bb:42:24:3c:31:
         72:31:e3:0e:b8:6f:9e:a5:59:4a:63:f5:94:f2:dc:bb:bd:3f:
         6c:81:09:22:b1:2e:0e:34:fc:7c:2b:02:d6:f2:e6:ff:94:bf:
         c1:5e:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org