Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B7090A369AB711ECA75180C55A40D577.roa
File:                     B7090A369AB711ECA75180C55A40D577.roa (raw, json)
Hash identifier:          IT/3k/HD1P+up2O8O/osH3gZEBorLkatniR+Tfq4BhI=
Subject key identifier:   6A:52:3E:48:4C:D9:BB:32:7F:D1:37:4C:07:8E:25:82:17:A0:9C:37
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       0452
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B7090A369AB711ECA75180C55A40D577.roa
Signing time:             Thu 03 Mar 2022 06:03:58 +0000
ROA not before:           Thu 03 Mar 2022 06:03:53 +0000
ROA not after:            Mon 13 Mar 2028 06:03:53 +0000
asID:                     1239
IP address blocks:        192.142.8.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Aug 2022 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Mar  3 06:03:53 2022 GMT
            Not After : Mar 13 06:03:53 2028 GMT
        Subject: CN=62205a4e-67bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:ec:22:6f:b6:72:49:3c:8d:30:85:ce:6e:
                    09:a0:7e:36:9c:70:2f:11:4b:52:ef:b5:f3:4a:fa:
                    09:27:ab:4e:b2:99:cf:37:03:93:69:4e:77:82:5b:
                    e8:c2:05:2b:1b:1b:9d:62:6f:1b:8c:4b:d5:07:c8:
                    82:a8:cf:54:10:ab:22:5e:4c:6c:26:aa:e6:b3:65:
                    7f:a2:7b:38:28:16:a8:71:5d:2d:3a:bb:f9:83:e8:
                    b7:21:3a:77:22:56:25:65:e7:f0:70:61:02:c3:f0:
                    84:ea:e3:5f:d2:a5:cb:21:b5:9f:84:12:75:e7:31:
                    47:6e:12:29:33:8e:60:4c:33:ae:51:c5:de:e6:90:
                    08:d3:ee:94:2a:d4:fd:36:b8:b8:a2:af:52:c3:f3:
                    40:a1:de:01:d3:c2:ed:54:41:28:e2:31:60:49:2c:
                    55:ee:12:12:97:d6:2e:ca:be:0f:d7:61:40:a8:7e:
                    e2:15:96:93:b6:0e:8a:40:83:40:e2:0a:19:bd:8a:
                    7f:16:b4:19:6b:25:6b:c7:16:15:11:06:cf:50:3c:
                    61:49:f7:e1:be:fe:bb:b7:2d:32:1a:ac:8b:a3:41:
                    c0:0d:fc:8d:e4:66:44:e3:2e:0e:0b:4a:71:9a:40:
                    bc:db:48:1a:07:bd:14:e4:74:2e:ae:9d:fa:d9:80:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:3E:48:4C:D9:BB:32:7F:D1:37:4C:07:8E:25:82:17:A0:9C:37
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B7090A369AB711ECA75180C55A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:9c:17:56:71:02:30:80:fd:e7:47:b2:65:e3:be:cb:a0:
         16:4a:3f:e9:c3:db:23:fa:10:2c:ae:f1:25:7f:95:f6:04:07:
         2d:1a:24:d1:3d:c8:db:4a:fb:34:dc:cc:7d:01:39:9d:d2:52:
         11:07:f2:00:97:0f:b2:8b:df:27:7e:1f:1b:17:d6:62:18:2f:
         32:d7:6f:20:72:01:78:76:01:11:17:26:7a:51:1b:f0:49:5d:
         34:35:1b:32:62:be:3f:5a:51:51:5f:90:23:a1:93:c9:15:d1:
         ca:5e:fd:03:32:46:b3:f9:47:fb:db:25:d2:b2:1c:eb:9f:27:
         94:fc:df:7c:59:f0:f8:10:85:44:d9:05:87:ca:99:39:1a:3e:
         e1:5c:5e:97:a0:ad:79:83:b9:54:f4:e5:04:d9:a7:cf:bd:7a:
         14:ec:48:f5:b0:a7:cb:23:a8:45:e8:48:7f:d2:85:6f:35:fb:
         40:33:39:e3:bf:6e:09:5f:37:18:e9:2f:31:0d:b2:9e:32:fb:
         15:aa:44:32:d3:6d:85:69:00:62:74:f4:e5:47:f6:03:19:3a:
         95:8b:05:51:dc:9b:2c:55:b3:20:25:08:fb:95:89:13:80:93:
         8d:f1:ab:ce:3b:f4:aa:63:ce:5b:fc:ca:ae:74:17:4f:03:78:
         b2:58:dd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org