Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/379AEA3AC36D11EFA068C353762E951A.roa
File:                     379AEA3AC36D11EFA068C353762E951A.roa (raw, json)
Hash identifier:          mqzxZk8EC8NbY3TL2IQ/i1FOqVwGjcxR8B5uqwvxSXA=
Subject key identifier:   18:8A:F9:9F:E3:A1:C9:B6:8D:19:59:FA:DF:85:71:F6:96:A6:C1:BD
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       046C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/379AEA3AC36D11EFA068C353762E951A.roa
Signing time:             Thu 26 Dec 2024 09:38:52 +0000
ROA not before:           Thu 26 Dec 2024 09:38:49 +0000
ROA not after:            Wed 24 Dec 2025 09:38:49 +0000
asID:                     329007
IP address blocks:        196.251.100.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 17 Feb 2025 11:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 26 09:38:49 2024 GMT
            Not After : Dec 24 09:38:49 2025 GMT
        Subject: CN=676d242c-4561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c8:db:84:32:cc:dd:67:6e:b3:f9:cf:96:29:
                    bd:d6:7f:3f:5b:03:14:a7:53:4b:22:00:63:3c:44:
                    d5:9e:3c:7c:f0:1b:59:88:41:11:d9:ee:43:fd:df:
                    21:4b:73:69:af:85:1c:3e:c4:1e:4d:79:05:c7:3d:
                    9e:7f:c9:ba:88:76:a1:c0:fb:80:42:24:95:88:83:
                    1a:07:5d:1d:2a:85:d5:e9:94:9b:89:a5:18:2d:40:
                    6e:95:e7:fe:c3:bc:fc:71:a9:b7:88:a3:25:35:a5:
                    c6:1e:97:e8:94:e6:b9:07:e9:dc:59:2f:cd:5a:27:
                    29:7f:e6:c3:5b:db:43:2d:34:fc:35:0e:f4:63:f9:
                    6e:e4:63:af:04:d2:2c:83:04:38:ca:3d:7a:31:7b:
                    a1:d3:59:59:25:a6:74:66:55:7b:b3:d7:ab:36:64:
                    fd:c1:20:70:3f:9b:90:c1:b7:62:f6:59:e6:aa:06:
                    09:07:3e:77:a0:c7:c8:f4:c5:05:32:2f:5b:f2:ed:
                    9f:9b:cc:db:5c:31:bb:6c:39:44:a9:1d:c9:77:75:
                    86:14:3c:cc:0e:c8:91:54:f0:8d:d1:43:03:7d:18:
                    73:62:29:54:6a:a5:c1:bf:14:0a:80:cd:64:98:04:
                    dd:14:35:2d:f6:08:66:f0:a9:5b:8f:f3:82:18:65:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:F9:9F:E3:A1:C9:B6:8D:19:59:FA:DF:85:71:F6:96:A6:C1:BD
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/379AEA3AC36D11EFA068C353762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:89:eb:e2:62:d8:8e:33:90:82:9c:00:a9:12:5a:21:9a:
         8f:e1:6b:52:10:a0:c8:3e:d1:0d:91:16:df:c8:44:2a:f7:48:
         6e:d1:28:b8:f1:7c:48:b9:b6:e5:c6:26:c4:7f:8d:91:6a:ca:
         93:c8:a9:c1:b0:32:6a:ea:61:de:b3:86:23:02:87:d7:14:5f:
         93:f9:ea:f8:8b:a1:1e:07:1b:43:50:ef:51:77:ef:64:52:73:
         c5:da:48:fb:c4:88:4c:f6:73:5a:97:fd:9b:5f:f1:17:1a:10:
         2a:6f:c9:01:42:76:2e:8b:fd:39:eb:71:24:4d:7d:b6:dd:e5:
         6e:5b:01:0b:97:b8:37:e7:1c:15:1f:6d:2c:5e:09:ae:ec:e5:
         c3:74:55:ba:13:4d:16:73:b4:7b:44:d9:16:a4:fe:67:b1:1f:
         9c:b4:36:8c:03:7a:86:bf:ab:25:ee:33:17:7e:18:70:8d:34:
         d1:1e:f5:dc:cf:6d:1f:45:ef:65:21:41:c0:b6:17:49:21:f0:
         fc:6a:d5:38:03:aa:fb:b4:a4:be:b9:77:09:41:8a:91:b8:39:
         dd:99:cd:e4:40:a8:32:73:1b:b7:22:f7:08:3d:82:d6:4c:60:
         dc:64:22:29:e7:c5:7b:db:f4:8f:da:69:bb:93:30:48:11:43:
         b3:a8:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:57 2025 by rpki-client