Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/163529DA743811EE90B7AA4E4AD9E6FC.roa
File:                     163529DA743811EE90B7AA4E4AD9E6FC.roa (raw, json)
Hash identifier:          we4sYIj6YYHaFy7AhoLhfn8DapZqlGDzGfdEUhBH4gY=
Subject key identifier:   84:60:4C:BA:82:E8:88:B4:74:20:A0:CC:27:97:B8:FB:6F:A8:98:95
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0C5C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/163529DA743811EE90B7AA4E4AD9E6FC.roa
Signing time:             Thu 26 Oct 2023 19:44:33 +0000
ROA not before:           Thu 26 Oct 2023 19:44:30 +0000
ROA not after:            Sat 26 Oct 2024 19:44:30 +0000
asID:                     216440
IP address blocks:        161.123.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 30 Nov 2023 20:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3164 (0xc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Oct 26 19:44:30 2023 GMT
            Not After : Oct 26 19:44:30 2024 GMT
        Subject: CN=653ac1a1-4202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:76:0a:18:c8:73:2c:d3:39:52:a5:62:88:
                    75:e7:05:e1:f4:f2:cf:c9:95:0c:0b:62:8f:71:3b:
                    26:c0:7c:73:d2:ea:fb:c6:c6:02:cb:ca:77:a7:78:
                    cb:02:54:5b:5d:cb:17:da:ca:12:99:62:83:4b:3b:
                    2f:54:04:67:f6:45:05:95:c0:21:9b:69:64:23:fa:
                    84:bc:dd:e0:d2:9e:19:84:53:36:d2:0d:23:1d:f8:
                    e0:d1:58:60:37:4c:06:86:bb:2b:59:41:43:95:37:
                    63:50:d4:d7:1a:97:01:b0:59:82:6c:39:56:4a:7e:
                    01:42:81:d4:bd:a1:a8:6f:fd:1c:f9:29:eb:3f:e3:
                    05:59:f4:81:e9:c4:64:0a:b1:22:42:13:67:cb:a4:
                    3e:5f:6e:f2:5d:27:7d:4a:b4:51:eb:d7:a2:54:b9:
                    e2:00:15:fb:18:ad:87:ca:eb:b5:8e:ef:41:2c:e5:
                    25:83:ea:4a:f8:8f:85:6a:57:77:de:af:7f:26:25:
                    c7:b7:52:01:42:39:9e:c8:20:6a:05:79:9c:fd:9b:
                    5d:15:29:42:4a:05:3a:2c:5a:06:fc:43:fe:62:4d:
                    1c:69:95:48:0f:ed:0b:83:4b:9f:22:f4:2a:e1:74:
                    57:8f:e2:f3:d5:64:f1:c2:ae:22:70:b1:83:d8:cf:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:60:4C:BA:82:E8:88:B4:74:20:A0:CC:27:97:B8:FB:6F:A8:98:95
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/163529DA743811EE90B7AA4E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:89:95:4a:8c:d2:e6:34:fa:e8:d8:8a:ca:a0:cc:c5:33:fa:
         31:96:51:8b:5e:19:99:86:13:fb:70:f0:d1:ec:39:e0:4c:6c:
         ad:ee:b5:c8:b3:6a:26:4b:76:9a:38:80:16:04:aa:b7:8f:63:
         48:d3:c1:03:1c:c2:ed:5f:d1:85:57:75:ef:8b:5b:70:fc:45:
         43:64:b4:20:5c:6a:1b:19:e6:c8:af:71:e9:8e:45:f3:d2:03:
         ea:ba:0b:b3:2b:40:d1:33:75:0f:ef:2f:f9:d1:3a:b9:a1:0d:
         8e:01:92:7f:15:4b:fe:da:b6:1d:e4:57:42:68:7c:23:0f:cb:
         56:5d:2e:c7:e2:f9:95:1f:45:ba:62:a7:a8:55:e8:a0:bc:c4:
         6c:d6:3a:18:83:7f:5b:6c:20:19:a1:6c:6d:76:5e:8a:c9:c3:
         70:96:7f:9f:fd:f5:c9:c1:21:3d:10:36:05:90:46:58:9d:6d:
         fb:7c:66:18:dd:21:bf:0c:3f:66:26:ba:f3:06:a8:31:bb:75:
         db:f2:4f:bd:2d:47:46:c5:ab:d3:41:da:1a:88:b0:c5:2e:d9:
         11:9f:d0:77:76:ab:91:1c:aa:66:0f:03:27:97:96:f2:5a:cf:
         16:3c:25:3d:df:6f:06:2a:d4:36:14:a9:4f:95:94:06:fe:96:
         26:49:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org