Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/50F08C607B6511EFB1E41E43762E951A.roa
File:                     50F08C607B6511EFB1E41E43762E951A.roa (raw, json)
Hash identifier:          tuycIxoZBRwOhRdP4YE8DAxowKFBQQeaf5Zheno2Q9o=
Subject key identifier:   F9:3B:4E:6F:49:2F:25:1B:AF:DC:D5:7B:A1:CD:FD:0C:71:EB:7E:C6
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0527
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/50F08C607B6511EFB1E41E43762E951A.roa
Signing time:             Wed 25 Sep 2024 17:40:55 +0000
ROA not before:           Wed 25 Sep 2024 17:40:51 +0000
ROA not after:            Wed 25 Sep 2030 17:40:51 +0000
asID:                     58212
IP address blocks:        102.217.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 14:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Sep 25 17:40:51 2024 GMT
            Not After : Sep 25 17:40:51 2030 GMT
        Subject: CN=66f44b27-f1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:ea:d8:68:06:5f:69:45:f9:7f:5d:d7:7c:
                    ff:1e:2a:a7:59:4f:65:4c:3b:d1:9d:c6:09:a9:90:
                    77:d6:45:64:e3:49:da:78:06:28:d1:cf:92:d4:a3:
                    65:a7:a5:07:3b:f1:9b:be:92:7a:50:31:13:a9:4f:
                    b8:23:34:10:f7:3e:79:80:ac:8d:24:7b:16:01:5f:
                    30:6b:30:e1:e7:06:d3:f8:86:59:25:43:f3:63:a4:
                    d9:37:7e:3a:58:c0:16:1e:c8:26:b6:67:d6:03:05:
                    7d:7e:4d:04:19:d0:d6:9c:e4:f3:ae:12:0b:3f:f0:
                    cd:da:99:b7:1a:ba:dd:f1:d6:58:ca:c0:64:24:f3:
                    3d:9e:9b:2f:9a:b2:70:ee:86:0b:84:37:c6:79:b1:
                    c0:f6:aa:44:3f:34:06:a0:4a:9e:77:06:34:3d:11:
                    ab:df:d7:f1:28:ab:50:d5:fa:70:cf:b5:60:cc:72:
                    ba:9c:a7:66:f2:14:08:63:5c:dc:2c:82:e6:06:64:
                    36:4a:52:63:2f:a6:a8:54:57:29:1d:16:dd:2f:58:
                    b0:41:4f:55:28:d3:90:34:13:e9:ff:2c:89:bb:c3:
                    bb:7a:6f:f6:4e:39:42:b8:9b:88:1d:c4:66:56:f3:
                    d7:6a:64:31:82:5a:c0:70:4f:d6:2a:0a:fb:e9:cd:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:4E:6F:49:2F:25:1B:AF:DC:D5:7B:A1:CD:FD:0C:71:EB:7E:C6
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/50F08C607B6511EFB1E41E43762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:2b:67:63:13:c7:6e:4d:0d:9d:3c:71:94:8b:45:df:fb:
         9d:45:81:6a:ac:38:33:ca:c3:b7:d0:fc:6a:6f:ed:01:94:33:
         c1:00:5f:f1:40:d1:fb:4b:4a:56:b9:61:de:ed:5f:5f:84:ef:
         64:92:63:61:13:9d:1a:07:28:a5:6a:db:73:b4:31:40:db:af:
         17:3e:87:4b:04:c1:6a:e7:b9:c9:10:47:65:f9:cb:d5:dc:65:
         3d:4b:c0:49:6c:b5:22:06:bd:e5:f7:49:2a:99:c0:d5:12:a4:
         4b:5e:d3:17:af:34:9d:0d:20:7a:5b:c4:7c:c0:e2:be:e3:fe:
         46:60:e0:f0:ee:46:b1:3f:a1:ec:1e:e9:37:4a:e7:d1:ca:28:
         70:b2:2f:52:cf:4e:30:11:f4:79:e7:0d:d0:dd:6b:db:d9:8f:
         8e:11:35:b6:d1:af:bb:e9:d7:97:8c:d9:1b:6f:b1:1c:28:48:
         f3:5b:e2:31:9a:12:d7:49:81:60:aa:d9:0d:56:7e:a5:4c:10:
         d7:93:2c:4a:8a:60:fc:10:e8:54:5e:46:f8:ab:e3:8b:c3:89:
         4a:8f:4d:a6:be:01:b7:f3:f6:7f:4a:6f:91:3d:5a:b0:05:e8:
         d6:62:00:0f:11:10:cb:c2:4c:29:f5:c2:13:65:ac:74:ad:89:
         e8:79:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 18:12:24 2024 by rpki-client on console-fra.rpki-client.org