Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/1EE9E0602BBE11EE935154764AD9E6FC.roa
File:                     1EE9E0602BBE11EE935154764AD9E6FC.roa (raw, json)
Hash identifier:          mVxfeCJkvFYvF+2AQ60IULUG+DsJTED3RRRj2h/ZoQI=
Subject key identifier:   20:F4:F2:9D:42:00:D9:C5:89:AB:08:15:80:F4:9C:39:DA:23:06:86
Certificate issuer:       /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial:       037F
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/1EE9E0602BBE11EE935154764AD9E6FC.roa
Signing time:             Wed 26 Jul 2023 14:10:06 +0000
ROA not before:           Wed 26 Jul 2023 14:10:02 +0000
ROA not after:            Mon 31 Jul 2028 14:10:02 +0000
asID:                     328813
IP address blocks:        102.220.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 15:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
        Validity
            Not Before: Jul 26 14:10:02 2023 GMT
            Not After : Jul 31 14:10:02 2028 GMT
        Subject: CN=64c1293e-fabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:e7:59:bd:aa:16:62:ea:24:aa:73:0b:6c:
                    a3:83:c0:d7:3c:9f:5d:76:c5:d9:c2:8f:13:e5:85:
                    13:22:20:e9:8c:5b:38:b5:8b:2d:87:82:18:27:23:
                    ed:8c:bc:4c:6d:68:4e:9d:39:23:a7:5b:7c:4b:cf:
                    94:65:15:dc:c8:c0:51:c7:1c:b8:ae:a2:26:26:af:
                    23:f2:fe:a3:98:f9:e1:18:59:e0:4b:8e:3e:dd:3c:
                    4f:12:68:46:e4:d3:e4:6c:3a:33:a4:53:74:ef:f8:
                    65:77:82:b0:0a:53:41:91:46:ab:fa:e8:11:42:f1:
                    be:23:81:b0:68:1b:43:69:71:05:98:6a:76:28:ce:
                    10:39:af:26:cb:a6:db:ea:9a:87:2d:2b:a6:66:77:
                    75:92:f9:45:97:00:a3:9e:fb:23:91:74:05:f0:7c:
                    e2:1d:1a:83:17:3a:6b:98:03:dc:7a:dd:09:e8:e1:
                    23:18:7c:0e:89:ab:d4:df:68:7c:92:e0:77:66:ab:
                    46:21:e8:e0:ad:8e:ba:c3:b2:8e:39:7d:f6:47:bc:
                    c8:cf:d7:f2:6d:f7:59:8f:27:1b:7c:f4:ef:ec:45:
                    65:12:cb:5b:28:96:58:25:59:4b:c0:f8:a7:91:43:
                    b3:62:20:97:6b:d4:14:3f:b3:53:bc:14:1c:3a:b2:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F4:F2:9D:42:00:D9:C5:89:AB:08:15:80:F4:9C:39:DA:23:06:86
            X509v3 Authority Key Identifier:
                keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/1EE9E0602BBE11EE935154764AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.220.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:66:63:a8:26:72:42:f1:8f:bc:3d:6a:da:a5:ee:ee:de:
         7d:2d:2c:5f:78:f4:46:a7:91:a2:3f:52:04:ec:10:ad:c0:50:
         8b:1d:50:fc:d9:b3:ac:29:b1:07:b8:6e:10:65:93:e8:6d:82:
         f4:4d:42:2c:70:fd:35:8b:88:d8:be:de:98:f2:65:e6:ef:45:
         17:69:d8:b2:b9:15:80:e0:d4:b7:fe:2b:2e:a7:80:05:9b:28:
         7f:2e:76:c0:3d:d1:4c:f6:36:79:40:8b:23:da:59:bf:5e:75:
         96:42:47:bb:8e:f1:43:b5:15:7a:20:e4:ea:ff:32:b9:7f:7a:
         59:d6:0f:9c:dd:5f:ed:0d:4a:ce:b3:99:17:af:ec:2d:b9:74:
         8d:2f:ce:af:60:e1:2c:33:92:59:15:6b:38:05:59:3e:34:d5:
         59:e7:e8:1a:e3:53:f0:cd:45:1e:ef:38:e6:c6:a7:6e:a4:20:
         63:44:52:53:fe:a3:e5:7a:5f:0b:a4:70:74:36:cc:b9:11:69:
         f7:f3:88:4c:a3:f8:17:b3:d9:50:38:eb:84:bd:28:0d:da:13:
         fe:7f:17:63:87:8f:d0:19:37:c2:c4:76:bc:d2:a0:82:bf:fc:
         26:32:51:96:72:cc:5d:c7:72:1a:cc:c2:b3:6e:09:04:d7:e0:
         c0:88:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org