Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A55474E6E97311EC8E271786F1222468.roa
File:                     A55474E6E97311EC8E271786F1222468.roa (raw, json)
Hash identifier:          8GOQNrx89k46beKu+O/qHdcFIXp8ao+dUNv23KsMAMA=
Subject key identifier:   8C:71:78:42:87:85:BF:98:F3:B4:15:44:65:82:C1:13:E2:B6:74:67
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0134
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A55474E6E97311EC8E271786F1222468.roa
Signing time:             Sat 11 Jun 2022 10:45:45 +0000
ROA not before:           Sat 11 Jun 2022 10:45:40 +0000
ROA not after:            Tue 11 Jun 2030 10:45:40 +0000
asID:                     328992
IP address blocks:        102.217.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 27 Dec 2022 11:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jun 11 10:45:40 2022 GMT
            Not After : Jun 11 10:45:40 2030 GMT
        Subject: CN=62a47259-00c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:88:8d:99:14:51:c3:22:a5:2f:32:49:59:
                    f3:34:58:dc:96:32:70:8c:76:8b:27:2f:b9:4e:f2:
                    bf:bf:90:27:61:e5:55:90:44:a8:19:08:34:33:99:
                    8b:2b:44:8f:ba:49:50:99:55:0f:da:bd:56:26:88:
                    20:30:57:a9:98:9e:42:28:42:37:0a:8b:5e:bd:8d:
                    04:7f:5d:5e:16:3d:76:85:eb:62:c2:47:44:1c:a3:
                    ba:e7:ab:9f:ee:19:6c:d2:5e:30:ca:bb:f3:3e:3d:
                    43:8f:d8:73:91:64:76:79:ee:92:f4:aa:99:5d:9a:
                    bf:49:d2:d3:7c:9a:a5:c1:3f:95:34:25:3b:f4:f8:
                    d3:f8:af:90:6f:b3:88:b2:b2:c5:03:9f:4b:1b:72:
                    3a:c6:4d:84:49:69:4a:19:e1:04:be:61:8e:23:7f:
                    8c:77:ed:5a:12:d1:aa:bb:26:a1:0b:3d:f5:10:f6:
                    1f:f7:b0:f7:27:ee:7e:46:d1:0b:cd:a2:4f:8d:7e:
                    e7:5b:93:4b:c2:27:a5:0f:41:24:d8:cc:b5:e9:cd:
                    d3:95:59:14:e4:3c:c4:98:97:6e:67:13:d4:12:da:
                    53:7b:33:73:a6:aa:16:08:74:68:d1:9b:91:eb:6d:
                    47:ea:5a:04:67:fd:56:33:67:e7:76:ff:b7:74:73:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:78:42:87:85:BF:98:F3:B4:15:44:65:82:C1:13:E2:B6:74:67
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A55474E6E97311EC8E271786F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:37:bc:6e:9a:51:e8:44:aa:a8:50:1d:ea:65:ba:95:9e:
         95:22:f8:9c:2d:f7:94:16:25:e8:76:32:f8:f7:16:ae:2a:8b:
         10:cf:bd:50:4d:85:a6:5f:20:2d:a0:90:6f:20:4b:1b:3c:4f:
         59:e1:9d:66:ac:25:1b:48:ce:bf:7d:01:03:c2:6c:e2:84:59:
         be:4f:6c:66:13:58:69:90:a5:20:d1:83:1f:81:d7:33:94:a8:
         e7:62:51:14:78:6d:f6:41:87:e7:5e:f6:81:28:e9:3c:1f:6c:
         e8:a6:c5:13:48:f3:38:83:9b:f0:2b:fe:c6:15:d4:d3:7a:28:
         3d:70:1c:67:29:30:79:0e:af:80:f0:2f:e4:0b:95:26:0a:c0:
         8d:fc:7b:3a:96:f1:2d:0b:83:68:9b:11:1b:4a:23:09:e0:85:
         03:ff:83:29:b5:f8:c6:28:e2:73:04:e6:a9:8a:90:d0:79:2e:
         7c:81:f4:78:71:12:6f:82:ce:9a:46:c0:3d:3d:8c:08:1c:ba:
         49:49:14:33:9d:7b:73:08:7e:7a:3b:2d:ca:84:b6:8c:13:46:
         13:8e:da:33:95:6a:3e:92:8d:54:cd:6c:e4:f2:3e:9e:24:85:
         fb:b8:28:05:6c:64:46:fe:1d:65:bf:75:93:4f:78:10:8a:a4:
         4b:b1:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org