Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAAD06B45CFA11EEA8A931404AD9E6FC.roa
File:                     AAAD06B45CFA11EEA8A931404AD9E6FC.roa (raw, json)
Hash identifier:          7nJXW9YR5hGWOCZnL0cUXsUPQOw6QGHfW/u7gi3n3vQ=
Subject key identifier:   F2:EB:B5:73:40:31:07:01:32:11:50:94:A5:FF:AB:10:27:16:58:A2
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0C07
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAAD06B45CFA11EEA8A931404AD9E6FC.roa
Signing time:             Wed 27 Sep 2023 05:56:57 +0000
ROA not before:           Wed 27 Sep 2023 05:56:54 +0000
ROA not after:            Thu 28 Sep 2028 05:56:54 +0000
asID:                     212738
IP address blocks:        161.123.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Dec 2023 18:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 27 05:56:54 2023 GMT
            Not After : Sep 28 05:56:54 2028 GMT
        Subject: CN=6513c429-8a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:89:c8:59:eb:f3:46:4e:5d:fa:61:38:40:a0:
                    3c:1f:f4:a0:79:79:36:13:cd:0e:2b:1b:a0:10:6c:
                    2e:55:fc:a8:77:17:f2:7d:21:37:25:f7:49:34:69:
                    e3:69:b6:a8:48:03:15:db:06:99:6f:b1:12:b4:11:
                    02:26:07:3e:59:75:4d:38:3a:85:8b:c4:0b:fe:ed:
                    79:4b:bd:77:f8:be:5a:3f:75:c8:14:9a:85:aa:7d:
                    e3:57:a6:38:5b:b2:29:3c:f1:51:5a:67:a8:b7:35:
                    d1:bb:d5:17:4e:9b:17:85:e1:17:d3:a0:ae:01:39:
                    21:26:90:ff:60:c7:30:ff:dc:5c:67:4d:e5:25:28:
                    48:8a:ee:b9:de:17:05:93:b4:2f:07:6a:87:3b:d6:
                    0e:c7:49:d6:4a:89:0a:c0:65:20:8e:95:cb:ee:96:
                    c9:a5:e1:45:de:02:40:4c:85:de:38:f5:6a:73:08:
                    35:77:4c:48:15:b6:db:a9:03:da:86:67:f4:49:9d:
                    e8:3c:1f:43:a9:19:3f:3c:22:64:3a:21:5e:53:03:
                    e5:a9:b0:c5:f9:b9:51:85:e5:f7:8e:24:b7:05:67:
                    d1:29:b2:33:86:13:e3:62:ae:22:92:82:a3:e9:4e:
                    ba:c1:c2:37:73:5f:0f:1b:9e:23:53:ff:2d:cb:77:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EB:B5:73:40:31:07:01:32:11:50:94:A5:FF:AB:10:27:16:58:A2
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAAD06B45CFA11EEA8A931404AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b4:fd:16:e0:83:6c:d1:64:4c:cf:f4:18:bb:07:5a:b4:f5:
         88:c4:da:25:76:02:aa:3d:66:6a:a6:cf:aa:96:1c:61:30:0f:
         b1:2e:2a:7b:8d:45:db:fb:7f:ef:73:83:86:72:b3:e2:e3:cb:
         e2:9f:88:40:c9:60:2f:a0:ae:cd:1c:68:52:19:f1:09:4a:91:
         83:2d:2a:b7:eb:eb:da:5d:2a:37:47:af:e4:a1:9b:de:15:d8:
         c6:d4:44:43:d3:81:fd:e3:a6:d4:3a:d5:20:5f:41:82:46:2e:
         f0:e3:2b:9b:e3:1c:40:c1:64:ca:9a:43:06:63:e6:9c:24:6e:
         ab:20:5b:29:df:55:cd:bf:1a:57:0e:1b:88:c0:bd:1b:06:c7:
         35:43:60:77:51:80:50:01:9a:27:a3:e2:47:91:68:ab:22:86:
         13:75:06:aa:84:4c:56:df:d2:f6:a9:66:93:43:00:38:5b:3d:
         5d:bc:69:b3:6b:48:29:44:bd:e8:bd:fc:1a:3b:ae:1b:67:b6:
         0a:90:56:35:31:52:d0:ec:4d:a7:df:e7:d6:88:e8:73:5a:0c:
         15:7b:06:8f:ca:ea:d5:1d:52:0b:1f:39:58:11:aa:cb:9b:48:
         32:a0:a5:da:70:43:bc:c3:2b:98:57:2e:9f:bc:01:71:07:05:
         83:e6:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org