Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8146C15ED0EF11ECB4FF58B5F1222468.roa
File:                     8146C15ED0EF11ECB4FF58B5F1222468.roa (raw, json)
Hash identifier:          fRsVzOsuTAHulclUSsqeyj3YNxpQM9GxsJPOLF0PXK0=
Subject key identifier:   EE:61:08:7C:5F:52:92:4B:35:ED:69:65:D1:DC:F8:35:26:72:E0:C3
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       9F
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8146C15ED0EF11ECB4FF58B5F1222468.roa
Signing time:             Wed 11 May 2022 05:59:23 +0000
ROA not before:           Wed 11 May 2022 05:59:19 +0000
ROA not after:            Sat 11 May 2030 05:59:19 +0000
asID:                     1239
IP address blocks:        102.216.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Jun 2022 07:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 11 05:59:19 2022 GMT
            Not After : May 11 05:59:19 2030 GMT
        Subject: CN=627b50bb-72e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:25:ae:dd:cf:b8:de:86:55:ea:7c:71:86:
                    39:86:52:06:c1:a3:70:f6:7e:ea:dc:46:4c:5b:18:
                    90:67:01:ef:0d:19:df:aa:c7:5e:d9:50:d9:fa:02:
                    11:66:53:63:c5:0d:4a:ac:67:02:75:cb:07:0c:cc:
                    22:76:a2:ab:cd:ef:03:4e:49:50:b7:cc:37:1d:e7:
                    90:13:19:1f:46:76:32:31:4d:15:8d:df:9b:8b:c2:
                    d9:20:76:95:f1:4d:f9:15:72:46:4e:29:1d:73:52:
                    ca:0f:96:d8:db:14:e8:c2:82:83:14:bb:79:df:04:
                    83:2c:80:37:a3:aa:1e:21:f2:8c:3d:8d:cd:07:c5:
                    76:7a:7c:5a:2e:47:84:95:06:d2:05:42:26:ab:94:
                    c5:ab:e2:2b:43:1e:48:56:84:ce:40:87:77:e2:2a:
                    5d:67:d8:3d:a3:8e:77:32:4f:d1:b3:7e:ca:8f:a7:
                    db:93:6a:01:2d:5f:3f:63:cd:85:9e:a3:61:07:8c:
                    36:4c:9d:ee:56:d6:9c:75:15:dd:f5:97:81:65:5f:
                    68:ef:28:db:5e:b6:e4:24:3f:24:fa:78:3e:2d:c0:
                    9f:dd:9d:cf:b2:1f:56:82:84:9c:f1:9b:79:3f:21:
                    36:2b:6a:bd:d7:b6:e7:3e:72:11:f9:42:2f:c7:00:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:08:7C:5F:52:92:4B:35:ED:69:65:D1:DC:F8:35:26:72:E0:C3
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/8146C15ED0EF11ECB4FF58B5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:64:54:08:0a:b3:e9:6e:fe:78:6e:9d:da:a7:1f:94:21:
         a5:2b:42:d1:c6:b1:35:b2:45:0e:4a:87:e1:e7:b3:8c:46:09:
         f2:95:66:44:63:c1:10:de:8b:86:47:36:38:14:18:88:e6:f5:
         84:fa:7a:a4:b8:77:85:fc:1b:2c:c4:d4:9a:40:db:da:7e:85:
         5d:6a:b5:1d:e6:8f:20:d6:1f:5a:c6:1b:b6:40:23:57:06:fb:
         ef:71:70:88:31:d4:f2:61:72:b4:87:b3:9e:c8:03:c4:f7:4b:
         9c:21:db:43:0d:3f:ae:c0:64:dc:7d:e0:df:82:45:ca:7d:cc:
         53:6a:67:e4:fe:92:ff:3b:8f:95:04:22:f3:eb:bd:7d:7c:82:
         38:6c:4d:74:f6:6c:35:af:ad:b6:d9:87:c8:87:e6:65:25:1b:
         5e:d1:72:b5:83:f5:73:d7:56:77:45:07:c8:80:3b:dd:94:0c:
         f5:e0:6e:b7:ec:b7:ff:66:99:3f:ad:7e:95:78:a4:ff:1e:9a:
         f8:c7:a5:03:3f:e1:3a:cd:c5:83:d9:ad:73:6c:04:a0:3e:53:
         50:75:da:04:77:11:9e:37:95:6a:d1:50:fd:0c:d7:fb:3a:dd:
         34:55:e9:09:b5:e0:cc:47:17:2e:6e:6b:b8:a4:8a:d8:7f:c4:
         6e:2b:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org