Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/68D66A26E97611EC859AA48EF1222468.roa
File:                     68D66A26E97611EC859AA48EF1222468.roa (raw, json)
Hash identifier:          xEyGi1qySy9Wbgzb0WEWzJVo3Dek9pdENkkto1vtIpw=
Subject key identifier:   1C:6F:33:79:77:BB:66:A0:66:F1:11:42:16:8F:DC:D8:30:08:47:AC
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0139
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/68D66A26E97611EC859AA48EF1222468.roa
Signing time:             Sat 11 Jun 2022 11:05:32 +0000
ROA not before:           Sat 11 Jun 2022 11:05:28 +0000
ROA not after:            Tue 11 Jun 2030 11:05:28 +0000
asID:                     61317
IP address blocks:        102.217.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 27 Dec 2022 11:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jun 11 11:05:28 2022 GMT
            Not After : Jun 11 11:05:28 2030 GMT
        Subject: CN=62a476fc-c2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:26:83:80:0b:5a:6d:8d:63:1d:6f:57:11:96:
                    31:91:21:52:0d:5a:e0:21:7a:d1:08:6f:c8:d7:9a:
                    4b:8b:bd:ee:77:b8:2f:64:da:01:c0:62:e6:99:5b:
                    33:cd:5f:24:8d:60:6f:13:e8:66:87:78:e7:15:76:
                    ba:2e:1a:da:e4:a0:fd:cc:62:59:4c:df:46:14:f9:
                    82:fc:78:aa:da:60:62:9a:14:ff:27:5b:da:8a:8c:
                    c0:a0:b8:78:bc:5e:00:f1:70:b5:40:09:a1:d0:76:
                    76:1e:dc:69:b1:8a:da:2e:0d:83:36:dd:23:af:a1:
                    5c:f2:31:7c:6b:cc:27:97:30:76:f2:5d:b3:cb:3a:
                    56:52:57:55:f6:98:b4:9a:15:2e:4a:e9:30:19:05:
                    92:79:04:b9:82:9e:61:64:f4:60:28:e3:81:91:3d:
                    bf:fd:7a:e2:79:92:63:86:5d:5b:ea:14:6d:a0:60:
                    3f:de:b4:49:ae:e8:4c:e0:19:8a:a2:fe:93:3e:0c:
                    c6:08:49:ff:5c:1f:21:5d:68:8f:74:49:8e:88:68:
                    c2:cb:19:21:ef:b2:4f:f3:67:fd:86:a3:ff:33:69:
                    68:4f:c3:7b:5b:9e:a9:fa:1a:06:ca:d8:36:be:11:
                    2a:cd:dc:cb:42:42:00:64:35:cb:ac:42:24:1a:fb:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6F:33:79:77:BB:66:A0:66:F1:11:42:16:8F:DC:D8:30:08:47:AC
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/68D66A26E97611EC859AA48EF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:23:e9:40:ad:d4:6e:9b:58:1d:9d:7c:ee:7d:d5:63:03:df:
         1d:83:2a:f3:58:df:53:7d:c6:f7:d0:60:58:ab:f7:f1:10:03:
         ae:cc:c1:a7:19:0c:ab:0b:2b:3b:55:4d:65:77:be:a0:c0:f1:
         6e:e5:e3:b2:d8:72:fd:01:c3:48:0e:20:e7:44:3f:5c:ce:55:
         e8:29:a5:be:bc:2d:15:2d:d2:04:75:a6:ac:41:81:3e:4f:00:
         3e:26:0f:62:79:c7:4c:33:8c:99:4f:c1:78:98:05:5b:06:60:
         fb:9d:f5:b6:6a:21:9b:ba:47:4d:f3:94:4b:1b:e9:48:3b:c4:
         62:e8:8d:3b:04:b4:66:ae:83:ed:33:2c:99:dd:cf:43:24:7d:
         90:4b:48:78:db:d4:72:12:eb:aa:e6:33:e9:e8:da:84:3b:a6:
         95:01:09:b0:ac:9e:8a:85:09:20:97:99:8f:5f:df:ee:42:37:
         fb:c9:38:64:79:bc:59:f0:0b:35:07:87:2f:c4:6a:b8:f3:c9:
         90:36:7f:1e:82:78:d2:f1:e1:19:1f:41:64:d3:3e:cb:7c:0c:
         35:31:c1:47:52:d6:cf:a0:09:6a:d6:b0:2f:36:44:87:7b:63:
         84:78:57:29:6b:f9:68:ec:3d:e2:ad:1c:2a:5f:4e:ae:09:f5:
         4f:d7:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org