Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/789930081CC211EEB6AB6C4B4AD9E6FC.roa
File:                     789930081CC211EEB6AB6C4B4AD9E6FC.roa (raw, json)
Hash identifier:          /JsafdXR0Pw/tq+gQCfd1pHZOKPW/ga7+j3P5YLqRpo=
Subject key identifier:   A7:8F:55:FD:C6:26:B0:0A:97:7C:8B:DD:E2:4D:36:70:A8:8F:5E:1D
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0B39
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/789930081CC211EEB6AB6C4B4AD9E6FC.roa
Signing time:             Fri 07 Jul 2023 12:33:27 +0000
ROA not before:           Fri 07 Jul 2023 12:33:21 +0000
ROA not after:            Sun 14 Jul 2024 12:33:21 +0000
asID:                     8100
IP address blocks:        161.123.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 12:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2873 (0xb39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jul  7 12:33:21 2023 GMT
            Not After : Jul 14 12:33:21 2024 GMT
        Subject: CN=64a80617-b60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:d1:99:7e:89:47:27:42:aa:36:4e:f5:2b:
                    03:7c:26:c0:e2:ed:e4:93:09:f9:29:01:92:45:9e:
                    38:84:b4:66:1e:ca:9d:62:5b:f9:55:de:31:93:d3:
                    3b:ae:7d:79:df:62:8a:30:c1:b6:f8:d3:8e:af:9d:
                    64:06:56:30:22:c4:be:0e:79:d0:2c:fd:0d:f3:1a:
                    a3:2a:38:20:6d:8f:29:ec:81:9a:20:88:05:5f:13:
                    9b:05:12:fe:6f:c8:30:43:ce:9c:b2:4c:29:b1:84:
                    c1:ae:93:14:4e:7b:b3:b4:9c:16:4a:08:fd:cb:c4:
                    72:42:c6:7b:ac:e7:2b:16:3b:f8:49:d6:51:80:dd:
                    70:27:e4:68:f4:3c:0a:6c:b2:3e:5d:97:c7:81:63:
                    7c:c0:9c:f5:79:4f:a3:4d:d3:cd:6f:4a:c0:db:e0:
                    a1:33:6a:37:20:63:df:4c:15:37:55:e3:f1:e6:53:
                    37:21:95:98:70:b8:19:20:74:46:5f:3a:3e:bf:44:
                    b1:a4:94:e0:36:67:e3:d9:68:1a:8b:8e:bf:55:eb:
                    26:8e:8a:e2:5d:7c:ce:74:12:ee:a8:b4:c7:81:41:
                    fc:9f:e2:52:a6:b5:f5:29:ab:9e:c8:e5:f9:83:a8:
                    a5:45:16:53:71:2a:85:1a:15:45:68:2f:94:50:83:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8F:55:FD:C6:26:B0:0A:97:7C:8B:DD:E2:4D:36:70:A8:8F:5E:1D
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/789930081CC211EEB6AB6C4B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:cb:8e:71:1d:ee:d0:c8:d0:95:e0:c5:42:a2:00:de:26:
         29:8b:a4:bd:19:26:58:e6:38:68:cd:30:53:cc:5a:25:1d:23:
         9c:73:34:3d:ff:eb:25:24:d6:26:fd:5a:cf:e4:92:1a:e5:1e:
         4f:98:fc:5c:b4:50:ff:6e:e4:cf:d6:98:93:3f:6d:5c:dc:aa:
         2e:65:4c:70:70:ed:e3:08:49:6f:fd:a4:7f:9e:e7:42:7f:ac:
         60:05:3b:ff:44:1a:be:43:6e:27:80:f0:6c:d8:e4:61:e9:59:
         a7:07:f5:4b:01:de:38:1e:16:cb:e3:3b:1c:b0:ca:c4:09:af:
         39:71:a4:c2:a7:6d:6a:88:11:9a:ab:86:22:4d:00:92:bb:06:
         4e:c8:dc:f4:97:34:af:50:21:81:e9:d7:06:f2:9e:c5:8a:d2:
         33:31:ac:05:ee:54:4b:af:56:d5:11:86:b3:c3:8b:e1:6a:59:
         ae:43:ce:b7:d7:9b:7c:42:9a:96:f1:a0:16:49:29:24:71:fa:
         01:35:6b:49:d1:24:13:3e:80:9a:26:2d:d1:2a:13:ea:d9:52:
         5e:09:28:02:a0:b2:dd:48:3a:29:3e:e1:dd:3b:4c:b9:37:67:
         bf:17:42:7f:39:fc:cf:2e:9f:9c:aa:8a:8d:f7:54:6e:54:76:
         79:ab:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org