Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DF72E33AE97611EC90BF2490F1222468.roa
File:                     DF72E33AE97611EC90BF2490F1222468.roa (raw, json)
Hash identifier:          R2gkag2PC5TOs7umqDt+inb+ZesZOZ3MtvvptDvbc7I=
Subject key identifier:   EA:08:DF:4A:00:D6:B6:14:40:33:C1:90:54:F6:27:4A:9B:FB:F2:8B
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       013B
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DF72E33AE97611EC90BF2490F1222468.roa
Signing time:             Sat 11 Jun 2022 11:08:51 +0000
ROA not before:           Sat 11 Jun 2022 11:08:47 +0000
ROA not after:            Tue 11 Jun 2030 11:08:47 +0000
asID:                     61317
IP address blocks:        102.216.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 27 Dec 2022 11:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jun 11 11:08:47 2022 GMT
            Not After : Jun 11 11:08:47 2030 GMT
        Subject: CN=62a477c3-b6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:c6:f3:56:d7:29:20:51:55:2f:1f:8c:4b:
                    28:98:ba:ce:03:91:46:8a:1d:22:61:de:f3:12:45:
                    c7:6d:53:2d:44:ff:56:b1:e3:9e:d3:c1:8b:07:48:
                    9d:34:6a:a9:87:c8:eb:34:6b:80:67:d7:24:4e:ee:
                    99:cd:4d:fb:f7:04:75:91:b8:8a:f6:76:9e:26:2d:
                    ee:a3:5c:79:34:1c:e5:76:4b:38:ee:a4:fc:07:8f:
                    35:1c:0e:2f:56:33:34:a5:96:b7:ae:e2:f8:cb:db:
                    33:2f:c2:6f:34:b7:14:bb:1a:26:14:e8:d4:0d:51:
                    d5:e7:8b:99:9a:9b:64:3f:b5:35:ad:0a:1e:9a:58:
                    8c:2d:94:7b:a5:96:56:69:b9:dd:91:1e:07:da:50:
                    c6:8f:0a:03:ce:31:79:ba:a6:13:e7:f5:86:1c:21:
                    61:bd:89:bc:99:94:da:d9:1a:92:00:fe:99:cd:39:
                    9e:d2:e1:ff:28:87:8a:af:02:af:79:d7:fe:c4:dc:
                    e5:84:b2:fc:04:53:68:01:6e:70:f6:e8:28:38:3c:
                    bc:8a:b2:25:40:02:5b:99:24:35:06:90:4e:c9:83:
                    f1:79:0e:d7:0e:b0:65:f7:ca:b0:27:8c:03:fe:ac:
                    3a:51:a3:c1:6b:df:8d:83:f1:14:50:30:5d:16:9c:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:08:DF:4A:00:D6:B6:14:40:33:C1:90:54:F6:27:4A:9B:FB:F2:8B
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/DF72E33AE97611EC90BF2490F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:56:50:bd:25:7f:7c:3d:16:a8:62:3d:e6:de:bb:bb:24:
         ac:76:e8:fc:35:2a:ca:25:71:d6:cf:57:54:49:a2:ce:9c:44:
         34:6c:b9:25:ce:0a:a8:d4:16:bd:ba:4f:b9:83:a7:97:67:88:
         e8:aa:7d:f8:e5:89:c6:58:7e:9d:3a:35:68:aa:8a:5a:3e:2d:
         96:a8:a3:98:b6:0e:51:6e:b1:b7:f3:2e:69:b2:1d:f5:e4:35:
         50:de:de:4d:af:dd:1c:77:ad:d1:63:6b:0c:33:05:27:90:23:
         e4:cf:cb:72:6d:ae:76:e3:b8:4b:1b:24:ad:be:30:23:f1:bb:
         e0:00:f9:5b:41:08:39:d6:21:98:76:e7:a9:28:bf:42:0e:a6:
         f9:cf:99:e6:15:d1:39:75:5e:1d:f2:d9:47:b5:71:a7:5d:ed:
         92:f3:b8:c3:05:cb:49:2c:d8:76:5d:9f:23:8d:ca:f0:0a:33:
         39:5e:a4:25:08:3d:fe:0e:e9:f2:d4:6c:1c:ee:89:6d:67:e1:
         39:c9:df:b6:ee:1d:dc:01:a2:f4:ff:46:e3:45:d2:6e:ed:71:
         a2:45:6d:50:1e:51:d2:3a:66:97:83:45:f8:bb:41:65:c0:15:
         6b:62:d3:68:53:08:71:4f:0b:05:2b:fa:26:f5:c3:ac:ed:7d:
         8f:fa:cd:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICATswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yMjA2MTExMTA4NDdaFw0zMDA2MTExMTA4NDdaMBgxFjAU
BgNVBAMMDTYyYTQ3N2MzLWI2ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSuMbzVtcpIFFVLx+MSyiYus4DkUaKHSJh3vMSRcdtUy1E/1ax457TwYsH
SJ00aqmHyOs0a4Bn1yRO7pnNTfv3BHWRuIr2dp4mLe6jXHk0HOV2SzjupPwHjzUc
Di9WMzSllreu4vjL2zMvwm80txS7GiYU6NQNUdXni5mam2Q/tTWtCh6aWIwtlHul
llZpud2RHgfaUMaPCgPOMXm6phPn9YYcIWG9ibyZlNrZGpIA/pnNOZ7S4f8oh4qv
Aq951/7E3OWEsvwEU2gBbnD26Cg4PLyKsiVAAluZJDUGkE7Jg/F5DtcOsGX3yrAn
jAP+rDpRo8Fr342D8RRQMF0WnHa5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU6gjf
SgDWthRAM8GQVPYnSpv78oswHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3L0RGNzJFMzNBRTk3NjExRUM5MEJGMjQ5MEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2FAwDQYJKoZIhvcNAQEL
BQADggEBAICoVlC9JX98PRaoYj3m3ru7JKx26Pw1KsolcdbPV1RJos6cRDRsuSXO
CqjUFr26T7mDp5dniOiqffjlicZYfp06NWiqilo+LZaoo5i2DlFusbfzLmmyHfXk
NVDe3k2v3Rx3rdFjawwzBSeQI+TPy3JtrnbjuEsbJK2+MCPxu+AA+VtBCDnWIZh2
56kov0IOpvnPmeYV0Tl1Xh3y2Ue1cadd7ZLzuMMFy0ks2HZdnyONyvAKMzlepCUI
Pf4O6fLUbBzuiW1n4TnJ37buHdwBovT/RuNF0m7tcaJFbVAeUdI6ZpeDRfi7QWXA
FWti02hTCHFPCwUr+ib1w6ztfY/6zRc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org