Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F62ACC96E1B011ECBE43A2E3F1222468.roa
File:                     F62ACC96E1B011ECBE43A2E3F1222468.roa (raw, json)
Hash identifier:          HJj9C1XvyicoF5T9a1Ry8CHFT9iQHfyNLDa1HcD7LBc=
Subject key identifier:   3B:F3:18:81:63:E9:01:12:F1:E7:3E:42:FB:6E:EE:9B:DE:BE:B7:F1
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       04CF
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F62ACC96E1B011ECBE43A2E3F1222468.roa
Signing time:             Wed 01 Jun 2022 13:44:30 +0000
ROA not before:           Wed 01 Jun 2022 13:44:25 +0000
ROA not after:            Wed 09 Jun 2027 13:44:25 +0000
asID:                     22773
IP address blocks:        192.142.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Jul 2022 06:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Jun  1 13:44:25 2022 GMT
            Not After : Jun  9 13:44:25 2027 GMT
        Subject: CN=62976d3e-d538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:77:7b:e4:5e:62:1c:07:3b:2a:39:56:03:57:
                    1a:01:8e:6e:e8:03:d0:6c:3d:26:70:65:95:da:0c:
                    6f:82:e4:bf:98:76:ab:6c:e7:80:08:bf:42:5e:42:
                    b3:ea:5a:ab:0f:e5:a3:af:12:65:d2:d4:dc:8e:70:
                    93:50:56:be:e6:16:e6:ab:ba:10:a8:0e:d6:ae:8b:
                    82:61:ec:64:fb:db:16:8b:6d:be:3b:93:eb:7f:6b:
                    ae:bf:79:0e:7a:50:c2:b3:28:dd:40:e2:9a:6c:5f:
                    c6:aa:17:53:e7:91:fb:9a:a6:a2:ea:91:18:87:33:
                    23:22:9e:d8:a5:de:cc:e9:29:0e:1c:f4:5a:13:ea:
                    f0:17:0d:9c:ef:36:9c:b3:76:78:fb:33:79:c7:fc:
                    6e:38:c4:ca:27:e1:69:91:41:e8:b8:16:1f:67:fb:
                    2f:32:f5:fe:1e:cd:e2:39:77:ab:61:07:f1:07:2a:
                    4c:66:24:c8:59:c7:b2:35:3d:2f:38:33:6a:d1:17:
                    9f:f8:d5:85:6f:b4:7e:f4:dd:e4:18:c1:b4:d5:16:
                    93:2f:b7:7a:76:06:af:f6:30:f1:20:01:7f:c3:f8:
                    2e:d5:1a:66:ef:c8:1c:e3:77:16:1e:96:81:7a:13:
                    41:13:3e:f5:50:16:57:24:be:4e:66:c3:6d:38:fb:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F3:18:81:63:E9:01:12:F1:E7:3E:42:FB:6E:EE:9B:DE:BE:B7:F1
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F62ACC96E1B011ECBE43A2E3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:80:1f:0f:8e:1a:8b:eb:37:f6:4f:54:7e:7a:4f:fd:f4:
         d8:17:da:1e:bb:1d:6c:4a:93:42:26:56:96:d2:88:05:c9:4a:
         3e:71:d0:95:60:c7:70:ed:b2:0c:d3:76:ec:0c:f6:5a:a4:cc:
         ce:55:5e:b5:1c:a4:01:fe:92:2d:cb:31:51:6c:c5:fe:ab:95:
         a2:99:95:f4:51:92:0c:14:15:08:2b:c6:98:ec:5d:31:d3:4f:
         e2:35:fe:92:1e:6f:46:63:31:72:a0:1d:77:47:1f:ef:fa:f9:
         e8:66:70:e8:4c:4a:f8:3a:22:25:2d:95:76:80:0b:e2:d3:44:
         49:d5:51:49:f3:f9:e9:99:f5:80:7b:4f:9c:60:c2:5c:df:26:
         9e:b4:fe:e9:c2:56:ba:eb:fd:32:e9:15:f0:57:2d:8e:7b:c8:
         cf:04:38:c6:78:12:30:61:20:77:fb:96:70:37:c8:53:8a:af:
         45:91:03:4c:c2:15:fc:d9:0a:34:31:7f:53:32:f1:62:e9:82:
         a6:e3:ba:8d:77:f0:0b:53:d5:a6:0c:0b:53:4c:5c:c1:35:52:
         f1:2a:ec:64:32:ed:87:78:2d:4d:64:b4:6a:d4:b7:b7:0a:d1:
         c1:d5:eb:03:e3:d9:79:1c:52:ab:61:eb:f7:0c:4f:90:fe:8d:
         69:31:d6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org