Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/58096EEE10EF11EF90F44771017001B1.roa
File:                     58096EEE10EF11EF90F44771017001B1.roa (raw, json)
Hash identifier:          YpxYCFN8ZlQoJxGUHRE/DIFZyaaeiEu/hor3n1aNjLA=
Subject key identifier:   23:94:3C:DD:7C:23:FB:AD:51:03:89:90:1A:75:9A:FA:EE:EA:EE:1C
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       045A
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/58096EEE10EF11EF90F44771017001B1.roa
Signing time:             Mon 13 May 2024 06:09:23 +0000
ROA not before:           Mon 13 May 2024 06:09:20 +0000
ROA not after:            Mon 13 May 2030 06:09:20 +0000
asID:                     204729
IP address blocks:        102.215.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Jun 2024 13:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 13 06:09:20 2024 GMT
            Not After : May 13 06:09:20 2030 GMT
        Subject: CN=6641ae93-a7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e4:ac:b4:57:ea:45:26:1a:40:f7:e9:b4:ef:
                    6f:4f:0e:24:40:15:f5:1e:3c:63:ad:7a:40:25:73:
                    c7:bf:4f:b6:c0:0a:14:d4:b0:0f:a1:c7:1a:4c:05:
                    79:01:c3:e7:36:ff:73:da:4d:b1:48:d3:e2:16:00:
                    cc:14:16:f8:e5:ca:5e:b9:ae:9b:41:b0:b3:9e:c4:
                    bd:b4:ba:c8:f4:2c:b9:50:86:2f:d0:af:38:09:7e:
                    02:02:6b:3d:1c:cc:1f:bd:7a:5e:5b:d2:6c:aa:6c:
                    b5:ed:4e:f8:34:1d:ae:ca:2e:92:14:1d:42:9a:24:
                    c4:bc:51:28:f5:eb:50:d3:f7:8a:d5:3d:1f:2a:01:
                    ab:a0:be:c1:ea:a0:af:b0:c5:6f:9a:58:92:52:cd:
                    f7:60:26:8f:7e:b6:2f:54:90:16:fb:64:bc:d4:a7:
                    7f:59:09:26:27:6b:a5:5d:f8:65:47:12:9d:1b:64:
                    9f:9e:ab:fa:ed:5b:4c:ae:d1:81:3e:08:a1:20:13:
                    5f:e5:92:94:5d:8f:63:33:79:34:2d:5f:78:b4:34:
                    63:e8:44:3d:ff:38:5f:e3:4b:d5:f4:02:dc:05:eb:
                    7d:57:7f:dc:06:5b:83:53:37:1d:d1:1a:46:0d:1d:
                    c3:a9:0d:f2:51:44:1f:1c:5b:06:56:61:ef:19:3f:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:94:3C:DD:7C:23:FB:AD:51:03:89:90:1A:75:9A:FA:EE:EA:EE:1C
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/58096EEE10EF11EF90F44771017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:96:fd:35:02:1d:48:71:4f:71:72:ec:4f:8c:17:e2:81:
         01:ec:1e:f0:e8:5d:25:52:19:3e:02:13:d8:cf:ac:f0:45:fb:
         6d:e5:35:38:07:88:40:a8:d7:f9:86:bf:ee:3c:b7:37:d4:2e:
         67:a2:b4:4f:81:a2:27:a7:bb:56:50:a6:72:53:7e:c0:0f:79:
         54:05:07:a3:cf:f7:b6:40:5e:cb:8a:f7:39:ef:5b:5b:08:e7:
         66:ec:72:48:f7:d6:30:01:fc:5b:bb:73:5f:07:81:77:fa:d0:
         81:f3:87:cc:f1:83:27:a8:eb:6d:47:8c:8c:bd:cc:2b:0f:b7:
         f8:2e:c9:63:01:0b:75:ff:bb:2d:c1:ce:b5:85:9f:a8:ca:a1:
         e0:cb:88:56:13:4a:97:10:ca:67:2e:56:22:e9:78:2f:8d:7e:
         71:bb:8c:31:15:4b:cc:b7:67:e1:df:f7:d1:4b:2e:3a:b8:6d:
         82:c0:cb:e3:76:0e:5f:75:0b:e0:33:81:01:d1:1d:1b:e0:54:
         ad:35:1c:5f:65:5f:a1:7b:c2:e7:ba:14:7a:a3:87:5b:6b:a3:
         bd:ee:fa:2d:c4:75:73:3e:e3:84:06:e6:3a:5c:bf:78:90:44:
         fa:32:8a:65:03:87:d8:f1:38:2b:00:c7:05:9d:03:74:d7:55:
         b8:48:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:13:00 2024 by rpki-client on console-ams.rpki-client.org