Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A257F9409C4B11EC9BE61CE85A40D577.roa
File:                     A257F9409C4B11EC9BE61CE85A40D577.roa (raw, json)
Hash identifier:          //mC6pdWqXhOD0xRMT4goZiRHuhz+SY3kEdpX26jCHw=
Subject key identifier:   B6:31:47:1F:50:E3:CD:B4:29:EF:FF:4C:FB:D6:6E:83:04:E8:5D:DE
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       4E
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A257F9409C4B11EC9BE61CE85A40D577.roa
Signing time:             Sat 05 Mar 2022 06:15:20 +0000
ROA not before:           Sat 05 Mar 2022 06:15:16 +0000
ROA not after:            Mon 05 Mar 2029 06:15:16 +0000
asID:                     328992
IP address blocks:        102.216.80.0/22 maxlen: 22
                          102.216.80.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 May 2022 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Mar  5 06:15:16 2022 GMT
            Not After : Mar  5 06:15:16 2029 GMT
        Subject: CN=6222fff8-12d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f0:0d:0d:ab:cd:15:48:a3:6f:2d:92:41:26:
                    19:0e:46:0f:30:53:c8:02:88:9f:e0:5f:46:74:88:
                    26:b3:6d:5f:38:ea:19:5c:1b:0f:71:48:11:7a:64:
                    ec:43:19:d8:56:44:1f:80:5b:ee:b4:7f:3f:a6:80:
                    fb:38:16:43:1b:81:28:c2:7b:e0:fb:a8:88:e1:c4:
                    23:fe:56:91:d5:a1:6d:d9:6b:ad:9f:50:6a:8c:70:
                    dd:93:c2:58:f5:3d:b2:7d:54:4e:b9:97:82:26:fa:
                    f9:f0:44:25:fe:82:2c:fa:43:d7:55:e7:c3:4a:ab:
                    35:6c:f9:8c:05:db:8c:ed:b3:a3:a7:04:d7:99:89:
                    60:b9:92:85:76:a4:00:a0:14:a0:0f:93:86:9e:f2:
                    3e:26:a0:8e:18:84:af:2c:1c:8d:1c:40:2e:69:04:
                    11:79:ad:7f:aa:86:ff:31:30:8f:38:5f:d5:bb:a7:
                    df:0f:c5:7f:f6:35:68:73:4e:46:78:9e:f6:ff:21:
                    91:d6:af:10:af:c0:b9:38:c0:37:5e:f6:6b:43:31:
                    07:85:5c:95:70:b1:10:70:e2:8f:7d:0e:6f:03:65:
                    65:3a:d1:e8:af:e3:d7:48:c3:f8:0f:e3:e0:1d:b8:
                    14:8b:c8:16:ce:51:11:cd:57:3f:19:2e:86:0f:80:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:31:47:1F:50:E3:CD:B4:29:EF:FF:4C:FB:D6:6E:83:04:E8:5D:DE
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A257F9409C4B11EC9BE61CE85A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:71:ab:85:2b:1c:06:ad:88:45:77:c9:ee:b9:b7:05:b3:
         af:9d:79:ba:e0:0b:83:9e:23:e5:08:31:96:70:c7:8a:da:02:
         93:2c:0b:90:c7:8c:34:8d:7f:2d:8f:6c:43:1c:00:ca:d0:e8:
         d6:03:dd:8d:26:30:36:ba:23:11:29:3f:33:58:e7:ec:ad:8d:
         66:52:13:e1:a1:69:c8:d9:e0:fc:11:0f:dc:1a:6b:1d:ca:10:
         ad:67:57:ba:c6:1d:c1:6a:0a:92:29:95:06:2b:52:68:bf:1d:
         e4:fd:f0:d4:54:1a:0c:20:86:60:cc:e2:35:72:4c:d1:8c:70:
         9e:d9:10:35:0d:8e:90:55:53:3d:ae:4b:4c:8a:5a:8b:d0:48:
         fb:8c:14:0e:23:15:23:81:96:77:e6:96:fe:ae:d3:3a:c5:6e:
         9b:5e:62:5e:54:20:31:53:da:ba:31:f0:fb:84:11:ea:63:3d:
         23:7e:1e:08:22:77:15:1e:97:bc:75:ea:e1:49:84:93:2c:8a:
         a2:2f:f9:97:37:59:e8:cb:25:34:1c:da:94:05:af:15:39:68:
         ed:35:16:c8:fa:32:a9:61:1c:f3:70:e5:86:3a:1f:2e:10:c5:
         9b:09:b0:4a:b3:e6:33:76:67:e5:c5:70:36:fa:f3:81:7f:e5:
         a1:47:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org