Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/63E3E3E6EBCD11ECBFB1E47CF1222468.roa
File:                     63E3E3E6EBCD11ECBFB1E47CF1222468.roa (raw, json)
Hash identifier:          hmCCbS1Qc8blUPz6hmjlEtgCcNHwYothzZjTUVPDM1s=
Subject key identifier:   1A:1C:B6:81:58:5B:FA:89:B2:21:CB:D9:00:20:63:EC:0E:BC:AC:36
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0142
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/63E3E3E6EBCD11ECBFB1E47CF1222468.roa
Signing time:             Tue 14 Jun 2022 10:33:12 +0000
ROA not before:           Tue 14 Jun 2022 10:33:07 +0000
ROA not after:            Fri 14 Jun 2030 10:33:07 +0000
asID:                     61317
IP address blocks:        102.216.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Dec 2022 11:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jun 14 10:33:07 2022 GMT
            Not After : Jun 14 10:33:07 2030 GMT
        Subject: CN=62a863e8-a459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:eb:a4:d3:47:2e:54:80:11:88:98:67:9b:
                    1d:af:cb:5f:ce:1d:18:9d:79:0a:ab:4a:50:5f:7b:
                    f0:bf:06:31:5d:fd:b6:7b:73:42:8a:73:78:d4:85:
                    b4:ef:fb:b0:41:6e:af:95:e2:78:94:da:f0:b9:6b:
                    fd:4a:e3:b6:09:68:6a:4a:6e:54:5e:ee:b7:d2:1b:
                    08:4e:b6:61:b9:c4:e8:77:92:28:4a:e7:88:08:76:
                    ab:d7:fb:22:88:5c:a4:fd:05:68:39:bd:f4:55:0d:
                    ca:d2:6b:50:8d:e5:9a:32:9c:c2:9c:4c:86:51:4c:
                    9f:a4:04:a0:ea:9f:b7:cc:06:c0:6d:32:e0:bc:b4:
                    8b:f0:a4:bf:f4:29:ce:09:1d:ce:cd:1e:62:47:8f:
                    51:9f:57:c6:71:e4:8f:3d:45:09:dd:0a:9c:6f:78:
                    ab:7b:bb:59:63:54:6c:cf:55:4f:26:33:80:51:51:
                    bb:da:1d:b8:5b:7a:fd:1d:95:7c:8d:0e:2b:9d:9b:
                    b9:55:35:48:af:63:f3:20:56:0e:80:c3:53:9c:a8:
                    53:4e:b7:31:f9:c7:e5:1c:ee:59:05:83:e5:26:09:
                    74:ff:cf:ab:43:f4:09:1d:90:13:ec:04:ca:e6:44:
                    75:d4:a8:18:14:d2:20:d9:af:33:3e:00:ad:7e:1c:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1C:B6:81:58:5B:FA:89:B2:21:CB:D9:00:20:63:EC:0E:BC:AC:36
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/63E3E3E6EBCD11ECBFB1E47CF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:59:8c:62:e3:d2:cc:76:36:60:c5:9d:2b:c6:61:1f:ef:
         4c:16:e1:50:e3:e9:f4:22:80:8c:fe:12:b6:d0:7e:2b:28:b6:
         21:8b:50:7e:6e:2b:6d:65:84:b1:a1:91:8c:6f:3f:6d:2d:3a:
         42:8c:04:cf:74:78:be:b3:1c:09:56:06:64:4b:6b:54:d9:e8:
         58:1f:bd:19:73:83:a9:7c:45:0b:c3:4b:be:a6:73:0a:11:9a:
         33:4c:48:d4:3e:7d:2c:f4:3b:91:af:6f:32:5e:35:4e:91:e2:
         1f:fd:87:8e:f7:06:59:ae:da:74:db:77:83:4e:da:0e:1c:7e:
         74:b0:f9:6a:e1:ba:ed:62:76:99:70:ae:e7:1c:4c:ae:97:1e:
         11:8e:48:e1:fb:29:2e:f9:f8:4a:b3:96:7b:9f:dd:d8:16:3b:
         55:ba:a3:26:82:fc:42:02:19:71:4e:aa:89:de:87:c0:b6:7a:
         12:d4:74:a3:19:e0:6b:18:a7:ac:a7:bc:4b:a2:f5:b7:99:f1:
         5b:ee:9b:ca:cd:eb:a8:81:1d:4f:60:b6:5d:22:e2:fc:25:e2:
         a8:9c:22:47:50:7d:a7:6a:5b:0c:0c:c2:01:d9:63:40:13:e5:
         85:81:7c:0a:24:02:b3:7d:66:ca:98:53:bc:66:52:15:5c:5a:
         c7:b6:74:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yMjA2MTQxMDMzMDdaFw0zMDA2MTQxMDMzMDdaMBgxFjAU
BgNVBAMMDTYyYTg2M2U4LWE0NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6mOuk00cuVIARiJhnmx2vy1/OHRideQqrSlBfe/C/BjFd/bZ7c0KKc3jU
hbTv+7BBbq+V4niU2vC5a/1K47YJaGpKblRe7rfSGwhOtmG5xOh3kihK54gIdqvX
+yKIXKT9BWg5vfRVDcrSa1CN5ZoynMKcTIZRTJ+kBKDqn7fMBsBtMuC8tIvwpL/0
Kc4JHc7NHmJHj1GfV8Zx5I89RQndCpxveKt7u1ljVGzPVU8mM4BRUbvaHbhbev0d
lXyNDiudm7lVNUivY/MgVg6Aw1OcqFNOtzH5x+Uc7lkFg+UmCXT/z6tD9AkdkBPs
BMrmRHXUqBgU0iDZrzM+AK1+HMwfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUGhy2
gVhb+omyIcvZACBj7A68rDYwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzYzRTNFM0U2RUJDRDExRUNCRkIxRTQ3Q0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2FIwDQYJKoZIhvcNAQEL
BQADggEBAHfqWYxi49LMdjZgxZ0rxmEf70wW4VDj6fQigIz+ErbQfisotiGLUH5u
K21lhLGhkYxvP20tOkKMBM90eL6zHAlWBmRLa1TZ6FgfvRlzg6l8RQvDS76mcwoR
mjNMSNQ+fSz0O5GvbzJeNU6R4h/9h473Blmu2nTbd4NO2g4cfnSw+Wrhuu1idplw
ruccTK6XHhGOSOH7KS75+Eqzlnuf3dgWO1W6oyaC/EICGXFOqoneh8C2ehLUdKMZ
4GsYp6ynvEui9beZ8Vvum8rN66iBHU9gtl0i4vwl4qicIkdQfadqWwwMwgHZY0AT
5YWBfAokArN9ZsqYU7xmUhVcWse2dNM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org