Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CAEEC1C0D76711EC96690A8AF1222468.roa
File:                     CAEEC1C0D76711EC96690A8AF1222468.roa (raw, json)
Hash identifier:          Cq4U4u6vqLWhesRQ3T0CvAJ1ZvHjeazxZ+k55XTVRfY=
Subject key identifier:   73:E8:1B:F7:A6:ED:21:C3:03:72:B0:05:27:A9:90:A4:A0:51:C8:80
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       BF
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CAEEC1C0D76711EC96690A8AF1222468.roa
Signing time:             Thu 19 May 2022 11:35:33 +0000
ROA not before:           Thu 19 May 2022 11:35:29 +0000
ROA not after:            Sun 19 May 2030 11:35:29 +0000
asID:                     398465
IP address blocks:        102.217.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 May 2022 07:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 19 11:35:29 2022 GMT
            Not After : May 19 11:35:29 2030 GMT
        Subject: CN=62862b85-2e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:65:b3:95:59:d5:b1:77:eb:ba:5f:1e:71:
                    29:cc:90:d5:2c:45:29:53:6f:ee:00:cd:ec:ad:5d:
                    f9:1a:bb:23:d0:3a:e0:e7:32:4a:ef:17:2b:25:1c:
                    5c:b7:be:b0:76:59:fa:c5:04:93:6f:13:80:b6:19:
                    ba:69:70:69:99:de:04:3f:ae:2c:07:10:c2:41:3e:
                    b2:ed:65:ed:b2:72:35:1d:4a:e8:3d:5d:81:20:4c:
                    88:b2:47:6d:18:80:58:b7:e4:76:e7:62:2c:be:2c:
                    76:bc:b3:b0:b6:09:e2:d1:98:b6:8f:d0:68:9a:89:
                    7f:0e:19:16:f9:3f:d3:6c:6c:36:50:84:20:da:81:
                    7b:81:5c:ab:15:af:5c:69:84:96:46:4f:fd:03:44:
                    bb:54:7d:cb:9d:00:4d:f4:0e:f6:6c:d5:72:f1:46:
                    20:59:f2:f0:7d:42:8f:6f:71:b3:6c:64:8d:08:61:
                    71:ee:e9:d6:70:75:9d:97:5b:8b:2c:eb:12:a8:12:
                    fe:b4:04:cb:ad:29:ea:ca:fc:2f:bb:06:46:bd:c4:
                    b9:e2:50:54:8b:61:e4:86:5b:f8:41:6e:2b:60:ce:
                    a7:d1:5f:00:33:98:4d:64:0f:da:f7:a0:7e:6d:5f:
                    3a:23:07:42:d6:0c:c5:b6:9a:56:72:cf:ab:a1:eb:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E8:1B:F7:A6:ED:21:C3:03:72:B0:05:27:A9:90:A4:A0:51:C8:80
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/CAEEC1C0D76711EC96690A8AF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:d1:24:50:bb:0b:0b:f0:5e:e4:54:c1:cc:bc:64:f2:09:
         0d:67:45:57:2d:0b:bb:a6:ef:61:53:d1:f3:6e:6b:a9:5f:08:
         f6:8d:7b:32:96:3d:0b:f6:bc:6e:a1:71:61:b0:ce:60:90:8f:
         95:dc:b9:f4:b5:eb:fe:f0:7d:d5:13:33:2e:81:a7:85:bf:12:
         0c:e8:a7:5e:59:44:89:e6:70:42:12:aa:c4:6c:9b:e5:6c:82:
         be:38:e4:bd:ec:bc:70:5d:74:00:87:a0:22:cb:db:24:0d:f7:
         09:cf:fa:ff:c8:60:62:36:ef:97:82:4c:be:63:2e:4a:59:3d:
         be:28:ce:43:93:04:8b:8a:8a:a8:c0:21:e7:77:00:94:9d:36:
         4f:d3:2c:fe:6a:44:cf:dc:1c:f4:33:81:01:2c:82:3e:a4:1c:
         8e:7c:b0:1f:cf:89:4e:74:20:3e:6c:f1:b6:2f:0e:22:cf:8b:
         fd:b3:46:c3:ea:06:6b:fd:c1:dd:89:03:ff:16:2f:a3:f6:27:
         46:b2:1f:86:fc:b1:cc:ad:19:9d:56:15:3d:bf:90:24:12:72:
         c1:a8:8e:80:a4:99:c8:fd:e3:84:64:fb:ab:19:69:68:45:c3:
         85:7a:7b:12:95:d0:9f:b8:06:65:2f:2c:85:b9:42:e4:35:5e:
         00:23:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org