Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC9B6654047211EEA1C7E21A4AD9E6FC.roa
File:                     AC9B6654047211EEA1C7E21A4AD9E6FC.roa (raw, json)
Hash identifier:          N6329Hu0fidJ6ib4SoiPET9JMBR7xYR/e8G3ZnXaHyA=
Subject key identifier:   DD:F7:95:FB:4A:CB:C6:4B:08:57:D5:E8:4F:1A:27:EB:D1:A4:B4:E3
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0AF2
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC9B6654047211EEA1C7E21A4AD9E6FC.roa
Signing time:             Tue 06 Jun 2023 14:01:46 +0000
ROA not before:           Tue 06 Jun 2023 14:01:43 +0000
ROA not after:            Thu 06 Jun 2024 14:01:43 +0000
asID:                     399471
IP address blocks:        161.123.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Aug 2023 04:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jun  6 14:01:43 2023 GMT
            Not After : Jun  6 14:01:43 2024 GMT
        Subject: CN=647f3c4a-5ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:c2:21:26:af:f4:5d:33:a5:50:60:da:63:
                    1d:4e:cf:db:c8:2f:18:bc:35:16:52:3c:e2:dc:8c:
                    a4:bb:ae:fe:9a:c5:9e:4e:9b:6e:20:10:d0:14:9b:
                    ec:3f:aa:97:a5:72:5d:00:fe:93:74:97:a7:3a:08:
                    90:e9:d5:44:e8:57:2b:79:29:6a:94:b6:c5:c3:d2:
                    c4:11:46:06:a6:01:40:e9:77:64:18:e6:ef:e1:c3:
                    6f:4f:ec:5d:53:a9:3c:b8:1f:65:d0:40:1f:3c:35:
                    38:2c:23:47:17:41:e1:52:c7:aa:db:71:6a:46:a5:
                    5c:58:e4:f5:78:a6:04:e0:9e:3e:e8:72:b8:9f:17:
                    e4:8f:e4:7e:30:bd:0b:ca:c6:30:aa:e0:ec:b8:1f:
                    99:73:ae:59:fd:55:80:f1:06:0a:5e:9e:59:2f:19:
                    0c:4c:fd:b6:26:45:8e:0a:1d:be:14:ad:3e:15:65:
                    61:cc:3f:c4:17:04:16:e3:45:2e:12:a8:fd:8c:2d:
                    79:01:68:93:03:1f:56:31:7b:cf:77:b9:8d:47:d0:
                    65:06:94:f8:bb:9e:6d:a2:85:2c:7c:a6:12:5d:6a:
                    02:27:b6:3c:21:2f:3f:37:20:4a:77:b0:9e:3f:e9:
                    be:6f:10:da:c2:a3:11:af:81:a1:c5:93:10:07:10:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F7:95:FB:4A:CB:C6:4B:08:57:D5:E8:4F:1A:27:EB:D1:A4:B4:E3
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC9B6654047211EEA1C7E21A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:57:38:43:a4:54:b5:fb:05:c0:c1:0a:2d:40:2b:49:6e:36:
         1f:a9:3b:83:8b:e0:b9:77:03:bc:5c:6e:e1:d2:d4:2a:69:64:
         c9:21:18:f3:82:a9:39:74:44:c3:c6:cc:5c:d2:80:ef:3e:ce:
         cb:6f:a7:9e:7f:90:0d:59:19:e5:c3:79:c9:07:4a:b1:5e:0a:
         92:f9:b0:f8:58:c7:93:2d:66:57:f3:3d:34:58:77:a5:fb:1a:
         b4:75:58:e6:ad:e3:a6:eb:cd:b7:bf:b0:12:e7:71:e5:c0:3f:
         1a:97:fe:47:c3:71:a7:ce:16:a7:07:4c:91:ed:50:d9:53:96:
         cc:2c:67:16:e8:13:8f:c8:51:27:17:48:26:95:e6:06:53:af:
         bf:76:d4:8e:aa:01:85:22:9a:db:60:de:02:5e:e3:b9:53:2a:
         f1:d4:68:c2:af:9e:97:42:a6:c1:33:8e:82:2e:36:de:f2:70:
         8c:34:be:0f:05:5a:f2:83:5f:7b:0d:ab:20:48:ef:42:3d:3f:
         94:7d:33:ab:76:7d:bd:5d:2b:fb:de:7a:c7:aa:cf:b6:f5:cd:
         23:e2:e5:e8:64:0f:7c:c8:fc:66:20:ad:3b:46:7b:02:f5:db:
         91:e1:02:d6:d5:18:8c:ee:c5:72:61:b6:56:18:f7:84:dc:0a:
         1f:47:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org