Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90598E3A2F0E11F0A0D7D6CADAE4EC9C.roa
File:                     90598E3A2F0E11F0A0D7D6CADAE4EC9C.roa (raw, json)
Hash identifier:          tYW9NBf2Xawwl4jMoqEsUVjpEZlgIBzfeqZUF3XbPRc=
Subject key identifier:   1D:8C:63:48:76:6C:68:DC:BF:EF:04:C6:30:08:13:7E:E6:E9:14:0D
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0A0F
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90598E3A2F0E11F0A0D7D6CADAE4EC9C.roa
Signing time:             Mon 12 May 2025 08:53:25 +0000
ROA not before:           Mon 12 May 2025 08:53:20 +0000
ROA not after:            Tue 12 May 2026 08:53:20 +0000
asID:                     208485
IP address blocks:        102.135.115.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 13 May 2025 11:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 12 08:53:20 2025 GMT
            Not After : May 12 08:53:20 2026 GMT
        Subject: CN=6821b705-7893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:b6:74:c3:50:b6:34:2e:57:5d:97:a9:5c:
                    ea:74:d5:9e:b4:d1:df:96:47:8e:ff:da:fc:02:0f:
                    4b:8c:88:19:d1:7b:01:67:5b:10:59:35:94:de:72:
                    fb:0b:a9:4c:7b:aa:a9:cb:9d:e1:de:f7:4b:c5:fb:
                    f0:d8:fa:69:c8:6d:c8:91:8a:c0:a0:1e:44:6b:b4:
                    50:90:ec:7e:e7:42:ae:47:df:0c:46:50:01:53:b0:
                    ea:d4:1a:d0:12:84:84:a3:05:ff:ac:60:f6:9a:12:
                    83:60:93:32:39:44:7e:d1:cf:73:aa:f2:91:15:2c:
                    ae:09:1e:49:69:f0:be:a3:ac:cb:ff:22:ea:3f:f3:
                    91:18:d6:24:af:39:49:5e:d1:c7:70:7e:5f:f5:79:
                    13:2e:11:b3:ea:df:bf:ed:3f:e4:1d:25:31:c3:8f:
                    46:6d:a2:d6:ea:18:a7:09:28:9e:49:bd:6b:d8:8a:
                    07:20:2b:fc:80:9b:74:92:09:cb:67:01:8f:c9:11:
                    d7:70:80:44:15:8e:16:cf:95:f4:99:dc:b2:30:49:
                    8e:2a:bb:0b:8e:fb:44:7d:11:b2:20:d6:7e:18:e2:
                    7d:95:83:52:d6:58:b3:77:e0:c7:0c:46:0a:fe:55:
                    84:e5:a0:08:5d:4c:33:5e:83:3f:eb:6d:66:b3:51:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8C:63:48:76:6C:68:DC:BF:EF:04:C6:30:08:13:7E:E6:E9:14:0D
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/90598E3A2F0E11F0A0D7D6CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:9f:dc:8f:90:c8:dc:92:12:d0:22:fa:2f:b8:cd:bf:dd:50:
         95:56:1d:99:b2:eb:96:57:5f:c6:cb:ec:31:3a:57:1b:70:fd:
         2c:22:48:a5:83:f0:a4:e2:a9:2f:78:b6:dd:ce:2c:c5:df:c0:
         de:b2:3b:29:43:da:72:54:ba:75:23:7e:4e:2f:bf:24:60:ac:
         15:92:ef:69:e3:0b:ff:cb:7a:d7:a9:4c:bd:e9:c1:74:7b:0a:
         a1:54:c0:c7:f9:25:68:5f:82:55:cf:a7:fc:2c:6f:2d:68:6e:
         8b:83:a8:d6:ef:30:d5:8f:c6:63:45:9b:ad:3a:8b:30:2a:ae:
         29:5d:e1:53:bf:ae:f5:ee:f8:12:bd:f8:4b:6e:80:d0:9f:9d:
         40:ea:63:23:73:f0:89:a9:70:12:6f:7e:18:be:30:6f:b2:85:
         47:3b:bc:b8:5f:59:58:00:d0:cd:e6:f0:2c:bd:da:04:38:41:
         2a:65:c5:01:c7:c5:9e:d7:7b:d0:85:da:30:ff:f2:54:ca:fa:
         01:59:be:57:01:6b:45:4f:9b:37:62:24:24:d7:66:3b:b4:c8:
         5d:d1:d0:ef:88:17:52:f5:57:a0:97:80:6b:0c:96:6e:17:8d:
         e5:6b:85:0f:ff:0f:0e:fa:78:74:d0:74:89:4e:6e:cf:90:ac:
         73:af:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:22 2025 by rpki-client