Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/329B5448D45011EC8FBA5ACEF1222468.roa
File:                     329B5448D45011EC8FBA5ACEF1222468.roa (raw, json)
Hash identifier:          n7xCb5gXS0IvBIoSARpvR2R2BkC3UEemNliPgNbXkfE=
Subject key identifier:   DB:B0:D0:D0:89:EB:D7:37:C9:66:4D:D8:18:AB:19:4A:9A:E3:07:0F
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       AB
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/329B5448D45011EC8FBA5ACEF1222468.roa
Signing time:             Sun 15 May 2022 13:09:05 +0000
ROA not before:           Sun 15 May 2022 13:09:02 +0000
ROA not after:            Wed 15 May 2030 13:09:02 +0000
asID:                     140947
IP address blocks:        102.216.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Jun 2022 07:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 15 13:09:02 2022 GMT
            Not After : May 15 13:09:02 2030 GMT
        Subject: CN=6280fb71-6673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:34:99:2c:bf:7b:cc:15:49:05:35:3f:b5:
                    3d:2c:ca:5c:b1:42:43:3c:ca:ca:ef:90:c0:6a:44:
                    23:23:f4:7b:80:95:cf:e3:e3:43:32:3c:6f:d2:cf:
                    43:ca:ff:04:ac:9c:d2:7d:48:99:be:62:c3:b8:6c:
                    00:56:2c:9e:e5:4d:06:f6:e8:4a:6e:92:ac:1e:1f:
                    32:5c:cc:07:4a:7a:3a:82:a2:6c:46:1b:46:85:90:
                    1b:53:2b:ce:5f:51:2f:9f:34:e6:e8:af:fb:7a:cc:
                    ea:4c:64:43:d6:09:8b:7c:13:23:97:4b:10:13:48:
                    d7:e6:56:ec:b7:8f:2d:49:ec:1a:36:73:af:43:94:
                    dd:fe:9a:23:69:ba:30:68:48:af:ae:08:39:11:d6:
                    19:cc:11:a3:09:df:fc:8a:af:9a:5c:b5:a2:84:1a:
                    61:9b:fc:51:4a:b0:fd:6f:31:22:83:cc:45:56:28:
                    af:c9:fe:b4:e7:b2:b5:61:92:c2:2f:a5:34:22:f6:
                    46:72:d6:94:e4:b1:18:3e:7d:69:77:2f:ed:14:76:
                    01:3e:dc:bd:76:5f:f3:1f:e3:69:2c:71:5b:8a:ea:
                    52:fa:0e:bf:75:0a:15:82:c0:db:ca:ba:dd:10:3f:
                    48:17:2a:95:22:15:af:8f:e8:ac:59:50:b0:4e:eb:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:D0:D0:89:EB:D7:37:C9:66:4D:D8:18:AB:19:4A:9A:E3:07:0F
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/329B5448D45011EC8FBA5ACEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:db:e6:a1:67:7f:bb:28:6c:15:9e:07:7c:ba:4f:6a:94:
         87:d8:29:e8:4f:af:7a:df:e9:52:8a:22:df:11:00:39:c1:39:
         f9:2c:b4:67:e9:8b:cc:56:18:68:be:a8:0b:90:c4:41:1b:d3:
         a2:f1:72:65:15:bc:5f:43:26:15:06:d7:8e:c3:db:c0:1a:d1:
         9f:25:b4:1d:09:19:d0:16:5f:0c:fb:df:0d:4f:9a:93:4e:13:
         31:e3:f0:ab:7a:3e:3c:2c:4d:e9:9d:74:7e:8d:39:16:f2:91:
         4d:79:66:a0:17:cc:71:14:5e:f8:e9:47:0c:3f:ec:87:ff:7f:
         99:e8:4c:4c:01:af:41:0c:1f:ea:69:51:c0:6c:ce:be:15:81:
         c0:ff:9c:f0:e0:be:9e:b9:69:41:48:04:94:be:5a:6a:55:fc:
         c2:de:e4:4f:b4:6a:f0:6b:e4:a4:4d:c8:e6:09:63:f1:b4:09:
         87:9c:41:15:e9:f7:95:ae:47:b6:6c:be:53:72:d1:cc:54:75:
         f7:be:ea:2b:91:b3:45:f8:68:72:a9:2f:00:b8:14:bf:b2:c2:
         a9:fe:54:20:4b:bc:8a:3a:9c:3b:1b:57:72:b6:c0:d7:96:e7:
         0f:c6:f5:53:a8:fe:8e:f1:ea:2f:ed:9b:06:e6:44:82:39:ca:
         12:82:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org