Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/CF6492E4350511F0B889B8A9DAE4EC9C.roa
File:                     CF6492E4350511F0B889B8A9DAE4EC9C.roa (raw, json)
Hash identifier:          RGTdkStmT3anzsxNUa7QB8K60CSQW6g+yZdb/IidM4Y=
Subject key identifier:   9B:94:18:D1:A2:DD:64:6A:97:B5:E6:AA:29:3E:E8:82:84:88:C7:29
Certificate issuer:       /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial:       08B1
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/CF6492E4350511F0B889B8A9DAE4EC9C.roa
Signing time:             Mon 19 May 2025 23:05:52 +0000
ROA not before:           Tue 20 May 2025 23:05:48 +0000
ROA not after:            Sun 20 May 2035 23:05:48 +0000
asID:                     37049
IP address blocks:        165.16.160.0/19 maxlen: 19
                          165.16.161.0/24 maxlen: 24
                          165.16.162.0/24 maxlen: 24
                          165.16.163.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 22 May 2025 11:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
        Validity
            Not Before: May 20 23:05:48 2025 GMT
            Not After : May 20 23:05:48 2035 GMT
        Subject: CN=682bb950-30ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:f1:4a:ae:10:b6:75:1e:62:9c:fd:66:55:
                    00:64:45:08:d4:a7:f4:81:bd:9b:9e:8e:82:33:ee:
                    c9:16:c0:86:a3:15:6e:e9:0c:9c:5b:d6:0d:13:6a:
                    46:43:8f:1a:69:50:63:86:92:3c:85:64:a9:4b:2f:
                    3e:1b:57:c5:ab:18:d3:ee:fe:d3:7d:31:64:ce:57:
                    cf:43:e3:0d:10:23:36:da:93:fd:30:21:29:0f:60:
                    16:43:13:13:59:2f:b1:a8:90:06:fc:8e:0d:00:0b:
                    f8:56:f7:6f:27:2b:c2:7e:2c:d7:dd:cf:a1:d2:cc:
                    21:1c:19:dc:08:5e:11:1c:1a:ce:97:13:61:81:c6:
                    a5:59:8b:fb:16:54:f0:b6:76:72:ba:2f:61:b1:16:
                    fd:ef:41:ec:77:61:a1:c9:2a:1b:10:26:1b:5e:c9:
                    34:c8:f8:0e:44:db:7d:f0:3e:bc:d7:59:61:85:de:
                    23:21:9c:8a:43:c2:60:30:64:21:41:5e:cc:82:46:
                    24:65:3d:05:a5:f6:9c:79:3f:12:6e:4b:62:45:52:
                    7b:a4:61:60:55:4e:40:37:3f:25:e4:4c:c9:81:89:
                    14:4c:4b:a9:45:35:33:11:17:dd:11:41:c8:ad:13:
                    fc:2a:0b:ae:95:63:e7:04:2e:7f:c3:49:c5:0a:7c:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:18:D1:A2:DD:64:6A:97:B5:E6:AA:29:3E:E8:82:84:88:C7:29
            X509v3 Authority Key Identifier:
                keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/CF6492E4350511F0B889B8A9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:d3:2c:d2:a5:6a:f4:db:fd:4e:4c:40:c7:5e:07:eb:76:5f:
         a4:6d:40:ae:8d:5b:8b:06:e4:d2:e2:5d:7c:97:32:7f:9f:69:
         a4:c9:59:f1:53:c6:fe:94:2d:dc:36:45:22:37:6c:59:10:64:
         d3:7e:a7:9a:21:d0:91:c3:94:3d:81:88:9f:cb:8f:f3:08:5d:
         86:57:34:3e:ef:9c:c2:7e:15:7b:5e:7f:58:dc:ae:e9:89:a3:
         ca:6a:69:7f:eb:48:6f:fe:5d:f9:e3:2b:6e:65:7c:42:fb:01:
         c2:57:43:a2:56:12:bd:f5:64:55:88:b8:ca:98:9f:49:e4:55:
         75:5a:df:e9:b1:3e:ef:a2:f8:94:ec:02:4c:01:62:b1:9e:b0:
         35:a1:96:91:3c:78:8a:70:9b:2d:b8:5f:08:94:36:68:2b:c8:
         85:5c:27:a8:19:c9:33:3c:9b:f4:c5:48:b2:19:21:ca:b3:31:
         8c:aa:75:0d:7f:ac:dd:57:30:e6:ae:59:9f:e1:1a:97:2b:07:
         90:fa:5c:6f:c7:12:bb:e4:93:17:70:c4:1c:7b:07:21:32:3a:
         3a:87:2b:6e:5e:4e:be:61:71:e8:d7:b7:54:3f:54:bd:75:9b:
         21:24:6e:56:36:46:75:1b:c7:0d:37:53:2b:1c:73:19:c7:44:
         15:92:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:43:32 2025 by rpki-client