Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/33258016B8F511ED858495EBF1222468.roa
File:                     33258016B8F511ED858495EBF1222468.roa (raw, json)
Hash identifier:          06HrrJ5jMXHtUA6wGNy2SErPi6lr9A3l7Czd6ZXQtyI=
Subject key identifier:   54:48:CB:9B:AA:30:37:FA:C0:EE:66:98:1D:5C:BC:8A:E1:2B:AF:5F
Certificate issuer:       /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial:       02
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access:    rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/33258016B8F511ED858495EBF1222468.roa
Signing time:             Thu 02 Mar 2023 12:24:38 +0000
ROA not before:           Thu 02 Mar 2023 12:24:35 +0000
ROA not after:            Tue 10 Mar 2026 12:24:35 +0000
asID:                     33763
IP address blocks:        160.242.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
        Validity
            Not Before: Mar  2 12:24:35 2023 GMT
            Not After : Mar 10 12:24:35 2026 GMT
        Subject: CN=64009586-9847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:b8:cd:d5:a2:72:0f:ec:db:f8:19:c1:f8:
                    9c:e8:1b:ea:ac:63:05:7c:f3:eb:45:73:1a:d5:45:
                    9c:98:13:a5:e9:94:b1:c7:20:cb:84:b8:a5:cd:4d:
                    8b:92:5c:13:43:c2:cc:6c:72:1b:d3:99:70:d1:f1:
                    8a:6a:d7:78:29:37:8c:3a:28:82:a0:2c:28:29:34:
                    5e:8a:02:d4:10:81:4a:45:f0:ce:b8:94:2a:42:7e:
                    c3:d9:65:6a:26:5e:ae:c3:b8:87:c3:4f:ca:ed:49:
                    e3:c6:93:62:6c:85:32:b6:94:e2:74:4e:61:97:68:
                    77:1d:5d:5d:f2:c4:76:7e:5f:3f:79:e4:12:2d:68:
                    2b:a7:0e:29:d5:5c:f8:e7:88:12:64:b7:08:d6:44:
                    f4:99:23:e8:5d:a8:69:2e:9c:62:de:e0:6a:fe:68:
                    18:f3:28:dc:37:1a:06:8f:78:cd:35:2a:4c:ad:eb:
                    d5:0a:17:f8:94:93:ac:fc:16:5b:9a:fc:45:4c:d6:
                    2c:85:ef:9d:36:22:db:70:29:23:c7:61:00:f5:3e:
                    f8:38:11:e5:d8:0b:af:3a:b7:79:7b:bc:33:1e:b9:
                    5e:ae:5e:2f:8b:1b:3e:bc:cc:96:58:da:36:21:aa:
                    39:f5:01:29:de:5b:35:7f:74:f4:d2:18:9e:8a:64:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:CB:9B:AA:30:37:FA:C0:EE:66:98:1D:5C:BC:8A:E1:2B:AF:5F
            X509v3 Authority Key Identifier:
                keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/33258016B8F511ED858495EBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:e4:1a:ee:d1:80:3a:7a:ca:0b:05:63:a2:5c:ab:91:50:
         7e:ce:5e:c8:5b:5f:89:87:0a:c1:27:1b:33:59:ca:35:53:fc:
         ca:d9:8e:a7:f4:48:41:5c:5f:ac:99:83:a1:dc:25:05:e6:58:
         90:3e:36:c2:ef:d4:30:44:17:15:24:ce:e9:f0:f8:b6:fe:26:
         e1:fe:e5:96:66:06:81:1b:8d:b1:6e:47:cb:aa:6b:fb:77:4c:
         88:f5:11:66:62:d5:b8:e9:f1:05:45:7f:9b:b6:5b:6e:0b:a0:
         85:7a:72:f4:59:09:ee:bc:1c:94:5e:9b:ee:67:0d:16:7b:32:
         bd:fc:db:25:5f:10:ee:65:7d:68:f4:a3:e4:95:ee:80:aa:d9:
         a1:fd:a8:e2:b0:5b:5a:e9:ec:11:5c:b4:4a:5c:0f:55:f6:96:
         29:cc:11:49:f0:a1:61:7c:9f:ee:fd:36:36:55:08:c8:aa:36:
         51:a5:b2:6a:47:fd:dd:ab:f6:1e:67:d3:ca:dd:fa:f6:c6:b5:
         52:00:c5:6c:47:07:02:bb:00:81:d1:4a:bd:4d:d8:2a:6f:6f:
         42:29:b9:6d:a0:1e:b0:da:52:73:3e:78:78:4b:0d:f1:6c:40:
         cf:24:24:d5:b1:b7:b2:3f:1f:3f:a1:72:3d:d8:52:1a:93:ad:
         e8:b8:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org