Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/54A884A2223311EE947414564AD9E6FC.roa
File:                     54A884A2223311EE947414564AD9E6FC.roa (raw, json)
Hash identifier:          5mSI09ZFHlNiQpkixDnFbEH954RxTDrDUDDfoHONxe0=
Subject key identifier:   84:A9:0B:48:4E:9C:4C:B6:E7:4B:52:E9:DC:FD:76:F2:2B:A0:EE:E8
Certificate issuer:       /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial:       83
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/54A884A2223311EE947414564AD9E6FC.roa
Signing time:             Fri 14 Jul 2023 10:43:56 +0000
ROA not before:           Fri 14 Jul 2023 10:43:52 +0000
ROA not after:            Sun 14 Dec 2025 10:43:52 +0000
asID:                     15964
IP address blocks:        165.210.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Oct 2023 07:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
        Validity
            Not Before: Jul 14 10:43:52 2023 GMT
            Not After : Dec 14 10:43:52 2025 GMT
        Subject: CN=64b126eb-d9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:75:be:9d:85:21:92:ce:80:82:9d:c3:c4:
                    73:ed:47:f6:9e:84:49:7a:f4:04:04:7c:b9:63:7f:
                    48:72:91:b1:28:04:4f:a3:92:0b:5d:1d:d8:3f:1b:
                    b2:00:7d:e5:c7:cc:d9:2c:da:cd:0f:87:4e:a7:f1:
                    40:67:a9:b4:0b:00:2a:f0:bc:21:78:ed:ed:85:f4:
                    b3:9e:55:fb:61:c5:cc:4a:cb:65:2c:ef:78:90:c0:
                    41:ea:a1:de:06:c0:b2:17:29:8e:c1:9f:ca:ff:f4:
                    95:bd:2a:2d:cf:ed:ff:45:eb:c2:12:81:fa:9d:42:
                    77:ec:6d:17:40:ea:1d:85:72:f5:f5:e5:cd:d8:74:
                    24:b4:0e:cc:eb:5f:01:0a:17:6c:ce:ef:ea:a3:81:
                    19:09:7e:59:dd:cb:84:ff:c0:05:5f:28:7d:75:fc:
                    1d:05:79:b4:a6:7b:25:aa:37:c9:47:3d:c4:97:63:
                    27:44:3a:e5:08:a4:45:24:8b:b5:81:88:b2:4c:78:
                    0f:66:14:6d:27:f8:32:28:d8:a1:07:42:67:57:f9:
                    ef:83:4b:56:48:d7:b3:f8:30:35:1b:59:46:aa:1f:
                    18:91:c6:8e:80:5f:25:02:8a:f9:8c:ca:1f:0a:b1:
                    c9:d1:30:59:61:04:89:86:1c:f7:59:f2:c0:2a:f1:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A9:0B:48:4E:9C:4C:B6:E7:4B:52:E9:DC:FD:76:F2:2B:A0:EE:E8
            X509v3 Authority Key Identifier:
                keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/54A884A2223311EE947414564AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.210.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         10:2f:ce:ed:53:6e:da:c6:58:a1:79:a4:65:ce:dc:4a:c7:c4:
         81:c1:14:d7:ab:99:78:38:15:d1:d9:94:c3:44:40:6f:13:d8:
         b8:23:4e:b0:d9:c9:db:ba:5b:b4:a6:37:c2:f3:8f:ee:fe:4b:
         1c:fe:f0:49:9d:0b:67:4f:c3:07:3a:23:7a:a8:4c:b5:07:3c:
         32:c9:e0:2d:20:d7:50:12:23:99:6b:f5:4e:e7:42:0e:bb:43:
         be:43:1b:e5:41:88:c1:1b:5c:61:a7:2f:88:cd:22:3c:2b:8a:
         8d:45:6c:f8:95:c4:4d:e3:ae:c8:74:f5:94:3b:89:9e:2e:4d:
         49:66:c4:88:78:1f:b0:ea:2e:a1:20:29:0d:b4:ab:80:49:75:
         7d:76:6b:21:40:b4:79:99:16:b5:43:e6:94:9b:00:ce:57:d3:
         85:5a:2f:ec:25:0d:68:37:81:e6:10:00:62:aa:55:a7:ee:65:
         25:d3:29:7c:57:8b:b1:d0:63:cc:81:91:16:61:48:39:0e:65:
         54:ba:99:73:2f:84:53:ac:8f:5e:94:b1:50:e5:af:2d:5b:a1:
         d8:27:8b:bc:2e:58:ae:2b:b1:0e:74:26:43:c9:65:b2:15:36:
         43:58:16:32:ac:ca:17:49:d0:5d:a7:a5:cf:88:ca:50:76:ff:
         66:b4:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org