Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DA1EA304D77111ECBF3052A8F1222468.roa
File:                     DA1EA304D77111ECBF3052A8F1222468.roa (raw, json)
Hash identifier:          zNkHC6gjYw7LNudxapfjCdzFEyvCWypiwBLKWCWSfMo=
Subject key identifier:   07:73:77:E4:D6:A5:5E:67:C8:12:67:B9:AB:CD:7C:72:A5:A0:8A:F9
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       C1
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DA1EA304D77111ECBF3052A8F1222468.roa
Signing time:             Thu 19 May 2022 12:47:33 +0000
ROA not before:           Thu 19 May 2022 12:47:30 +0000
ROA not after:            Sun 19 May 2030 12:47:30 +0000
asID:                     1299
IP address blocks:        102.217.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: May 19 12:47:30 2022 GMT
            Not After : May 19 12:47:30 2030 GMT
        Subject: CN=62863c65-d4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:f2:df:4c:91:25:d4:54:5c:0d:1c:cd:0d:
                    c4:1f:28:ea:bf:0d:31:0d:18:77:63:1d:15:ba:7d:
                    03:f6:ff:78:68:4d:ec:48:2f:e4:f2:17:bf:18:71:
                    25:b0:0d:c1:f9:34:36:0b:23:71:1f:7a:fc:fb:00:
                    4e:df:50:41:41:dd:d8:e7:6e:de:94:8f:9f:54:25:
                    1b:78:11:27:5e:36:f2:b8:c4:7d:18:8f:e9:71:c8:
                    42:71:e6:e9:90:6f:64:cc:17:11:75:3c:ba:ec:91:
                    43:e2:75:d4:10:32:4a:d4:c7:4a:5b:b2:b4:64:c6:
                    45:d0:6e:16:9c:f0:d0:c3:c6:48:11:60:c2:40:3a:
                    6f:e6:ce:91:e9:f1:c4:38:b3:3c:7d:39:86:46:72:
                    be:bb:f2:09:97:f9:a7:a1:d4:95:36:50:f1:3e:a8:
                    31:46:c0:58:23:2a:48:46:c6:b5:f9:84:87:0f:58:
                    81:e7:3f:f9:e0:8e:86:8a:51:7b:6b:ef:0d:5c:4b:
                    da:99:6c:29:2a:e5:25:a0:81:92:bc:c9:f9:b8:27:
                    2b:fc:7f:de:8d:50:b9:24:4e:f7:42:a2:e6:25:ea:
                    8c:4b:4c:3e:48:00:c9:b6:41:4a:42:a0:91:70:41:
                    87:76:5e:4f:52:fa:3a:6c:29:e4:df:e4:4a:a8:8d:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:73:77:E4:D6:A5:5E:67:C8:12:67:B9:AB:CD:7C:72:A5:A0:8A:F9
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DA1EA304D77111ECBF3052A8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cc:da:87:1d:9a:b9:da:3e:56:e2:83:28:a3:dc:59:3e:02:
         38:31:9f:33:17:da:29:ae:fb:e9:f0:20:6e:dc:04:2e:36:07:
         b3:83:63:12:ca:33:9e:85:ab:13:21:8e:60:c9:36:bd:5f:60:
         ee:67:7b:6d:2e:46:56:a2:4a:8a:c9:4c:0f:e4:22:bf:0e:76:
         fd:c7:b3:8a:2b:8d:68:1b:43:21:9b:96:39:04:dc:cc:9c:01:
         63:8e:3b:b0:21:74:ae:32:6a:07:c4:dc:f3:58:b7:68:d1:0d:
         c6:1b:d5:e5:c4:97:90:ce:bc:af:d1:06:69:64:07:13:a9:6d:
         95:03:7f:df:46:30:cd:20:f5:9d:c0:01:9e:27:dc:58:ec:f8:
         0c:47:f8:f1:12:7d:46:45:ba:65:8e:20:86:dc:45:2b:85:d7:
         df:9e:ff:32:22:59:9f:60:23:2a:30:ba:39:11:0d:78:d9:57:
         e2:b2:37:4d:e3:be:8d:a4:7f:46:19:f4:10:51:60:20:98:c8:
         54:f1:07:fa:5e:f6:48:78:fb:08:41:40:63:32:e2:19:bc:a2:
         ce:cd:6a:f4:cc:00:21:ad:9a:1b:ba:13:e8:7f:a4:66:58:96:
         50:79:b8:8c:87:3f:01:89:38:68:8b:08:03:f1:6c:a7:2c:60:
         31:db:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org