Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/C19D101255CB11EDB3CC2193F1222468.roa
File:                     C19D101255CB11EDB3CC2193F1222468.roa (raw, json)
Hash identifier:          r2wRh++pDkEsQgOPqeTk/hAAZzi+SrYRYkdTSVa4rwg=
Subject key identifier:   70:16:8D:92:7D:A6:F9:35:AD:58:A4:DC:49:58:96:2D:EC:04:30:A5
Certificate issuer:       /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial:       02
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/C19D101255CB11EDB3CC2193F1222468.roa
Signing time:             Thu 27 Oct 2022 07:48:33 +0000
ROA not before:           Thu 27 Oct 2022 07:48:30 +0000
ROA not after:            Sun 26 Oct 2025 07:48:30 +0000
asID:                     328785
IP address blocks:        102.215.128.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
        Validity
            Not Before: Oct 27 07:48:30 2022 GMT
            Not After : Oct 26 07:48:30 2025 GMT
        Subject: CN=635a37d1-3889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:da:82:20:c9:ef:1b:84:d8:f5:29:ad:4d:
                    68:b8:4d:df:1f:cb:d1:8f:c8:16:3c:45:ed:ae:a5:
                    44:6e:bb:20:bc:15:7f:fa:f4:49:65:c9:27:46:02:
                    eb:48:21:40:0a:af:f4:2a:47:c0:b5:29:81:8b:c3:
                    0a:1d:3d:34:ab:ef:bf:a9:e9:40:9f:bf:70:c7:5b:
                    11:af:18:26:e9:b3:b5:9e:c6:79:4b:af:ae:24:ee:
                    78:c7:a4:da:0b:66:f8:21:16:21:a5:b1:e2:28:c9:
                    51:1c:f3:39:14:fa:3c:44:ff:5f:8c:64:4d:ed:fa:
                    32:ef:81:de:34:aa:83:fb:de:38:b9:6a:28:c9:a5:
                    20:ce:44:70:6b:04:3d:72:cf:18:8b:39:f6:49:5a:
                    e7:2d:d7:1e:fa:c3:88:03:6a:0c:ef:63:8e:38:85:
                    67:18:69:d7:c8:0e:03:2a:d9:c9:35:93:63:03:89:
                    41:fc:0f:a4:56:e2:6d:c5:7b:c0:a9:a6:eb:9e:f9:
                    1b:98:3c:28:62:67:fb:c1:c9:8b:3a:7c:ee:6f:1e:
                    6c:62:fc:60:8f:ac:fd:58:4e:0c:80:8d:3b:39:19:
                    fb:38:37:79:8d:3d:fa:ca:17:ee:2e:9d:61:54:76:
                    c6:ef:c3:46:3d:4d:23:93:33:54:8e:cb:9d:a7:07:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:16:8D:92:7D:A6:F9:35:AD:58:A4:DC:49:58:96:2D:EC:04:30:A5
            X509v3 Authority Key Identifier:
                keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/C19D101255CB11EDB3CC2193F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:9e:8f:00:63:21:cb:98:34:17:7f:c3:d7:1a:78:e1:00:29:
         b3:e1:f2:fa:c1:0d:5b:5d:39:2e:00:9b:7b:37:78:ea:91:c7:
         e2:9c:ca:78:4f:ab:8b:40:7d:d7:66:d2:d1:c1:6e:7b:cd:d4:
         7f:e2:58:30:4f:d6:e7:ef:5a:ae:2e:be:73:fc:cc:94:9f:ec:
         e8:74:b3:b1:15:b1:73:8d:fc:c7:d6:98:1f:80:4a:dd:60:cf:
         8c:0a:97:a0:84:94:34:37:d7:7d:f2:82:27:0f:84:a6:1d:2c:
         09:d0:7b:3d:eb:16:6e:db:4c:52:ec:3f:d9:91:04:fc:57:5e:
         0e:de:be:ad:6d:6f:83:cf:59:66:8b:50:b1:b1:7b:96:14:4d:
         0c:a7:a8:36:93:db:2f:be:95:17:1c:7b:5e:2c:d7:7c:9c:8f:
         df:42:08:68:8a:07:bb:79:fc:5e:29:59:1a:db:a9:06:e2:af:
         68:4d:dc:d8:4f:dd:77:18:cd:2b:0a:09:c6:e3:a8:d1:cd:7b:
         9c:c7:1d:4e:be:b7:ae:5b:31:e6:d4:1e:c9:f5:51:bc:88:1e:
         29:57:a6:0f:fc:37:12:39:75:6d:91:f0:ae:fb:1c:eb:22:0e:
         df:66:6e:ab:a3:43:42:e8:d5:8c:3b:a4:ac:88:e6:ed:39:b3:
         d4:50:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org