Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/255DF776A88611ED8A0724D4F1222468.roa
File:                     255DF776A88611ED8A0724D4F1222468.roa (raw, json)
Hash identifier:          Vf/YpvY7Oz7A3oOOn8wSiNpOfEz4wC8CiXAXRueyQmM=
Subject key identifier:   1D:66:5E:A0:F8:26:09:10:07:01:07:E6:CA:58:23:9E:0F:57:9C:AD
Certificate issuer:       /CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
Certificate serial:       0682
Authority key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/255DF776A88611ED8A0724D4F1222468.roa
Signing time:             Thu 09 Feb 2023 14:29:22 +0000
ROA not before:           Thu 09 Feb 2023 14:29:19 +0000
ROA not after:            Fri 08 Feb 2030 14:29:19 +0000
asID:                     37798
IP address blocks:        102.212.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 Feb 2023 13:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AF/serialNumber=56952EF930F44FFE912770E3DBC163049F5AFDB7
        Validity
            Not Before: Feb  9 14:29:19 2023 GMT
            Not After : Feb  8 14:29:19 2030 GMT
        Subject: CN=63e50342-fe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:43:cb:84:79:95:5c:c9:cb:f8:2c:29:be:98:
                    7a:75:89:30:89:51:22:29:0e:df:92:6e:af:ee:09:
                    8f:60:39:3d:5b:56:c8:49:a0:a8:f9:4b:fd:bb:55:
                    07:82:cb:6c:c6:dd:df:e9:74:28:e7:9a:83:78:65:
                    fc:0c:e2:d3:0b:87:ff:84:df:06:15:f4:b2:90:a9:
                    cc:e9:6f:b9:5b:d2:f3:b0:62:4f:c9:bc:62:cd:9e:
                    0c:6a:37:ff:e7:14:34:9c:7e:bf:80:92:fa:3e:35:
                    a3:b1:fb:ae:a7:33:38:72:dc:15:87:d9:87:65:22:
                    28:d4:42:46:e3:28:c9:d6:2e:f0:97:9b:17:a2:a9:
                    c8:56:d4:f0:70:5e:46:44:ab:77:a0:41:36:21:10:
                    08:18:5f:0e:aa:e5:43:4c:07:fc:f1:d0:62:7e:1d:
                    0d:0f:0e:cc:7a:bf:98:4b:14:ef:fe:5d:e7:6f:a5:
                    c0:e8:72:be:c6:52:7d:fc:f8:28:cc:db:04:d3:42:
                    dd:58:95:34:9b:c2:2d:a8:27:79:49:9e:3d:19:7e:
                    23:32:2d:96:b0:01:07:0c:0e:97:11:7f:58:cc:6c:
                    eb:75:05:91:be:98:2d:97:df:94:da:79:3f:35:75:
                    e3:5c:c8:1a:5c:26:65:d3:49:75:7c:22:37:b1:ef:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:66:5E:A0:F8:26:09:10:07:01:07:E6:CA:58:23:9E:0F:57:9C:AD
            X509v3 Authority Key Identifier:
                keyid:56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/255DF776A88611ED8A0724D4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:ee:5d:83:67:de:ff:86:bd:da:d1:0a:a9:39:3a:78:d0:
         cb:40:82:47:11:36:a3:dd:de:09:c5:e8:9a:b3:f9:23:8e:d3:
         53:c6:ec:83:e6:3c:bd:97:57:0c:63:99:e5:de:c3:57:61:a5:
         ef:35:f1:c7:be:cc:57:06:88:37:bf:29:ae:14:ef:40:29:31:
         e3:23:f1:04:14:69:5d:32:0f:a0:d0:98:5c:76:63:a3:60:19:
         22:82:ce:7e:60:f5:0f:7f:af:18:71:e5:98:86:d7:4a:37:8e:
         3d:8a:41:32:56:f0:b3:c8:40:61:31:bd:74:2e:f2:fa:1a:6e:
         04:8f:d3:c0:5e:cd:37:87:bb:19:2e:74:b6:11:90:21:8f:c2:
         89:d8:7b:29:58:68:57:bc:bb:fb:d3:9c:09:00:98:6d:5e:da:
         36:99:c9:11:d8:a9:7a:61:2e:07:d0:56:f3:4c:4d:10:ff:dd:
         6a:23:31:a5:72:f8:38:7e:4d:e2:26:90:bf:fb:2c:e8:46:3e:
         7c:89:f7:81:66:a5:ba:da:11:b1:ff:ec:5f:35:cc:19:60:4e:
         19:25:25:65:67:5f:25:e7:88:80:75:72:52:bc:95:98:be:c9:
         d5:aa:48:a1:65:26:f2:d2:f5:1c:bd:61:dd:a0:c1:3c:13:c3:
         e4:8d:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org