Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/66125502499111EF9DBE8E8E762E951A.roa
File:                     66125502499111EF9DBE8E8E762E951A.roa (raw, json)
Hash identifier:          7UVUzlGMt4IxXBO62Du9COOG9B1MArnYC6ULNH7QsAw=
Subject key identifier:   09:9E:EC:BC:5D:98:D4:36:33:1A:A5:E0:EA:4A:89:00:59:75:94:EA
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       05
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/66125502499111EF9DBE8E8E762E951A.roa
Signing time:             Wed 24 Jul 2024 07:50:30 +0000
ROA not before:           Wed 24 Jul 2024 07:50:20 +0000
ROA not after:            Mon 31 Jul 2034 07:50:20 +0000
asID:                     37114
IP address blocks:        102.213.168.0/22 maxlen: 24
                          102.223.76.0/22 maxlen: 24
                          2c0f:7b80::/32 maxlen: 126

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 10:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Jul 24 07:50:20 2024 GMT
            Not After : Jul 31 07:50:20 2034 GMT
        Subject: CN=66a0b246-0d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:d7:57:b0:83:20:d7:fc:e7:f2:b9:d5:ee:
                    b4:99:90:85:17:c6:91:09:5d:7b:12:9d:e3:f1:d5:
                    e9:7f:f2:07:84:af:37:c0:b1:8c:d9:e0:da:dd:7e:
                    ac:fe:ad:ae:43:17:89:6b:aa:71:81:20:b5:10:f1:
                    8e:e7:ca:cc:ce:19:12:49:30:69:31:ec:93:37:44:
                    80:bf:f1:40:15:39:9b:b0:a6:2e:bc:52:a3:4c:80:
                    ef:3d:c3:d0:27:7e:f4:52:c9:78:d2:60:23:de:68:
                    48:09:95:c0:2a:89:14:3a:e8:0e:1e:b6:b1:fd:cc:
                    51:7d:09:37:28:32:8b:e4:86:e4:52:13:5b:c9:6c:
                    d1:d6:f5:e7:05:cb:f2:58:d1:69:92:4a:4d:ee:0e:
                    e3:95:29:4f:36:71:65:89:02:f4:73:20:ab:e9:c2:
                    f9:68:f7:1d:e0:71:0c:8d:0e:20:ce:0f:c3:29:1f:
                    de:85:47:0c:4a:4a:f7:b0:bc:06:19:d9:73:cc:ac:
                    30:df:19:67:c3:33:39:53:cc:2e:08:8f:16:46:d4:
                    0a:23:b5:5f:a0:ae:77:7e:8e:92:92:79:a3:4f:72:
                    49:e0:ba:60:0a:17:df:88:7a:13:b6:40:dd:2d:e7:
                    8e:59:65:00:7e:d4:03:0b:c7:a2:91:a5:be:40:a1:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9E:EC:BC:5D:98:D4:36:33:1A:A5:E0:EA:4A:89:00:59:75:94:EA
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/66125502499111EF9DBE8E8E762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.168.0/22
                  102.223.76.0/22
                IPv6:
