Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FF147C0327811EDB2EF4FDDF1222468.roa
File:                     8FF147C0327811EDB2EF4FDDF1222468.roa (raw, json)
Hash identifier:          THIY2snDdhf5W0mBNxdvuSRwqE7jnH0Q2HclAU8or1o=
Subject key identifier:   92:F6:98:A9:3A:BC:54:09:93:30:14:EF:AF:56:37:87:33:0F:8F:C1
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       081B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FF147C0327811EDB2EF4FDDF1222468.roa
Signing time:             Mon 12 Sep 2022 08:54:51 +0000
ROA not before:           Mon 12 Sep 2022 08:54:48 +0000
ROA not after:            Tue 12 Sep 2023 08:54:48 +0000
asID:                     35916
IP address blocks:        161.123.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 12 08:54:48 2022 GMT
            Not After : Sep 12 08:54:48 2023 GMT
        Subject: CN=631ef3db-5b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:9e:98:d1:90:f4:98:17:aa:08:10:c5:19:
                    d9:dc:4f:57:7d:eb:e8:e5:2b:a0:08:26:d0:57:95:
                    8d:d2:56:64:9c:5a:24:79:57:ad:ea:83:e9:69:f8:
                    de:48:ba:81:a1:be:8f:35:af:30:85:87:09:b6:7e:
                    17:a6:2f:b9:83:cf:fb:7f:75:4d:79:81:a1:02:ce:
                    3a:80:8d:59:16:15:e7:8d:ec:a3:19:54:d5:c0:35:
                    81:09:53:75:c8:c5:a6:27:77:5c:27:51:42:7e:69:
                    e4:f0:fe:6e:56:d0:61:01:79:66:61:ff:7a:17:60:
                    ff:a6:9b:db:44:f9:bb:15:a2:c0:25:7b:68:45:5e:
                    a4:37:1b:3c:1d:fc:2f:a6:af:49:a7:e2:67:8f:11:
                    06:b9:59:96:b6:fc:10:11:e9:71:35:7a:00:5a:25:
                    7e:bb:ed:87:af:c2:11:53:3c:55:3c:96:01:ae:e7:
                    91:c7:1e:d1:b7:b0:60:50:11:8d:ca:17:5f:39:7e:
                    f8:42:c2:4e:2d:c8:7d:c1:13:21:fc:40:6f:e2:52:
                    79:33:9b:f5:b7:89:64:fb:49:a6:44:b9:f0:75:c2:
                    2a:61:a9:9b:89:e6:33:5d:93:2a:4c:54:fa:64:01:
                    42:50:7a:26:d9:0a:89:99:ab:1c:56:09:54:88:27:
                    ab:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F6:98:A9:3A:BC:54:09:93:30:14:EF:AF:56:37:87:33:0F:8F:C1
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8FF147C0327811EDB2EF4FDDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:7d:94:19:da:f2:a7:e5:2c:0c:e9:a2:26:37:ef:f7:52:
         4c:df:e8:11:21:2e:37:5e:f7:4b:47:04:f8:6d:5b:0c:ee:1f:
         e5:d8:32:36:6b:f5:61:2b:0b:3c:34:b7:80:1f:86:97:71:ef:
         b8:e9:d7:d4:a8:59:02:34:87:c8:fb:38:1d:5f:77:ad:e3:ab:
         b2:5d:af:28:fc:54:58:f4:c6:cc:05:c1:6b:66:f9:55:2c:1d:
         96:3d:d5:36:52:d9:2b:ea:df:c3:89:98:98:4b:09:f8:88:5f:
         25:12:bd:e4:16:23:f1:61:63:1c:85:03:87:ed:1e:37:d5:1b:
         23:43:a1:60:9b:f8:7d:b5:40:33:b3:eb:19:b8:5a:94:3c:f0:
         71:fc:d4:e2:16:74:0a:e2:df:ba:a2:94:52:cf:a9:e0:06:cb:
         b7:05:bb:15:e1:5f:d2:73:cc:32:37:66:e7:2f:66:2b:23:1f:
         61:44:39:1c:82:40:54:b2:30:22:28:7e:c5:13:59:08:a4:1e:
         ae:4b:a3:d7:79:9f:a0:5f:0c:80:ff:8f:88:ff:c8:39:02:22:
         10:00:e6:b2:b1:49:26:bc:fa:f7:e0:6c:5a:a9:81:d1:a3:6e:
         8a:0f:0f:3c:bd:57:a8:3a:a8:8f:83:3b:60:4a:5e:84:85:e9:
         fd:93:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org