Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9841D834D76711ECA53A8889F1222468.roa
File:                     9841D834D76711ECA53A8889F1222468.roa (raw, json)
Hash identifier:          3fwpHux0uBOKzzJX7vCMfVSyOZyRBiCDvdDh/U4l1iQ=
Subject key identifier:   38:87:DE:9B:58:FA:45:91:F3:6A:68:43:CF:40:F6:98:0F:1A:80:DA
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       BD
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9841D834D76711ECA53A8889F1222468.roa
Signing time:             Thu 19 May 2022 11:34:08 +0000
ROA not before:           Thu 19 May 2022 11:34:04 +0000
ROA not after:            Sun 19 May 2030 11:34:04 +0000
asID:                     1299
IP address blocks:        102.217.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 May 2022 07:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 19 11:34:04 2022 GMT
            Not After : May 19 11:34:04 2030 GMT
        Subject: CN=62862b30-f242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:0d:7d:b3:c9:c8:3e:95:55:11:c1:99:86:
                    88:2e:75:eb:cf:e7:b8:21:64:ea:f7:4f:41:26:21:
                    80:db:ee:50:1b:0b:5b:2c:af:70:80:c5:00:9e:81:
                    a0:19:08:4f:84:87:5d:d3:b1:0f:f8:6a:30:40:37:
                    f6:af:c8:f4:e6:ab:9d:4d:b1:53:ae:1f:61:4c:13:
                    c3:3b:11:93:78:84:96:fb:7d:c5:40:77:db:79:a6:
                    fe:a7:e3:00:af:49:92:c9:e6:64:96:7f:43:e5:92:
                    e8:da:de:aa:23:92:43:14:2d:39:ff:30:29:b6:51:
                    bd:6d:ef:7e:a0:3c:62:3b:33:b5:99:6e:37:35:54:
                    16:d7:39:ae:86:da:79:91:4e:ba:58:a2:19:46:59:
                    31:b9:08:b3:3c:9a:a7:de:9d:06:93:26:3b:0e:24:
                    41:42:66:5e:58:d0:d2:f1:69:73:0c:c4:81:35:60:
                    f4:30:f1:67:64:b5:6d:61:16:28:26:03:16:52:63:
                    b5:cb:92:ea:08:65:5e:34:0d:89:bb:4b:37:ad:49:
                    04:cf:ee:bf:b6:41:86:21:b7:a8:b6:21:b4:98:3c:
                    62:5e:89:6c:6f:f8:b1:28:c0:92:73:14:70:4e:a2:
                    a7:70:20:33:d2:5a:ea:f1:72:00:8d:cc:d7:c8:0b:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:87:DE:9B:58:FA:45:91:F3:6A:68:43:CF:40:F6:98:0F:1A:80:DA
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9841D834D76711ECA53A8889F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:b8:9e:08:a9:8e:06:04:70:52:06:a6:a5:01:11:b5:ed:
         17:c1:6d:ad:02:c8:e1:30:cf:6c:56:73:da:ec:67:6c:f8:23:
         67:a4:b4:62:15:e8:0e:b2:c7:ef:77:bf:97:f5:64:b6:e2:72:
         93:8b:71:58:88:64:3f:5b:71:a0:d0:01:34:41:08:ee:e0:9f:
         ed:5d:32:aa:13:01:e5:f0:21:82:32:e2:be:1d:82:b5:1f:41:
         f4:91:2d:8f:7a:0b:22:84:27:ae:91:be:76:c4:d6:e7:f8:58:
         8f:7a:53:01:7b:d0:8c:47:7b:be:8e:25:1c:e3:1d:a7:51:fe:
         b0:57:23:a2:c8:27:6c:23:af:a7:a6:f6:8a:2c:92:56:20:4b:
         12:3d:b0:d7:7b:03:60:d8:bd:6e:3c:1e:4d:f8:f6:5a:4d:32:
         77:88:f5:43:a6:83:3b:20:b7:65:05:6f:9d:5a:a1:6b:ee:ff:
         59:4f:56:4e:4c:0b:2c:b7:73:b3:2b:8f:99:dc:9e:70:d8:ac:
         1b:14:f5:7f:5b:46:46:3d:2b:aa:69:90:fe:da:b6:cb:45:90:
         2c:5b:82:70:6e:04:a4:1f:2a:1b:a5:fc:84:1c:a3:03:a4:15:
         bf:d3:d3:db:d1:41:0e:1e:00:00:1c:89:ec:c2:6f:cf:1a:ef:
         4a:6a:1c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org