Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ED2DF0A6042011F0888F9661762E951A.roa
File:                     ED2DF0A6042011F0888F9661762E951A.roa (raw, json)
Hash identifier:          ZaLjod6ucQdhfHRiy73fKCP343uBvO3e+ktHADV8C9g=
Subject key identifier:   BD:8D:A7:DD:E0:A5:71:87:3F:93:0D:DD:21:9C:E0:7C:20:7F:FB:1E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       074D
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ED2DF0A6042011F0888F9661762E951A.roa
Signing time:             Tue 18 Mar 2025 17:46:31 +0000
ROA not before:           Tue 18 Mar 2025 17:46:28 +0000
ROA not after:            Tue 17 Mar 2026 17:46:28 +0000
asID:                     329007
IP address blocks:        102.135.82.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 25 Mar 2025 12:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF
        Validity
            Not Before: Mar 18 17:46:28 2025 GMT
            Not After : Mar 17 17:46:28 2026 GMT
        Subject: CN=67d9b177-7c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:b8:5d:92:f6:cb:2a:8b:e1:56:65:fd:3c:
                    67:52:61:11:bb:2d:90:b4:50:23:61:fd:07:4a:85:
                    9b:25:94:ad:b2:59:41:f0:b7:af:c5:8e:b5:8c:1c:
                    13:e3:b9:68:1d:19:73:7d:ba:e3:20:cf:7c:5e:59:
                    6d:97:5f:f3:31:0c:ba:5d:46:9e:9a:05:a4:d7:cf:
                    6b:b1:e4:81:07:03:31:8a:2a:cc:52:cf:d6:72:dd:
                    66:a1:83:6f:95:de:a9:1a:22:c0:a3:3c:71:91:b1:
                    ac:77:f9:1e:0b:4e:d4:cf:94:24:36:30:a1:a0:23:
                    de:eb:ec:d5:19:a4:2b:cc:92:d3:97:c6:e5:13:1a:
                    f1:e5:59:61:68:3a:28:9b:e3:73:19:c7:fc:93:f0:
                    79:f4:c6:96:b4:5a:7a:a6:c0:10:01:cc:03:ab:45:
                    1a:f4:7b:9e:5d:1c:69:13:88:db:b6:f0:c6:bb:3e:
                    5a:99:dd:33:5e:cf:37:a3:03:49:1e:48:ed:cc:5b:
                    28:eb:4a:07:50:f6:99:3c:2f:02:b1:94:e1:56:15:
                    15:44:5a:f2:ab:fb:f3:a0:2b:5d:c4:1b:96:22:c5:
                    46:66:98:ba:3a:00:43:36:80:27:5f:58:b7:8a:2b:
                    89:0a:6b:de:30:86:08:5f:5c:a0:ee:3b:99:f7:c3:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:A7:DD:E0:A5:71:87:3F:93:0D:DD:21:9C:E0:7C:20:7F:FB:1E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/ED2DF0A6042011F0888F9661762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:24:38:2d:a9:bc:0c:f0:f2:c6:d9:1f:ef:e4:5d:f9:64:17:
         c7:a2:e6:cc:de:48:db:8c:a5:3b:ff:40:86:a3:21:08:2f:5e:
         73:f0:a5:62:57:6d:9d:b3:2c:bc:9a:c3:53:49:67:ad:76:77:
         4a:ac:28:8f:87:d3:5b:66:db:22:e5:3a:5e:f2:f7:fb:08:f9:
         e4:05:f4:af:5f:9b:15:e1:e6:cd:c6:e3:19:8d:88:29:14:59:
         b8:82:1e:8a:c4:51:3b:6a:92:23:da:4f:06:45:aa:53:08:73:
         bf:b4:b9:e0:7c:95:5a:95:2d:cc:e3:4a:79:d6:69:66:12:1e:
         55:9b:77:8b:fe:63:5f:f2:8a:8a:c3:7f:39:b5:0a:28:01:94:
         77:d3:d3:e6:49:cc:73:52:7e:66:91:49:c2:68:4c:19:50:2a:
         b7:0c:13:ff:64:d8:11:01:11:99:ac:9a:b1:ab:a0:c1:4d:bf:
         ac:8f:cc:4e:ec:9b:de:1b:14:5a:54:ac:1a:ae:ff:c4:3a:fa:
         b0:3d:d8:8f:77:e4:7f:72:95:d2:a4:ba:d1:55:64:be:2c:a2:
         bf:f9:0f:28:d4:e3:45:2d:27:31:9f:33:41:90:5f:4a:db:2c:
         db:11:34:b4:fa:e5:c4:20:3e:47:e8:b6:cb:9f:5d:15:c9:ea:
         26:0b:b3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:45:21 2025 by rpki-client