Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52787C28C36D11EF9211E153762E951A.roa
File:                     52787C28C36D11EF9211E153762E951A.roa (raw, json)
Hash identifier:          kELLXHILF/XoPcG+1r850gRwZFY1j7s9fh28mESHpKA=
Subject key identifier:   02:56:05:4B:4E:19:A0:0C:9E:74:C4:8A:87:F5:C5:01:03:84:A1:22
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       046E
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52787C28C36D11EF9211E153762E951A.roa
Signing time:             Thu 26 Dec 2024 09:39:37 +0000
ROA not before:           Thu 26 Dec 2024 09:39:34 +0000
ROA not after:            Fri 26 Dec 2025 09:39:34 +0000
asID:                     329007
IP address blocks:        196.251.78.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 14 Jan 2025 06:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134 (0x46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 26 09:39:34 2024 GMT
            Not After : Dec 26 09:39:34 2025 GMT
        Subject: CN=676d2459-c9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:91:57:45:f8:d3:c1:d3:35:71:2c:0b:ee:
                    6f:b2:b8:da:f0:39:3a:cd:1a:b5:2b:e8:95:8e:21:
                    98:fd:44:22:0d:c7:87:4e:69:f7:d9:5d:6b:98:76:
                    aa:f8:d8:7b:74:c6:72:a4:b5:cd:e6:c2:df:13:ec:
                    47:a8:02:e2:9a:84:24:21:9c:55:8c:1e:89:22:84:
                    cf:95:4f:8a:4c:f5:b5:6c:24:ae:17:ec:01:f1:ef:
                    88:de:50:c2:00:59:e9:7a:cf:bf:9b:8c:b7:c6:65:
                    75:a1:b9:58:2a:69:9d:a7:d3:57:98:55:86:10:4b:
                    7c:23:7a:77:4e:1b:25:da:bf:22:0f:34:8f:f1:79:
                    73:7d:e8:b3:d4:4a:3a:e7:37:bd:bd:bd:e6:04:3f:
                    26:96:a7:ee:38:4c:56:0a:e7:c9:b4:f1:4d:91:5a:
                    e4:cc:5d:a0:01:4e:11:1e:7f:f7:bf:92:37:af:15:
                    c9:96:ed:67:be:ae:c3:e9:69:5c:df:46:96:75:a1:
                    85:05:5c:aa:dc:ba:d2:f3:36:f0:85:e0:0e:e1:1f:
                    12:c2:50:e8:b8:96:84:32:ae:86:96:5b:b8:51:fb:
                    ee:b2:98:29:16:80:96:51:cf:ad:36:ba:60:aa:2b:
                    be:9d:83:1b:ec:2e:5c:49:cb:5d:16:65:6e:ce:67:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:05:4B:4E:19:A0:0C:9E:74:C4:8A:87:F5:C5:01:03:84:A1:22
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/52787C28C36D11EF9211E153762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:74:86:9e:c9:58:e1:6c:05:09:6d:d1:2d:1c:e6:5e:fa:aa:
         35:30:db:2d:a9:0d:f9:27:13:92:bd:6a:de:c1:64:25:28:fe:
         29:2c:2a:8f:2a:b9:70:f2:d7:b8:21:bf:b7:a3:cd:6e:57:6a:
         a2:c8:55:4e:2d:d6:3c:90:b7:2d:77:a9:3d:34:88:c5:aa:89:
         8a:31:4b:3c:6c:b1:5d:e4:a1:08:25:e9:03:23:95:b9:33:8a:
         d0:6c:59:1e:f8:cd:e7:46:dc:fa:14:7b:cc:fe:b5:74:b9:9f:
         14:d4:8a:6e:b0:98:02:77:d4:0d:2a:55:ef:bb:e4:65:33:8a:
         38:51:f0:23:54:15:5a:84:ae:7f:20:8b:b6:d4:b9:5f:89:74:
         9c:09:ae:3f:f7:7f:b6:24:d7:32:62:05:82:db:7a:fc:76:0f:
         b3:77:84:cb:a5:2e:dd:4c:a6:00:60:0f:b1:1f:3f:d4:8d:39:
         b0:09:27:04:29:25:d7:21:c7:20:b9:5c:87:aa:81:44:3f:01:
         0f:b3:68:c5:13:24:94:05:ce:ce:51:fc:80:5d:9e:ec:d5:dc:
         83:35:f6:32:8d:67:19:05:32:f8:32:3f:e0:98:9e:bf:7d:fd:
         5c:5e:bf:35:ab:75:5c:2d:ad:33:b4:ec:a3:f9:90:54:65:2f:
         b5:fc:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:30 2025 by rpki-client