Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/B473B41ED69011ECAA38E0E5F1222468.roa
File:                     B473B41ED69011ECAA38E0E5F1222468.roa (raw, json)
Hash identifier:          9j0EcohrXRY+R1K7Txo4rtJH6If7RbWlV09OAkNjTfs=
Subject key identifier:   DE:6E:15:C0:2C:D2:DC:8F:1E:E4:08:C3:0A:B0:D9:57:8C:09:7A:3E
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       B0
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/B473B41ED69011ECAA38E0E5F1222468.roa
Signing time:             Wed 18 May 2022 09:55:53 +0000
ROA not before:           Wed 18 May 2022 09:55:49 +0000
ROA not after:            Sat 18 May 2030 09:55:49 +0000
asID:                     43260
IP address blocks:        102.216.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Jun 2022 07:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 18 09:55:49 2022 GMT
            Not After : May 18 09:55:49 2030 GMT
        Subject: CN=6284c2a9-10de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:87:ea:3f:b3:ee:f0:5f:4f:05:bb:e3:ba:
                    95:9a:72:ca:0e:29:bf:12:dd:50:27:62:f9:02:87:
                    f4:99:22:61:31:8c:18:a9:fe:74:73:7a:65:c0:aa:
                    0d:f7:c7:6e:14:f0:b7:e4:1b:b5:da:e5:36:77:fe:
                    5b:2c:aa:85:98:d8:b0:ba:78:6e:bd:7d:e6:c1:93:
                    fa:08:b1:60:e9:41:34:57:54:33:72:33:7f:4a:34:
                    93:0f:af:db:00:d0:28:ad:b5:b6:1c:e8:73:e3:86:
                    11:5a:a8:8b:d0:58:a3:ee:28:69:12:92:75:f3:b6:
                    93:42:49:c5:39:2a:b0:19:fc:2a:a7:e1:7e:50:ae:
                    8c:0a:05:a1:a8:c5:96:1d:2d:37:d7:7f:2b:97:cb:
                    93:95:ad:6c:17:91:d8:55:42:9d:50:90:2a:48:4b:
                    22:07:06:d7:c1:63:87:b7:db:df:8b:68:85:82:82:
                    91:e8:30:36:61:cf:e8:b8:97:51:b9:3e:63:9f:19:
                    3a:dc:95:63:ec:08:61:66:13:19:cf:d3:0b:cf:76:
                    cd:c4:dc:68:55:92:c2:41:eb:67:81:c9:cf:be:85:
                    52:21:34:f3:3e:cc:f7:e4:4c:d6:c6:f4:9c:6f:f0:
                    0a:29:03:3c:68:01:ff:64:73:ff:50:6c:32:81:a4:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:15:C0:2C:D2:DC:8F:1E:E4:08:C3:0A:B0:D9:57:8C:09:7A:3E
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/B473B41ED69011ECAA38E0E5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:14:16:e2:98:06:fb:15:e3:db:ac:46:01:32:09:40:90:
         61:a2:6b:27:32:77:8b:54:93:db:8b:a6:33:9a:2f:1f:2d:f3:
         91:57:a0:b2:97:09:06:6b:d2:c2:41:5a:2b:8c:66:55:b8:0c:
         7c:b5:68:9c:b9:7b:fd:f1:39:26:e7:96:6c:19:3f:18:7a:f7:
         a7:b3:69:6b:e9:6a:39:5b:22:8e:17:f7:95:f3:e1:3c:a0:5e:
         47:34:c3:75:14:5b:f5:2f:bd:c0:26:3b:65:2a:e6:3d:84:c3:
         d2:f2:76:ce:3c:ce:20:5a:63:90:a9:bd:c2:89:b9:59:77:cc:
         28:e3:60:80:02:95:16:5a:8c:b7:ec:f6:d9:d9:2a:ec:16:27:
         8f:f3:99:1d:f8:83:ec:1b:3f:6b:51:bf:ae:0c:ac:65:e8:c0:
         67:46:c7:b2:4b:9c:5c:23:7c:97:cc:49:e4:66:c8:4a:79:c0:
         54:f4:da:e7:98:11:48:f1:f8:b6:e9:3a:22:9c:ca:24:4b:14:
         da:28:ca:df:8f:b2:c2:68:36:38:9e:e1:44:17:6b:dd:d6:9c:
         6c:2d:5d:d5:3f:a8:a2:fd:95:3f:46:35:27:49:ed:e6:bf:a8:
         0f:86:31:5e:55:fe:23:d1:df:08:d0:b2:58:5d:4c:75:cd:cf:
         ec:7b:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org