Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA20EFD4149E11EDA1DC67B2F1222468.roa
File:                     BA20EFD4149E11EDA1DC67B2F1222468.roa (raw, json)
Hash identifier:          JisqOmn+8FLR9Ftibfs0dmAB6UkIJU+qzUb2w9szhSk=
Subject key identifier:   41:79:E9:2B:F8:FD:D3:2C:58:E1:84:A3:C5:81:9B:7F:A6:C4:84:E3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       167B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA20EFD4149E11EDA1DC67B2F1222468.roa
Signing time:             Fri 05 Aug 2022 09:12:28 +0000
ROA not before:           Fri 05 Aug 2022 09:12:24 +0000
ROA not after:            Thu 10 Aug 2023 09:12:24 +0000
asID:                     43260
IP address blocks:        45.195.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5755 (0x167b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  5 09:12:24 2022 GMT
            Not After : Aug 10 09:12:24 2023 GMT
        Subject: CN=62ecdefc-49cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:e6:f5:17:3b:fe:7f:1c:36:8d:dc:6b:72:
                    a6:fe:d4:56:55:30:1c:24:1f:d1:dd:02:64:e5:9c:
                    24:e8:70:ef:80:16:16:82:46:79:45:9e:eb:bc:ce:
                    51:66:77:4a:5f:e0:77:a2:f2:63:ca:8a:6f:ff:45:
                    5d:16:db:46:37:0f:53:d7:83:00:f1:c3:d5:83:1e:
                    41:0e:8a:b8:7b:8a:bc:1f:bf:19:00:eb:3e:1e:d4:
                    5c:7e:24:14:9b:c3:f0:4b:ac:8a:13:09:7c:68:97:
                    ab:fd:56:4b:c1:d9:20:e2:10:8c:8d:18:9f:19:5b:
                    5c:04:94:f8:5b:0e:5b:05:62:87:e9:dd:74:37:c6:
                    f4:4f:6d:56:90:ed:85:61:b7:b5:e4:34:96:58:1a:
                    95:21:61:18:0a:10:58:0d:d2:5b:93:62:b4:00:5a:
                    33:b4:eb:3a:68:7e:15:2e:53:9b:f5:54:b3:f0:c9:
                    16:d6:18:15:0b:61:cf:d2:7f:32:5d:4b:83:6f:68:
                    ee:f8:96:5a:8a:8f:ac:e0:bb:4e:d1:22:3f:5d:24:
                    3d:85:3c:f2:56:c9:e1:5e:17:0e:73:0b:ea:79:a2:
                    8e:b0:d3:34:b5:47:58:a5:67:1b:91:c2:58:dc:1d:
                    db:cd:f9:40:a3:16:42:af:de:9a:0e:51:6d:d8:e0:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:79:E9:2B:F8:FD:D3:2C:58:E1:84:A3:C5:81:9B:7F:A6:C4:84:E3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA20EFD4149E11EDA1DC67B2F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:37:13:ac:51:cc:52:f5:84:d2:a6:df:df:dd:f8:b7:30:
         28:24:22:23:ea:76:a6:3a:54:93:64:0a:9c:4b:1c:91:1f:f0:
         3a:74:fa:09:13:4c:c5:12:68:17:da:db:57:97:9f:59:86:fc:
         30:d9:e1:80:a4:da:f9:a2:4d:11:3b:96:04:5d:34:74:48:7d:
         cc:07:23:cd:b7:16:d5:b0:ab:70:a6:a3:fc:0f:c1:d1:37:b8:
         fb:40:c4:ea:b0:76:e5:af:8c:b1:58:63:42:b6:29:e3:28:7e:
         95:97:e6:5b:a3:a8:ba:6f:47:56:79:3c:78:5e:1d:93:3d:19:
         14:19:dc:e8:e2:6f:32:1d:3a:55:e1:38:50:be:fe:9c:56:24:
         ab:30:75:cd:e8:a0:95:b8:88:87:95:14:91:fe:02:c0:bf:5c:
         29:e9:cc:2b:bd:36:58:07:81:2b:af:d9:dd:e1:15:c3:da:31:
         9d:46:6e:5d:c0:82:59:95:ff:b5:7d:95:61:98:9e:bd:44:9c:
         1a:97:9c:57:61:2e:70:e8:d1:bb:85:17:ed:9b:c3:18:e9:13:
         dc:55:6e:ce:18:b1:41:ae:be:f6:34:ae:6e:38:8f:54:28:77:
         36:d1:60:ba:ec:30:f1:6f:df:6e:d4:1d:34:d8:fe:73:86:a0:
         73:af:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:24 2023 by rpki-client on console-ams.rpki-client.org