Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/675269061C9811EE853232404AD9E6FC.roa
File:                     675269061C9811EE853232404AD9E6FC.roa (raw, json)
Hash identifier:          8GqRQpefB4IZ4w+08tygDmi7GnPm8uh0LHyi4Gxyt34=
Subject key identifier:   CB:31:0D:07:62:D9:47:97:D9:F1:29:82:90:83:B7:CC:96:C6:3B:44
Certificate issuer:       /CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Certificate serial:       046B
Authority key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/675269061C9811EE853232404AD9E6FC.roa
Signing time:             Fri 07 Jul 2023 07:32:19 +0000
ROA not before:           Fri 07 Jul 2023 07:32:15 +0000
ROA not after:            Mon 06 Jul 2026 07:32:15 +0000
asID:                     36932
IP address blocks:        196.216.148.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 30 Apr 2024 09:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364814FAF
        Validity
            Not Before: Jul  7 07:32:15 2023 GMT
            Not After : Jul  6 07:32:15 2026 GMT
        Subject: CN=64a7bf83-8252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:2a:14:c1:b9:a2:50:b0:c9:9e:36:92:b6:
                    a7:80:38:63:6a:e8:6c:31:9b:4b:5d:40:b5:21:9d:
                    4b:d9:5e:9b:60:a6:ec:8a:4c:dc:85:ac:8c:27:12:
                    18:54:51:a8:6a:43:57:ef:a4:70:0b:06:78:b5:49:
                    db:60:0b:78:53:4d:cd:c9:8d:9b:f2:9f:fc:cc:18:
                    28:13:9b:1d:0c:e9:63:74:52:a9:02:b3:2e:2d:3a:
                    27:e4:e9:c9:1f:d4:68:3b:63:4a:12:ee:f6:78:03:
                    4f:a8:94:82:9b:7a:ea:1f:5f:ed:fc:19:59:be:e9:
                    86:ab:e0:20:e0:6f:45:fc:fc:0e:1d:0a:44:be:50:
                    1d:95:e0:b6:0e:2c:38:8a:79:aa:b6:cd:11:66:0f:
                    69:f1:a4:03:16:d5:a4:1a:3c:5e:33:39:15:89:0d:
                    0e:1f:5b:4e:dd:e8:8e:6b:3b:83:3d:ea:28:76:46:
                    65:25:12:d1:d9:f8:77:61:98:6d:d6:c8:52:11:14:
                    dc:51:3f:b0:bc:41:84:cd:44:31:56:75:f7:5a:10:
                    d6:86:9c:fc:6e:b5:9d:35:ad:80:07:25:31:c3:a2:
                    60:c7:3c:09:32:33:28:9b:b2:b6:65:a1:c1:8f:f5:
                    ee:0c:53:8c:cc:dd:27:20:b4:21:37:d3:30:0c:cd:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:31:0D:07:62:D9:47:97:D9:F1:29:82:90:83:B7:CC:96:C6:3B:44
            X509v3 Authority Key Identifier:
                keyid:AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/675269061C9811EE853232404AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:88:33:85:15:b7:de:9e:dd:ba:1d:61:7e:b8:16:71:2b:
         4b:c5:9c:e4:91:bd:ee:2c:90:43:2e:40:fc:60:7f:e1:b9:c6:
         fb:0d:90:14:14:9b:e9:30:1c:29:af:a9:33:eb:83:68:57:89:
         40:48:ab:de:12:46:1c:6b:34:1d:60:fd:e8:8a:3c:bb:6e:90:
         9e:12:4a:36:25:09:64:68:d0:99:0f:d7:b0:9c:a4:4b:bf:1d:
         31:8d:5e:fe:13:8e:0c:f4:c4:73:fd:a5:61:67:03:52:7f:30:
         f2:6a:6e:68:f3:70:e6:10:01:9e:fb:96:e6:d5:82:0a:d0:a5:
         37:17:0c:a4:ff:bd:d7:67:b5:27:d5:db:46:2a:75:ee:6a:7d:
         15:25:31:dc:4b:f4:f5:34:35:a3:8c:95:ee:e8:39:80:00:8c:
         b7:b0:64:fe:80:8c:ae:57:bf:05:7c:4e:9a:aa:59:44:7f:b1:
         a7:33:cc:93:31:c0:f6:d5:c2:f6:be:03:ae:70:07:0a:e0:76:
         e2:83:5d:08:1c:98:ed:ab:1d:79:5b:ac:a1:ea:81:75:51:74:
         d6:a7:a0:cf:81:ba:08:c2:bb:52:ea:e0:90:3e:a5:d1:bd:13:
         8a:28:98:e1:20:fd:29:27:2f:58:27:3c:20:7e:b3:62:13:64:
         03:2e:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:34 2025 by rpki-client