Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/299B07080B8A11EF91775368017001B1.roa
File:                     299B07080B8A11EF91775368017001B1.roa (raw, json)
Hash identifier:          m7B5bdFL4TgNishfMN2Kx+MB1CQiyCU+V+aym+86yws=
Subject key identifier:   EA:B2:83:D3:AA:98:00:75:45:7D:62:A0:D3:0C:10:2D:AD:23:A8:C7
Certificate issuer:       /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial:       0123
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/299B07080B8A11EF91775368017001B1.roa
Signing time:             Mon 06 May 2024 09:22:30 +0000
ROA not before:           Mon 06 May 2024 09:22:27 +0000
ROA not after:            Wed 31 May 2034 09:22:27 +0000
asID:                     329206
IP address blocks:        102.213.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 May 2024 11:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
        Validity
            Not Before: May  6 09:22:27 2024 GMT
            Not After : May 31 09:22:27 2034 GMT
        Subject: CN=6638a156-fe98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:2f:3d:67:a5:d4:63:67:44:22:25:c6:77:
                    01:a6:22:e3:96:a6:67:0c:d6:5f:d0:ba:b8:23:75:
                    1d:28:b8:dc:bf:c9:2f:b6:cb:91:a2:40:b5:9c:2b:
                    07:95:10:7b:cb:f1:17:ee:ab:63:9c:30:2c:0f:b5:
                    6d:15:00:25:a8:fa:f3:7e:54:1c:af:8f:f8:85:6a:
                    9e:36:ae:22:7e:6a:41:d6:61:45:19:78:9e:2d:0e:
                    29:16:cf:96:77:a4:13:a7:64:8b:f7:93:42:8f:cf:
                    d9:f5:71:f4:79:0b:9c:c9:d2:8b:75:2b:39:4b:99:
                    0d:b5:1a:68:2c:6b:63:32:ed:c0:32:e7:5e:dc:86:
                    84:fe:d9:eb:49:79:5a:64:1f:55:9f:06:46:aa:03:
                    11:d1:ae:70:c7:ef:32:a1:d1:67:7d:eb:16:45:75:
                    52:ac:75:eb:5b:e3:69:70:52:04:61:10:49:ac:9c:
                    ee:85:fc:d9:9b:c4:02:e2:73:63:b6:16:a7:ee:03:
                    0a:a5:8a:9c:bb:16:9c:f4:2e:d1:ec:c4:ec:dd:10:
                    f5:41:c9:79:ee:2c:1e:1a:37:17:0f:55:25:07:bf:
                    06:d2:33:c6:4b:f9:8a:60:08:01:29:35:60:7d:12:
                    0d:69:92:9e:44:ca:2c:d0:35:07:ea:90:2f:10:b1:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:83:D3:AA:98:00:75:45:7D:62:A0:D3:0C:10:2D:AD:23:A8:C7
            X509v3 Authority Key Identifier:
                keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/299B07080B8A11EF91775368017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:61:0d:45:10:84:38:44:9c:3d:77:69:f2:1a:12:a5:21:04:
         af:26:bf:47:64:f5:a8:d8:0f:6f:3c:f6:0d:0a:6a:0b:b3:17:
         05:ca:9e:53:e1:fe:d4:b2:42:d2:9f:10:da:90:ce:7c:bf:d6:
         3b:a7:5b:45:18:e0:af:04:c5:cd:4a:72:c4:ba:bc:87:84:e8:
         e9:a9:8e:5f:88:3c:86:de:35:61:51:4b:2a:5c:c6:28:69:d9:
         80:49:b3:39:dd:b0:25:96:2a:6b:15:a0:1a:0d:62:18:6b:49:
         c1:88:1c:53:d6:7b:22:70:28:cf:11:3e:d2:43:25:d4:08:02:
         b3:ec:23:cc:9f:99:69:2d:17:1b:51:80:89:e6:f4:f2:c4:fe:
         66:c7:b1:75:9c:0f:c4:a0:45:a8:b9:78:46:6a:29:df:b6:69:
         19:c3:4c:21:91:13:9b:6d:05:01:5e:86:f7:34:6a:95:55:64:
         bd:d0:0e:f5:f3:6f:d5:47:39:75:3e:c0:f3:d7:27:cf:51:2a:
         85:50:a9:e1:be:15:25:7d:f0:c0:71:55:33:3d:45:9e:61:43:
         96:00:95:ae:c6:e4:fa:cb:b3:5e:b3:7e:d0:22:58:8f:3e:18:
         ce:c1:53:2f:6c:71:d8:e9:91:29:6e:1e:4f:17:10:1d:5f:57:
         92:a4:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org