Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/F034099EC67711EE8FBC77AC775412E6.roa
File:                     F034099EC67711EE8FBC77AC775412E6.roa (raw, json)
Hash identifier:          6V4r/v7w3x5g71Pd/+dCqBM5oHjhHU5I+SbGZR+dhzE=
Subject key identifier:   45:DF:78:E1:66:5C:3F:80:EF:13:B2:55:20:72:35:11:87:21:87:7D
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       02
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/F034099EC67711EE8FBC77AC775412E6.roa
Signing time:             Thu 08 Feb 2024 11:48:13 +0000
ROA not before:           Thu 08 Feb 2024 11:48:08 +0000
ROA not after:            Fri 07 Feb 2025 11:48:08 +0000
asID:                     37557
IP address blocks:        168.253.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 18:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Feb  8 11:48:08 2024 GMT
            Not After : Feb  7 11:48:08 2025 GMT
        Subject: CN=65c4bf7d-43b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:56:ab:51:70:13:ac:82:e2:fe:66:f1:f9:ec:
                    b2:7a:f7:73:d8:22:51:b4:88:f6:6b:5c:95:07:01:
                    1a:ca:4c:8e:03:cc:e4:3f:0f:2b:b2:61:7d:a2:a3:
                    f5:ec:f8:0d:e7:4e:c2:f0:90:5d:6b:af:37:61:1f:
                    ef:e5:b2:67:66:5d:ca:80:b6:23:e6:ef:c3:69:e6:
                    6c:3c:1d:a4:d7:f3:db:43:96:5f:93:74:a3:03:83:
                    5d:d1:88:ea:21:ab:fd:63:08:77:43:c6:44:63:f9:
                    f8:b8:53:d5:7d:c3:7e:0a:54:c1:94:f7:0c:3b:eb:
                    82:51:aa:fa:06:e8:7a:47:65:d9:3f:22:ca:28:bc:
                    34:14:a0:7e:c5:14:6e:f8:90:d3:9a:af:2e:e2:f9:
                    f4:93:08:e7:e8:01:94:90:82:b4:e4:bb:78:84:fb:
                    6d:ba:72:92:34:a2:34:07:41:a9:70:ff:65:f6:f4:
                    83:4f:22:a8:09:7d:39:b5:03:2b:8f:5d:c0:f2:7e:
                    ef:01:79:af:4e:70:bb:ba:9f:3c:ba:4e:2b:3c:6d:
                    a2:ff:5f:34:67:21:54:dc:32:07:6c:dd:fb:48:87:
                    0a:67:9c:99:b5:29:ce:fc:04:97:ab:3c:94:db:d1:
                    d7:6c:f9:6c:e4:65:26:4e:71:f4:1c:7e:d8:c2:36:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DF:78:E1:66:5C:3F:80:EF:13:B2:55:20:72:35:11:87:21:87:7D
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/F034099EC67711EE8FBC77AC775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:c2:ef:20:66:79:e3:bc:e8:d6:14:8a:b1:e9:50:0b:fd:
         92:49:42:6e:14:11:fb:e6:01:ea:72:ca:62:17:35:c9:b3:26:
         44:28:c0:59:8d:b5:fa:04:fc:53:2c:87:f8:3a:7a:eb:46:a0:
         f4:b4:fd:12:af:1e:fa:a0:b2:e9:0e:41:7d:b2:c5:61:e2:f1:
         bf:16:44:1e:c8:0d:c9:d6:e5:ab:8f:8f:31:e6:96:b2:a8:2c:
         56:bd:dd:1a:10:7c:71:39:2a:fc:c6:05:d3:ba:a7:08:38:b7:
         5a:f9:ee:90:c4:b3:2c:ac:b3:23:40:ca:6d:fa:3b:21:b8:6f:
         e5:df:16:39:af:89:4d:67:7c:9b:66:49:fc:cf:45:19:bb:86:
         58:cc:09:01:09:09:04:62:45:66:11:96:f5:d2:c1:eb:39:ec:
         68:90:db:00:59:a1:71:88:2f:15:5b:b5:5c:e9:c9:e3:1b:b9:
         df:81:99:bb:bb:1c:6d:06:14:2b:5f:2d:de:31:b2:7f:74:01:
         9d:19:ed:29:02:2e:1a:80:ed:8b:1e:89:ab:9a:69:35:b7:b8:
         cc:21:42:4e:fc:cf:b2:6b:28:9b:ea:87:9b:2d:39:77:d0:03:
         00:36:34:7f:32:f7:e7:21:36:99:7a:a1:f2:ff:35:a3:1c:33:
         4d:51:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org