Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71F772CCC36111EFA4F95287762E951A.roa
File:                     71F772CCC36111EFA4F95287762E951A.roa (raw, json)
Hash identifier:          sZ0uypO3cTG8jCyh4AI+XAOc+Fa7JQ0/gh91G7tb7cc=
Subject key identifier:   EA:42:36:52:B6:72:01:FE:96:55:B4:61:CF:9F:88:8D:1B:4B:A1:56
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       045C
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71F772CCC36111EFA4F95287762E951A.roa
Signing time:             Thu 26 Dec 2024 08:14:36 +0000
ROA not before:           Thu 26 Dec 2024 08:14:33 +0000
ROA not after:            Fri 26 Dec 2025 08:14:33 +0000
asID:                     329007
IP address blocks:        196.251.70.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 13 Jan 2025 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Dec 26 08:14:33 2024 GMT
            Not After : Dec 26 08:14:33 2025 GMT
        Subject: CN=676d106c-18d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:df:7e:80:6c:49:3c:cf:e3:76:a3:30:ed:
                    50:48:da:42:6d:1f:0e:08:c3:b5:6b:69:13:fe:dd:
                    f0:9f:9f:7d:64:af:cf:d7:bf:0b:39:1a:3a:4c:c9:
                    e2:28:80:ce:21:1a:02:3c:10:8c:1a:b0:5a:69:ae:
                    08:98:e8:a6:fb:86:43:60:d6:7e:c7:94:81:5d:56:
                    3e:41:10:a7:ba:70:5a:05:ed:a3:8b:96:8d:94:1d:
                    a4:d3:b7:88:7e:8e:d8:63:ea:09:03:62:be:8c:34:
                    b1:01:0d:6e:31:56:71:8b:af:44:04:98:8d:e1:6a:
                    29:b0:fe:f5:14:70:fd:4d:83:fd:db:71:5b:2b:05:
                    ce:60:3a:f8:45:53:ff:b5:f9:84:e2:04:a0:d7:62:
                    6f:45:14:c5:9c:43:8f:a6:e4:0c:97:26:d2:02:be:
                    90:6d:4a:39:3e:0e:0f:a1:23:e5:58:aa:3f:bf:3b:
                    9d:b1:34:6e:3c:4d:61:37:9f:d0:b8:04:35:54:d8:
                    09:ac:03:b4:26:59:b4:76:42:13:65:4e:a3:95:56:
                    e8:9f:ea:61:55:93:ec:6e:c0:1e:ab:60:89:86:a1:
                    9f:91:4b:a6:e0:8c:6b:53:8a:a0:cc:2a:cf:ca:a3:
                    7a:02:dc:0d:64:d3:d4:ea:7f:70:5a:44:56:97:86:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:42:36:52:B6:72:01:FE:96:55:B4:61:CF:9F:88:8D:1B:4B:A1:56
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/71F772CCC36111EFA4F95287762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:03:26:cc:5f:34:36:02:b6:98:a8:aa:6a:7c:f2:aa:60:
         49:e6:9b:fd:71:df:41:ce:55:17:30:8f:a6:3f:f3:c2:dd:40:
         63:fe:5e:1b:1d:ed:48:ea:00:47:e9:f1:88:0f:99:33:ae:8e:
         fc:7c:51:eb:14:27:bc:7d:c2:65:49:2d:93:4f:03:62:85:85:
         e1:cf:d3:1d:d5:34:2b:36:2d:ad:bc:0c:16:2d:e3:2d:49:13:
         01:bd:ae:6e:80:a3:eb:a8:b3:39:ce:dc:48:f2:68:85:84:d4:
         9a:3b:39:47:ba:25:80:d3:eb:44:8b:bb:19:18:c4:69:98:ad:
         56:8c:54:6b:13:d6:b9:59:0e:3a:c0:ba:05:72:9d:02:ba:e5:
         71:20:ef:45:e6:f9:8b:85:02:b0:b6:d2:3d:bd:02:f4:0d:2c:
         34:48:70:ae:1c:18:8a:4c:29:91:e8:e4:25:1a:65:35:ac:0e:
         31:63:4b:89:b5:0f:2e:a6:d2:f1:60:0c:7c:9a:8e:c3:57:31:
         7c:e0:bb:af:e8:ce:92:99:05:21:5e:9a:30:ae:04:49:71:24:
         ce:52:57:ab:c9:d1:c6:ac:97:1c:5c:c0:c7:d6:51:bd:7e:9f:
         aa:ed:d6:91:da:4e:10:56:01:5c:6d:ad:07:f6:3d:35:e3:6f:
         b5:a0:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:51 2025 by rpki-client