Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/360E1CA42EE211ED973049C5F1222468.roa
File:                     360E1CA42EE211ED973049C5F1222468.roa (raw, json)
Hash identifier:          L3PCqBAD8PWjRjdoTIaBcSOBW9GKGRNJVp0yissn61c=
Subject key identifier:   5C:B3:D2:34:BA:A5:CF:C3:3B:BB:91:FC:3E:A4:DF:49:5C:A6:1C:D1
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       0574
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/360E1CA42EE211ED973049C5F1222468.roa
Signing time:             Wed 07 Sep 2022 19:21:02 +0000
ROA not before:           Wed 07 Sep 2022 19:20:59 +0000
ROA not after:            Tue 07 Sep 2032 19:20:59 +0000
asID:                     7018
IP address blocks:        192.142.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Oct 2022 11:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Sep  7 19:20:59 2022 GMT
            Not After : Sep  7 19:20:59 2032 GMT
        Subject: CN=6318ef1e-49d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:9d:fc:29:11:0b:95:4c:7e:7c:aa:91:ac:
                    96:ea:a1:9e:7d:43:b1:0f:7f:03:46:2a:47:9b:9a:
                    c0:30:0a:39:a6:d0:51:20:4d:66:e2:3f:d0:cf:aa:
                    d4:92:03:49:7f:45:d7:61:07:52:04:e7:05:56:e1:
                    7d:33:05:71:19:36:6f:1c:00:d0:43:ae:47:65:5a:
                    4a:2c:ae:27:20:f5:5c:8d:26:bf:c3:b2:96:68:96:
                    4e:a3:45:d5:4a:3b:b3:6f:0c:5c:01:03:a9:13:73:
                    de:07:1d:21:aa:16:1d:14:0a:79:2b:ba:36:47:38:
                    f1:97:cf:78:e6:9c:28:73:c7:79:24:27:9e:25:17:
                    cc:56:67:dc:ff:2d:f5:2b:d3:d7:50:2b:56:3f:d1:
                    df:2a:a3:b6:1a:f2:c6:66:c6:c1:f6:e8:d6:f3:7a:
                    cc:67:fc:9a:b0:2f:68:89:bf:17:73:a2:ca:82:98:
                    59:6c:69:70:92:8c:d3:52:11:63:f5:2a:1e:29:af:
                    ec:28:fb:59:76:39:79:3e:11:36:76:bc:0f:72:46:
                    11:5c:2e:a3:17:68:3b:30:0a:23:f2:8c:d0:31:6a:
                    74:32:61:c8:2f:f6:2f:bb:17:43:46:9e:8b:75:8f:
                    cd:e2:6b:2f:3e:0b:dc:51:2f:f8:63:13:c7:a5:90:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:D2:34:BA:A5:CF:C3:3B:BB:91:FC:3E:A4:DF:49:5C:A6:1C:D1
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/360E1CA42EE211ED973049C5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:d3:1b:8d:05:dc:1b:39:61:de:57:fc:e8:ff:d5:3f:d6:
         ca:58:e6:90:84:cd:84:f4:06:69:8b:a4:f9:18:46:87:e1:a7:
         d4:a5:09:0a:10:ae:04:cd:a3:36:85:0b:21:9d:88:7d:31:ab:
         79:9c:2d:e7:3e:f6:80:b9:d0:86:24:b9:32:d2:f1:56:aa:5e:
         c2:fe:19:13:c7:2d:58:2d:b0:cd:db:88:de:6b:a1:e0:75:9d:
         0c:ad:86:54:72:c7:ce:1c:b9:9b:27:44:5c:ae:0d:1d:90:8f:
         75:b0:66:5d:1c:bd:3f:6d:4a:af:96:ab:80:c3:86:d3:79:d6:
         9b:e7:00:05:29:77:4b:50:8b:28:6e:ed:0a:2c:61:c3:57:5d:
         e9:1b:ad:97:0e:71:8e:e0:23:f0:8d:db:d1:b5:cc:38:a4:32:
         9d:a1:4c:51:42:60:e6:8d:1a:1b:44:b2:74:7d:91:97:98:2d:
         30:a8:52:f3:61:04:59:9c:a2:f9:05:3c:cc:94:43:99:e4:1c:
         93:74:e1:eb:dc:f1:14:64:56:a5:84:03:cc:d6:4c:bb:d4:fe:
         ec:c8:84:28:df:39:09:e6:17:9a:77:32:58:cf:7a:f1:80:86:
         8a:8b:2c:32:eb:1c:c9:53:2f:1d:43:70:a7:98:8c:fa:3f:6d:
         85:03:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org