Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/26C417406F0611EC9C07B1885A40D577.roa
File:                     26C417406F0611EC9C07B1885A40D577.roa (raw, json)
Hash identifier:          T1zH4/kI1tPPKppeoF7B0IBfnfq/YPYdDa6SHPDsIgE=
Subject key identifier:   40:73:D8:6D:EE:41:8E:EE:90:E7:99:81:51:6E:41:76:E4:4B:80:E1
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       08
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/26C417406F0611EC9C07B1885A40D577.roa
Signing time:             Thu 06 Jan 2022 15:34:35 +0000
ROA not before:           Thu 06 Jan 2022 15:34:32 +0000
ROA not after:            Sun 06 Jan 2030 15:34:32 +0000
asID:                     328992
IP address blocks:        102.217.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 06 Jun 2022 13:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jan  6 15:34:32 2022 GMT
            Not After : Jan  6 15:34:32 2030 GMT
        Subject: CN=61d70c0b-aef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:86:7d:ee:2f:4f:e7:d4:15:14:ec:39:99:10:
                    dd:af:c2:3a:aa:94:60:0c:e5:94:c8:77:45:93:ee:
                    61:86:d6:d3:c2:72:25:1f:84:72:01:6e:27:63:5a:
                    ba:d7:96:a7:93:bf:31:62:f9:46:04:1f:1d:cf:9f:
                    71:01:f6:a0:be:16:60:2c:f3:bf:e5:58:4e:2e:54:
                    4f:ac:73:da:8a:86:7b:9c:78:6a:b0:d6:79:f9:44:
                    af:29:35:63:52:55:bd:7b:b5:5d:0e:9a:8c:74:43:
                    9d:0b:57:94:48:9c:34:bd:df:eb:aa:48:24:5e:15:
                    43:19:a8:32:90:ad:01:0b:34:38:29:a4:f7:83:69:
                    97:c5:11:2f:2a:04:a1:55:55:23:cd:a9:36:13:5c:
                    df:18:ad:96:27:d9:2e:ac:21:30:e6:3e:16:b3:27:
                    30:30:30:f9:98:0a:92:4f:74:2b:ae:b7:67:46:82:
                    07:2f:b4:5f:c3:79:85:cf:94:be:44:58:bf:22:72:
                    4e:1a:5e:44:cb:42:bf:39:0b:09:aa:76:42:24:a8:
                    da:dc:10:3c:dd:cb:f5:45:99:7b:3c:2d:32:2d:a4:
                    7b:2a:c8:9e:75:12:d5:6b:a3:4e:76:b5:47:fa:fc:
                    48:2c:d6:1e:b4:c4:20:21:5a:94:d9:f5:f2:82:70:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:73:D8:6D:EE:41:8E:EE:90:E7:99:81:51:6E:41:76:E4:4B:80:E1
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/26C417406F0611EC9C07B1885A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e6:f1:af:f7:39:a5:23:f8:53:9f:db:ff:66:a2:2b:55:f4:
         22:f3:01:bd:c5:28:5f:b7:12:79:51:52:2f:dc:e7:92:2f:53:
         fd:cf:ae:5e:4d:3b:11:a9:12:82:f6:08:42:b7:c4:99:db:27:
         6f:8a:fc:06:d1:e8:8c:73:7a:a1:31:5d:85:aa:b8:18:9f:47:
         94:b6:24:84:3b:9e:dd:42:e3:ac:1b:53:67:37:d3:33:18:ae:
         04:ef:8c:42:d6:c7:0d:98:14:9e:3d:fe:5e:b2:c0:40:27:68:
         7f:ba:74:25:12:1b:41:52:06:ec:53:da:5f:b8:c2:70:b3:d9:
         a0:f7:82:7c:7c:27:2b:35:29:1e:9c:09:67:dc:f0:69:8e:8e:
         85:5e:58:b9:47:18:b5:c6:7b:7a:9e:c4:1f:15:0f:af:ad:cb:
         95:30:2c:ea:a6:45:4c:33:3c:cf:d4:83:25:8a:eb:db:38:7e:
         9a:a3:62:b6:a1:bf:4c:02:f7:7b:c0:c3:be:ee:88:e4:d1:76:
         08:e4:5a:58:01:d8:85:06:11:36:c3:34:f0:64:18:58:8e:d2:
         90:c7:17:22:49:db:29:aa:3a:2b:60:d6:44:9f:33:b3:16:50:
         1a:0a:2b:e0:d5:b9:1c:80:df:b2:d8:b6:c7:b3:65:15:80:b7:
         3b:ee:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org