Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3A936AECDFE911EC9EB87ECDF1222468.roa
File:                     3A936AECDFE911EC9EB87ECDF1222468.roa (raw, json)
Hash identifier:          X6z0Cq+O7hv9SmJ8bNoepkFgG5TfP5XfuejUw0EZloE=
Subject key identifier:   53:F6:7C:2F:29:7D:76:1D:18:D5:5F:A1:86:0A:AA:9F:36:F7:45:7F
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       DA
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3A936AECDFE911EC9EB87ECDF1222468.roa
Signing time:             Mon 30 May 2022 07:22:14 +0000
ROA not before:           Mon 30 May 2022 07:22:11 +0000
ROA not after:            Thu 30 May 2030 07:22:11 +0000
asID:                     1239
IP address blocks:        102.217.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Jun 2022 19:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 30 07:22:11 2022 GMT
            Not After : May 30 07:22:11 2030 GMT
        Subject: CN=629470a6-ee4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e2:e1:76:9d:89:a6:85:91:7d:a5:96:c9:a6:
                    9e:12:6b:20:2d:c0:e0:d5:ee:8d:26:a1:b3:3e:01:
                    ab:9b:8b:2f:fe:7f:69:5a:f5:0a:9a:c2:27:da:db:
                    fc:d3:66:bc:e7:2b:89:c7:89:d1:c3:67:83:d5:f2:
                    7d:0f:44:f0:31:9b:9e:cd:e8:8a:5f:b6:52:0a:2e:
                    36:36:d6:37:a0:34:6c:6f:10:3f:d0:c1:15:5d:49:
                    b9:93:9c:0e:31:20:45:79:1e:3b:30:67:7e:ba:77:
                    05:1c:e0:32:81:4e:51:46:7d:ce:4d:98:ab:e5:4b:
                    a1:f2:d8:f8:fc:2f:b4:94:03:48:05:04:b2:9b:71:
                    bb:d7:31:ad:7f:8d:0a:64:39:3a:b2:80:3b:cd:b7:
                    bb:a1:04:59:d4:d0:18:eb:bc:80:74:8e:8f:3c:e4:
                    6d:0c:a1:7c:cf:92:e2:7e:0f:f3:6f:99:05:56:59:
                    3c:b3:cb:81:2e:21:b3:2d:ba:06:a7:b2:18:19:41:
                    08:8b:e6:62:37:4c:78:8c:7a:47:2c:96:a6:71:2d:
                    39:e4:ba:03:5a:a2:60:e3:c6:fb:f1:70:10:fc:6a:
                    9c:08:ee:84:2a:ab:9c:65:2d:00:17:56:52:54:68:
                    64:cb:30:ab:17:46:eb:22:c3:9e:2c:a0:93:21:19:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:7C:2F:29:7D:76:1D:18:D5:5F:A1:86:0A:AA:9F:36:F7:45:7F
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/3A936AECDFE911EC9EB87ECDF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7b:45:32:c2:e6:e2:ab:cb:6b:e0:fc:e8:3a:eb:b8:db:c5:
         d9:e7:7d:72:ba:d6:d2:22:ee:99:01:59:d4:5b:45:d8:9b:56:
         4f:d4:70:e9:93:da:c7:9d:fb:31:dc:35:ed:84:78:1e:fb:3e:
         63:e9:12:17:74:82:54:09:eb:cf:63:ee:c6:b3:23:ae:7b:46:
         fe:f3:72:76:a9:fa:28:d0:3b:0b:31:f7:94:9e:c3:2b:a5:59:
         00:d4:47:08:bb:85:3e:0d:39:c6:52:38:b6:ca:22:43:fb:b2:
         35:7f:0d:eb:b1:60:e8:32:78:15:5d:ce:1b:96:21:bd:84:39:
         a8:d2:ca:d7:41:c6:32:16:75:ff:e9:94:a4:92:9f:cb:c1:30:
         be:ba:c4:eb:db:5a:1d:16:d9:91:49:7d:06:b6:10:bd:48:92:
         be:b1:21:63:f1:3d:53:90:60:0f:b7:3d:60:00:00:38:d3:eb:
         c0:c9:fb:49:e7:4f:af:cd:d9:29:e6:18:e9:a1:42:ba:97:41:
         6a:95:61:df:f5:46:93:5b:3e:d4:0a:28:c9:2b:29:8d:2d:c2:
         9a:3b:f2:7e:e0:fe:4a:bc:6f:e2:be:c3:da:83:4d:65:be:fe:
         95:cd:eb:67:97:08:a4:bf:45:8b:3e:ac:c5:98:ee:0f:44:44:
         8f:17:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org