Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A934FDC448DF11EF8D7FC658762E951A.roa
File:                     A934FDC448DF11EF8D7FC658762E951A.roa (raw, json)
Hash identifier:          qZYM+Nt8dF0pYBPaFwYkfqHKr2dId0GPKm4j3/Tt5sA=
Subject key identifier:   96:8B:C4:38:D9:1B:25:71:FD:72:CA:59:77:21:5D:CF:7F:03:20:16
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       04C1
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A934FDC448DF11EF8D7FC658762E951A.roa
Signing time:             Tue 23 Jul 2024 10:38:12 +0000
ROA not before:           Tue 23 Jul 2024 10:38:09 +0000
ROA not after:            Tue 23 Jul 2030 10:38:09 +0000
asID:                     834
IP address blocks:        102.216.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 08:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jul 23 10:38:09 2024 GMT
            Not After : Jul 23 10:38:09 2030 GMT
        Subject: CN=669f8814-0906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:01:9c:86:02:c6:cb:3e:a2:69:7f:af:23:
                    ce:a4:e3:d0:1e:72:3f:53:3b:88:bc:76:c8:1c:e0:
                    6d:44:7f:1a:50:fd:ad:73:53:8c:55:9b:40:b6:57:
                    ef:d5:f2:7a:dd:7e:66:bc:1f:cd:96:e5:d3:9e:af:
                    cd:50:b7:dd:78:a6:4c:de:08:fe:15:6d:dc:3d:11:
                    9f:a9:f7:ee:c0:da:16:d1:49:bd:4f:ac:62:3b:ba:
                    f5:cd:cb:f8:ec:c6:3d:54:19:5b:a8:20:72:41:71:
                    44:1c:ef:10:59:75:f4:26:0d:3d:18:2a:3f:9f:6a:
                    ee:ef:1d:bd:90:77:34:61:e7:ad:b8:9a:c5:e8:ac:
                    a3:08:6a:38:da:21:f8:f6:bb:0d:f5:1b:7b:72:40:
                    2e:d2:93:02:eb:14:77:a6:9a:73:8b:51:eb:a3:ea:
                    63:72:d3:e1:2a:c8:e5:b7:51:42:d7:7e:20:55:f8:
                    b2:6a:0b:66:e1:f7:a1:14:e6:20:24:c9:74:26:9e:
                    51:03:f4:25:40:84:56:83:97:86:98:fd:eb:ae:d3:
                    eb:cb:dd:e1:59:38:3c:c0:09:b2:1e:d6:22:1f:b3:
                    0c:4d:8b:60:ff:fe:5a:64:9a:c7:f1:03:2f:03:19:
                    c1:71:9f:61:c8:10:be:be:89:02:ec:e5:aa:31:78:
                    a8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8B:C4:38:D9:1B:25:71:FD:72:CA:59:77:21:5D:CF:7F:03:20:16
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A934FDC448DF11EF8D7FC658762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:54:19:0d:db:15:58:10:c4:6e:99:0c:c0:4b:0e:0f:d7:
         df:7c:a8:4f:58:6c:81:57:05:25:08:58:f0:7e:6d:b7:26:61:
         5c:c2:16:fe:71:1d:8f:3b:71:f9:e2:65:c2:23:80:5d:77:c8:
         64:e0:51:8e:80:2b:c2:65:58:df:e9:cc:b1:96:fc:6d:7e:51:
         92:5a:21:be:ba:0e:ae:99:7d:3b:d7:e3:ec:e3:5d:91:b5:3e:
         9b:82:09:50:b4:e8:5a:0f:dd:8f:c4:68:49:7e:e3:6b:61:cb:
         26:a8:0f:c5:a4:73:5b:ca:4c:40:0f:aa:ee:3d:de:89:03:10:
         1c:79:f7:ba:51:80:02:e0:5c:74:56:ae:ce:99:97:4c:90:28:
         60:cb:5a:c6:03:c7:9a:c1:31:c7:b2:15:89:7f:7d:1b:bf:50:
         f8:1c:ff:53:3c:91:c2:d5:55:9a:86:fd:1c:b0:b7:57:a0:11:
         6f:f5:1a:01:5e:5e:01:72:38:b0:af:28:02:94:0b:39:9d:3c:
         00:5b:0d:1c:27:3a:47:ba:ed:fe:cb:83:70:7f:1b:d2:f0:f7:
         14:16:30:23:14:cb:25:04:4d:70:68:c1:1c:82:69:06:9e:16:
         d1:b8:01:7c:5a:d8:36:d7:b5:7b:2f:1b:4d:5b:be:c3:d5:af:
         60:cc:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 12:12:33 2024 by rpki-client on console-ams.rpki-client.org