Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5C30243E488E11ED986654CDF1222468.roa
File:                     5C30243E488E11ED986654CDF1222468.roa (raw, json)
Hash identifier:          niHjneJIO4Yil9FHLv1IpHgflZfOt0MDqPK2+ZQTW+s=
Subject key identifier:   C5:F9:80:1A:FB:B0:8F:9E:D2:64:41:97:8F:04:CD:6F:5E:69:22:34
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       05A3
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5C30243E488E11ED986654CDF1222468.roa
Signing time:             Mon 10 Oct 2022 11:26:19 +0000
ROA not before:           Mon 10 Oct 2022 11:26:15 +0000
ROA not after:            Wed 06 Oct 2032 11:26:15 +0000
asID:                     3320
IP address blocks:        192.142.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 Feb 2023 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Oct 10 11:26:15 2022 GMT
            Not After : Oct  6 11:26:15 2032 GMT
        Subject: CN=6344015b-f87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:6f:2d:d8:c9:8b:f4:db:25:2b:2e:5b:98:
                    20:d6:18:55:2b:96:54:86:66:76:69:b4:3f:20:c4:
                    cd:a0:3b:71:4a:96:32:cb:91:34:5d:8e:a2:a1:df:
                    5f:71:b9:83:e6:8a:fe:c2:91:55:1e:6e:d3:a1:cf:
                    3b:3d:03:6a:f4:54:e8:a8:19:40:c5:ae:79:ec:87:
                    2c:2d:9f:00:7e:cc:df:7f:69:5a:0b:c8:8f:f2:54:
                    aa:ef:63:0b:c4:08:42:59:a4:53:f0:e4:60:97:58:
                    80:b5:7b:a3:49:1a:94:e0:82:c3:2a:2f:77:d3:f8:
                    97:26:95:7a:34:bd:ec:b2:6b:e6:b2:e9:5c:06:7d:
                    c8:7a:a5:b1:a2:d7:82:c7:75:a5:07:78:55:f6:6a:
                    34:5a:3e:d7:d0:d1:b0:cf:f0:2f:f0:79:0a:90:01:
                    a9:84:e6:7b:8d:c0:1b:2a:79:cb:67:04:bf:a1:82:
                    c2:27:07:19:a6:16:85:84:14:d3:be:ea:b4:77:94:
                    a6:24:73:ec:6e:52:3e:b3:48:39:9d:45:6f:51:22:
                    4f:c2:69:ce:a3:50:c6:47:29:22:3b:53:a5:48:fd:
                    6f:5a:24:3a:94:a9:1e:84:2a:b0:c8:2d:8d:1f:a0:
                    2f:49:27:fa:8f:55:a2:4e:02:ad:8d:49:4e:f7:fe:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F9:80:1A:FB:B0:8F:9E:D2:64:41:97:8F:04:CD:6F:5E:69:22:34
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5C30243E488E11ED986654CDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:67:cb:cd:fb:d3:84:47:45:58:3a:11:67:82:18:8c:a2:32:
         bf:5b:2a:9b:29:be:db:f5:a2:62:aa:bc:16:63:55:8b:61:5a:
         a9:5d:2d:d1:f6:3e:79:58:c0:73:fb:15:39:0d:d1:4f:20:bc:
         56:75:f2:e9:21:f6:f7:84:cc:1a:75:57:b4:89:97:3e:52:3c:
         61:f8:c8:0b:be:52:0f:7f:e0:5e:4e:74:8d:1f:d2:fd:74:16:
         3f:8d:f3:b4:9c:a1:e5:19:e8:9f:27:f3:09:3b:1c:41:65:e3:
         2c:de:89:f3:4b:05:26:f3:6b:4f:ce:58:6e:30:40:44:84:83:
         3b:d7:e7:f8:17:69:e9:0c:35:15:f7:36:35:f4:a0:c3:4b:2e:
         54:ed:90:6f:1d:97:83:c2:34:f1:62:e8:4e:3e:2e:56:ff:df:
         cd:af:a9:64:c8:83:e9:31:c3:ee:ec:0a:38:59:bb:61:f1:3b:
         41:a4:f1:5b:b1:5a:f2:3a:a5:54:0d:9a:bc:dc:3a:65:68:95:
         ee:8a:ac:e0:3e:cc:f6:0a:08:d6:e8:7b:e0:dd:52:cf:c3:be:
         d4:44:37:da:92:3c:bc:38:c1:9c:34:67:b7:f1:b1:22:dd:8b:
         ee:bb:d8:3d:05:1c:bd:40:3c:6e:9d:b3:7e:14:96:97:65:37:
         7a:97:c6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org