Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/760CF22C0BB711EFA94E2955017001B1.roa
File:                     760CF22C0BB711EFA94E2955017001B1.roa (raw, json)
Hash identifier:          Ob4SgTqiDJaMOpRuStkZAHSh6Do6Cq/DabxvDWDIeZ4=
Subject key identifier:   A3:7A:7A:BD:1E:96:EE:63:2F:E2:E9:16:36:CD:BF:FC:13:A8:45:76
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       61
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/760CF22C0BB711EFA94E2955017001B1.roa
Signing time:             Mon 06 May 2024 14:46:46 +0000
ROA not before:           Mon 06 May 2024 14:46:42 +0000
ROA not after:            Sat 31 May 2025 14:46:42 +0000
asID:                     37557
IP address blocks:        168.253.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 07 May 2024 00:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: May  6 14:46:42 2024 GMT
            Not After : May 31 14:46:42 2025 GMT
        Subject: CN=6638ed56-93c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:bb:6d:86:b5:a4:82:2b:3f:f8:1c:58:42:
                    96:34:fa:fb:25:37:d8:a5:80:20:a7:c8:f3:01:46:
                    c3:b5:92:f0:08:ed:f2:9b:28:fc:2f:0b:23:55:f1:
                    20:8a:98:91:37:1d:eb:6f:86:9f:0b:f7:e5:55:98:
                    13:0e:a5:d3:7f:4f:17:f8:11:39:14:11:12:a9:c9:
                    d2:eb:ce:4c:b9:1c:f6:88:91:54:7f:b8:01:7a:c7:
                    e6:ae:3a:33:35:a9:86:f0:cb:ea:b4:78:06:62:0d:
                    2f:ba:a7:3a:ff:29:d9:fb:d8:7e:66:73:6e:7c:92:
                    34:dd:7f:ab:88:f7:74:07:0e:5e:cb:64:eb:e7:8e:
                    cf:3c:43:86:fb:00:e2:d4:c4:ae:4f:29:26:9b:49:
                    cf:8c:c0:31:74:5d:78:f0:3f:28:d4:9f:10:57:5c:
                    b7:75:7b:80:cc:8e:4b:98:75:f3:e5:7f:af:7c:12:
                    1c:66:3c:99:1e:cf:e4:d4:cf:c0:19:56:f9:f9:1a:
                    da:a8:d5:00:eb:f1:a8:a1:00:c0:5d:76:07:81:d3:
                    df:1c:80:6a:cd:9b:02:3a:0f:71:e7:ce:bd:03:fd:
                    ec:21:26:20:47:95:7c:a8:2f:f6:b4:c1:23:03:2e:
                    bb:06:37:12:5c:97:a7:27:25:22:09:16:a6:1e:29:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7A:7A:BD:1E:96:EE:63:2F:E2:E9:16:36:CD:BF:FC:13:A8:45:76
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/760CF22C0BB711EFA94E2955017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:b5:5b:5e:6e:97:07:ef:62:9b:3d:1f:38:ce:64:fc:71:
         a5:e0:37:cb:60:9b:40:0a:eb:e0:b5:9a:78:df:99:86:e4:ee:
         35:a7:d6:09:0c:53:8c:84:4b:1c:34:aa:d3:c9:87:db:84:36:
         7c:62:fe:c7:3d:e5:19:be:46:8c:0c:7f:c0:62:76:7d:00:e8:
         f6:78:2c:4d:8d:bd:91:2f:51:ec:b2:87:eb:0f:b7:e7:a1:27:
         ec:31:c4:43:86:ea:68:14:6c:6a:e4:de:d6:0d:db:cf:e1:14:
         57:f3:e8:6c:86:84:d5:a9:56:c0:b8:88:27:15:38:d7:32:07:
         be:24:fc:28:1d:c4:10:34:36:90:ec:08:9e:18:b4:36:fb:88:
         bd:c1:95:0c:b6:5c:0d:af:9a:f2:8f:b8:df:00:e7:a4:2b:72:
         d6:a5:bf:85:e6:2a:ae:84:74:73:1e:c9:34:89:6c:4a:ba:1f:
         7a:26:53:bb:c1:f7:17:a1:78:08:44:ff:f0:7b:4e:6b:ee:2e:
         3e:94:d1:24:3c:19:c5:eb:70:e3:be:de:1d:42:98:84:53:20:
         9c:7d:9d:a3:dd:86:f7:09:f6:16:3f:2c:c4:fe:97:6d:55:2a:
         51:92:1b:e4:9c:e9:46:82:9e:5c:f7:db:05:b6:9e:46:78:f3:
         7c:c3:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org