                  2c0f:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:64:0e:a4:cf:70:d1:b5:43:41:11:84:a5:d9:f2:01:95:
         f5:3d:a7:90:e1:33:14:1a:b6:14:d7:17:bb:0b:c2:8d:97:1d:
         f3:3d:5b:bc:41:12:9d:41:d0:18:9c:14:d0:b6:df:f0:78:10:
         7c:ba:af:dd:38:9a:fc:05:b8:9e:83:e5:8e:71:1a:53:db:ba:
         a6:5c:22:d0:02:3b:6c:1d:d9:c1:1f:e7:27:66:8c:7b:f2:35:
         0a:a7:87:09:01:98:c0:33:54:7d:6d:2b:ac:82:ea:f2:b2:c0:
         2c:5a:ff:36:e4:40:c4:76:11:33:0f:b4:52:64:42:f7:0c:27:
         14:32:14:a3:10:be:87:54:5b:5c:b0:8d:59:9a:05:04:30:5c:
         07:f6:bb:f5:c8:02:ea:03:3b:b6:30:02:16:5c:93:d9:07:5a:
         3e:db:09:31:97:77:fe:72:fb:69:cc:b9:91:3b:7e:c9:6c:2b:
         9b:c4:68:62:5f:14:72:6a:03:5b:58:99:4f:da:60:f3:dd:f6:
         9d:a5:29:f1:69:6e:0b:ff:1b:c5:94:ff:11:fe:f6:ff:c7:dd:
         a3:ef:73:7a:13:62:a2:21:74:fc:09:65:88:a6:0e:58:c8:dd:
         47:6f:22:63:a6:e3:8a:60:2a:bb:91:1b:99:fc:75:52:ca:3f:
         63:26:4e:b8
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MEY2NUFGMTEwLwYDVQQFEyhDMEMwRTcxOTlDQjg0MEEyNDk4QzFFM0JBNTY3NkY5
RTBDMDYyODY4MB4XDTI0MDcyNDA3NTAyMFoXDTM0MDczMTA3NTAyMFowGDEWMBQG
A1UEAxMNNjZhMGIyNDYtMGQ1ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM8D11ewgyDX/OfyudXutJmQhRfGkQldexKd4/HV6X/yB4SvN8CxjNng2t1+
rP6trkMXiWuqcYEgtRDxjufKzM4ZEkkwaTHskzdEgL/xQBU5m7CmLrxSo0yA7z3D
0Cd+9FLJeNJgI95oSAmVwCqJFDroDh62sf3MUX0JNygyi+SG5FITW8ls0db15wXL
8ljRaZJKTe4O45UpTzZxZYkC9HMgq+nC+Wj3HeBxDI0OIM4Pwykf3oVHDEpK97C8
BhnZc8ysMN8ZZ8MzOVPMLgiPFkbUCiO1X6Cud36OkpJ5o09ySeC6YAoX34h6E7ZA
3S3njlllAH7UAwvHopGlvkChRS8CAwEAAaOCArowggK2MB0GA1UdDgQWBBQJnuy8
XZjUNjMapeDqSokAWXWU6jAfBgNVHSMEGDAWgBTAwOcZnLhAokmMHjulZ2+eDAYo
aDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTBGNjUvRjQzQzg2M0E0OTgzMTFFRkEyRjQ1RkI0NzYyRTk1MUEvd01Ebkda
eTRRS0pKakI0N3BXZHZuZ3dHS0dnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvd01EbkdaeTRRS0pKakI0N3BXZHZuZ3dHS0dnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTBGNjUvRjQzQzg2M0E0OTgzMTFFRkEyRjQ1RkI0NzYy
RTk1MUEvNjYxMjU1MDI0OTkxMTFFRjlEQkU4RThFNzYyRTk1MUEucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAmbVqAMEAmbfTDANBAIAAjAH
AwUALA97gDANBgkqhkiG9w0BAQsFAAOCAQEAIqtkDqTPcNG1Q0ERhKXZ8gGV9T2n
kOEzFBq2FNcXuwvCjZcd8z1bvEESnUHQGJwU0Lbf8HgQfLqv3Tia/AW4noPljnEa
U9u6plwi0AI7bB3ZwR/nJ2aMe/I1CqeHCQGYwDNUfW0rrILq8rLALFr/NuRAxHYR
Mw+0UmRC9wwnFDIUoxC+h1RbXLCNWZoFBDBcB/a79cgC6gM7tjACFlyT2QdaPtsJ
MZd3/nL7acy5kTt+yWwrm8RoYl8UcmoDW1iZT9pg8932naUp8WluC/8bxZT/Ef72
/8fdo+9zehNioiF0/AlliKYOWMjdR28iY6bjimAqu5Ebmfx1Uso/YyZOuA==
-----END CERTIFICATE-----