Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/E50C40D0C7EF11EEA7DE779E775412E6.roa
File:                     E50C40D0C7EF11EEA7DE779E775412E6.roa (raw, json)
Hash identifier:          a6DvWbgTWDaXkeP212xIiJPK3+IPkXfzAxFxWVPhKBY=
Subject key identifier:   0D:E9:17:A5:38:0E:9B:25:DA:36:72:B4:95:F9:15:D3:02:BF:5D:EA
Certificate issuer:       /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial:       14
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/E50C40D0C7EF11EEA7DE779E775412E6.roa
Signing time:             Sat 10 Feb 2024 08:39:25 +0000
ROA not before:           Sat 10 Feb 2024 08:39:22 +0000
ROA not after:            Sun 10 Feb 2030 08:39:22 +0000
asID:                     329210
IP address blocks:        102.216.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 12:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
        Validity
            Not Before: Feb 10 08:39:22 2024 GMT
            Not After : Feb 10 08:39:22 2030 GMT
        Subject: CN=65c7363d-bcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:31:43:96:39:c0:60:a8:bc:9e:7c:3e:74:
                    45:60:06:e3:2d:84:85:6a:55:7a:a9:fd:69:7d:91:
                    01:95:af:f9:b7:fe:38:b8:a8:89:92:4a:8a:47:dd:
                    56:20:1e:b5:b3:77:5d:cc:11:ed:fe:ca:2d:68:df:
                    be:67:c0:53:36:db:9e:95:37:0a:b5:1e:7f:ee:de:
                    f8:9b:9b:b6:b1:c7:0a:71:42:32:94:c4:88:46:af:
                    03:a8:1e:3d:b6:d9:32:5a:76:6c:e0:ec:78:d5:78:
                    07:7e:c0:8b:a8:eb:e6:13:8a:b0:d9:46:fa:59:e1:
                    4a:80:50:d3:83:b0:cd:f1:f8:7c:7a:2c:b6:f2:6e:
                    a4:28:ab:f1:8d:93:b9:9f:63:5f:92:87:b9:50:4d:
                    22:1f:33:89:45:1f:93:be:49:f8:79:8b:08:cc:40:
                    92:33:58:00:41:a7:be:57:c6:ff:30:1e:de:0b:3f:
                    2b:7d:26:78:d4:eb:4e:42:93:c8:a1:be:87:88:fd:
                    d4:81:b4:86:39:2e:a6:d1:42:7c:c2:0b:2c:47:bf:
                    bb:1b:83:ec:9d:58:07:ad:4c:aa:9a:11:4b:d8:17:
                    8b:0b:86:f9:69:a7:2e:2f:14:b9:82:d3:cb:6a:c0:
                    fc:72:9f:84:28:e5:f9:fe:30:b6:53:d1:2a:fa:0c:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:17:A5:38:0E:9B:25:DA:36:72:B4:95:F9:15:D3:02:BF:5D:EA
            X509v3 Authority Key Identifier:
                keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/E50C40D0C7EF11EEA7DE779E775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:15:b3:b1:45:4d:00:42:3a:b9:26:bd:c9:4d:a0:b7:26:52:
         e0:86:82:0b:e0:fb:6d:11:ae:e3:6e:1b:0a:4f:4e:db:63:b6:
         45:f0:0e:e8:b3:2e:af:a1:57:49:a8:2d:04:c5:78:04:80:ec:
         e7:cb:9f:50:1f:7d:45:e6:60:e0:e5:70:aa:80:1d:13:f0:6b:
         52:29:ba:98:a3:dc:76:da:e2:d5:29:27:0f:13:56:ee:dd:65:
         43:fb:f5:f5:4e:4f:8b:4b:58:72:f2:3c:49:ce:fa:99:7f:8a:
         d4:ec:33:54:2e:92:34:a6:16:dc:bd:16:1a:fe:11:bc:0a:09:
         57:c8:8a:75:f9:85:bf:fa:bd:c7:71:ed:b1:f7:bf:7d:c8:5d:
         ae:87:1e:b3:71:96:99:8a:78:2a:99:bc:64:96:3b:c7:82:0b:
         23:7c:bb:ec:78:fd:84:5e:69:9f:b2:99:8b:b1:cd:e1:22:2c:
         ac:91:b1:b2:c9:bf:f3:44:e8:b1:16:e6:02:92:5f:7d:f7:e5:
         a4:6d:aa:28:a1:ed:b6:93:33:93:34:61:f2:fc:ef:a5:ba:f5:
         45:f9:a3:04:8c:a2:c8:9b:5d:c2:5d:5b:a1:eb:eb:ad:21:cb:
         20:bf:79:a5:d2:dc:be:c3:51:b9:20:56:8b:11:cd:7a:b7:c8:
         61:c6:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org