Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F2335574498511EFAF468243762E951A.roa
File:                     F2335574498511EFAF468243762E951A.roa (raw, json)
Hash identifier:          do6MCrn199uoCov7BLj5J3K64AJQYArs8oypb/Okxxw=
Subject key identifier:   B2:FA:5F:BB:C4:B8:60:24:01:D9:D1:AA:0D:11:3A:0A:4D:79:CB:9B
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       04CA
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F2335574498511EFAF468243762E951A.roa
Signing time:             Wed 24 Jul 2024 06:28:32 +0000
ROA not before:           Wed 24 Jul 2024 06:28:27 +0000
ROA not after:            Wed 24 Jul 2030 06:28:27 +0000
asID:                     61317
IP address blocks:        102.216.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 04 Aug 2024 11:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jul 24 06:28:27 2024 GMT
            Not After : Jul 24 06:28:27 2030 GMT
        Subject: CN=66a09f0f-b706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:29:29:5f:a0:87:46:f3:23:89:c4:f1:b5:
                    3b:04:80:0b:af:94:d6:9b:3f:f7:18:da:c5:0d:2a:
                    80:72:83:74:ff:d9:9e:bc:31:83:73:b6:d4:b1:04:
                    9d:4d:9e:09:fc:91:9e:26:0f:83:f6:62:a4:0f:d7:
                    59:25:b5:22:33:9b:b1:d8:8e:40:7a:27:9b:4b:04:
                    36:64:b4:36:b9:f2:3e:ef:6c:7c:06:47:09:e8:1d:
                    4a:9a:d8:74:41:2d:50:4b:60:70:bc:ea:3f:b6:96:
                    bd:39:8a:b6:0b:1b:7f:7e:ce:bd:7b:59:8b:c2:b8:
                    ee:42:cc:ab:7f:05:73:c2:f4:f7:47:44:15:9c:15:
                    28:f1:38:3b:a4:16:41:f8:97:c1:b8:e9:fb:5c:51:
                    e5:62:e7:82:9a:d0:66:96:77:f3:28:7a:11:6f:55:
                    a2:ad:9b:05:ce:73:60:1c:61:db:bb:e2:5a:b6:51:
                    c1:7d:2d:92:ba:57:ef:3b:22:bc:4d:d9:e2:75:fa:
                    28:66:a5:3e:db:ba:b4:7b:36:b8:e5:e4:27:4b:25:
                    c5:75:cd:97:8c:1a:d8:26:ff:b9:a6:c3:f3:20:79:
                    e2:b2:7e:68:c0:82:db:67:bf:7e:0b:98:51:7b:4b:
                    7a:25:e0:9b:65:66:62:e0:a0:5a:b5:27:25:14:85:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FA:5F:BB:C4:B8:60:24:01:D9:D1:AA:0D:11:3A:0A:4D:79:CB:9B
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/F2335574498511EFAF468243762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:f3:50:4a:76:e8:d5:3a:50:9f:d7:a9:55:a8:d4:55:e2:
         8c:dd:21:23:88:8f:54:7d:8a:91:97:e7:16:a2:9d:43:86:04:
         16:9a:62:5d:9d:e7:d9:2a:be:c4:e7:c0:13:fd:bc:9a:6e:d4:
         e5:ea:c1:89:d7:86:c7:25:7b:ba:df:58:c1:12:82:03:7a:03:
         48:cc:c1:23:78:96:21:9e:6e:93:8a:e6:28:c3:7e:31:3c:9e:
         fe:39:0a:77:98:fe:24:c4:73:f9:45:92:42:26:38:ed:d7:07:
         38:22:56:3b:72:fe:b7:a2:de:be:5b:c7:0a:ac:ae:b8:e3:a7:
         01:96:72:a9:69:e6:b5:fc:32:cd:9c:7f:6d:03:76:57:93:ef:
         d2:43:98:49:8d:71:7b:8b:30:54:47:de:e9:63:6c:26:33:74:
         f4:fe:49:6d:b2:64:1a:84:f4:f0:3b:ae:6d:f4:d1:30:bf:3f:
         2b:33:b2:04:84:70:97:2e:81:7a:7f:0b:ee:02:88:ae:ab:a5:
         7e:cb:71:1d:10:66:86:51:52:0f:fe:4f:b4:32:53:4a:77:94:
         1e:af:30:47:c8:9c:d9:01:30:fd:20:dd:e0:b5:99:cf:62:b8:
         ab:60:c6:3e:fd:8b:7d:0c:c6:40:b5:08:da:31:18:47:3d:18:
         be:c8:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 13:36:36 2024 by rpki-client on console-fra.rpki-client.org