Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A6FDF79ED6AF11EC8DA201C5F1222468.roa
File:                     A6FDF79ED6AF11EC8DA201C5F1222468.roa (raw, json)
Hash identifier:          at5aOVJeAcg2DP2UoMnV1oXw7lSVMSlmj2sSZKPQcfg=
Subject key identifier:   07:DE:D2:DF:80:92:53:DF:B0:D6:71:6E:C6:FD:42:46:44:B4:26:87
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       B7
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A6FDF79ED6AF11EC8DA201C5F1222468.roa
Signing time:             Wed 18 May 2022 13:37:25 +0000
ROA not before:           Wed 18 May 2022 13:37:21 +0000
ROA not after:            Sat 18 May 2030 13:37:21 +0000
asID:                     210574
IP address blocks:        102.217.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Jun 2022 19:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 18 13:37:21 2022 GMT
            Not After : May 18 13:37:21 2030 GMT
        Subject: CN=6284f695-66fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:cb:ef:4a:bf:04:e1:58:fc:39:eb:c4:25:
                    5b:6c:0b:b2:5d:c1:5f:a7:56:0f:73:47:92:2e:0d:
                    ed:a1:ba:4c:a6:13:46:c6:ee:42:31:cb:ba:73:6a:
                    3c:d3:2a:5e:18:f7:c8:e7:a5:10:09:7e:5f:94:bf:
                    3e:cb:e7:c1:8b:f6:cd:f8:99:bf:e0:f8:14:74:51:
                    ec:f3:50:41:67:b2:29:f5:82:00:34:7d:c0:03:a7:
                    26:5b:9e:7f:56:56:78:e5:6b:bf:22:99:6e:3f:e2:
                    d0:1f:2e:5e:39:c8:82:18:4f:c8:5d:f8:de:07:9a:
                    40:23:2a:fc:b9:4f:2e:1f:86:05:8b:21:d0:21:ee:
                    df:0c:58:99:60:86:dd:45:0e:52:2c:f5:1b:89:2e:
                    92:68:52:66:c6:00:89:7e:e7:41:3c:ee:0d:63:0f:
                    d3:f6:43:df:76:22:07:a0:ce:ed:9a:b3:bb:f3:86:
                    9e:c8:0a:c4:42:05:bb:ac:81:b9:43:0e:13:1e:92:
                    54:26:0b:62:2c:69:2e:5d:06:ac:e1:84:18:b8:40:
                    7e:7b:e6:7f:ac:6d:cf:09:f6:30:bb:d5:10:4f:37:
                    28:04:2c:b0:8d:5a:d0:76:f9:cc:a4:82:54:8b:c7:
                    1b:4d:1e:db:14:87:aa:98:a0:a7:2e:cf:5c:f0:da:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DE:D2:DF:80:92:53:DF:B0:D6:71:6E:C6:FD:42:46:44:B4:26:87
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A6FDF79ED6AF11EC8DA201C5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:8e:e1:5c:3a:1c:69:09:5a:ae:da:95:d8:2d:d6:36:f7:
         57:0a:f4:53:6a:f5:92:c9:a8:fa:57:a4:6c:17:5e:17:f6:07:
         17:4a:e7:d7:a3:47:f7:53:1d:09:a1:d4:23:d4:3b:c6:6f:12:
         d7:4d:ee:0b:0c:98:7b:a2:75:58:94:68:b4:cb:c4:80:c7:2a:
         ea:22:ba:b1:07:93:63:d4:41:c8:76:b9:1d:c8:67:b5:a2:58:
         4a:17:04:f6:27:e8:c0:9e:3a:f6:7b:b6:f3:87:2d:0f:10:df:
         6b:dd:05:de:24:1f:59:bd:1d:7b:e6:c8:7b:29:98:f3:bc:e5:
         e5:db:70:57:b6:f4:ea:fb:53:81:27:f8:ca:da:10:aa:73:a9:
         9d:ad:bf:bc:2e:60:64:06:d5:2a:a4:14:c0:76:9e:cd:a9:e0:
         6a:00:99:82:46:d5:8d:b8:83:30:93:5c:93:71:af:26:7f:63:
         39:32:f9:07:5a:0e:0d:fb:e0:71:0d:48:6a:c7:20:20:4b:93:
         e5:21:d8:47:05:04:2f:77:05:10:e3:69:c0:29:89:00:95:7a:
         1d:90:d9:6b:7d:0e:48:9f:79:28:9a:ad:74:2a:b6:ab:a3:53:
         18:a9:67:bb:69:3a:8c:96:68:71:b3:73:ea:d7:84:08:e5:3d:
         02:e2:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org