Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/ED46C01ABEBF11EE983A9A65775412E6.roa
File:                     ED46C01ABEBF11EE983A9A65775412E6.roa (raw, json)
Hash identifier:          QmnGpDl3wY5jk+VcwNoBStxRx+FgUZUyHEUl1G+eW58=
Subject key identifier:   9A:4E:B7:30:6D:84:B5:D7:8D:E9:0F:5C:25:47:F9:A7:ED:EA:A3:24
Certificate issuer:       /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial:       04
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/ED46C01ABEBF11EE983A9A65775412E6.roa
Signing time:             Mon 29 Jan 2024 16:03:22 +0000
ROA not before:           Mon 29 Jan 2024 16:03:19 +0000
ROA not after:            Tue 31 Dec 2030 16:03:19 +0000
asID:                     37645
IP address blocks:        102.216.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 12:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
        Validity
            Not Before: Jan 29 16:03:19 2024 GMT
            Not After : Dec 31 16:03:19 2030 GMT
        Subject: CN=65b7cc4a-de42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:41:41:a6:38:2b:36:96:0d:36:3f:08:04:95:
                    ca:a6:67:26:24:ca:39:00:26:c6:32:b1:a6:2e:a1:
                    56:cb:3e:bf:a8:a1:d0:d8:f1:e4:58:4c:d6:58:f1:
                    ec:0e:f6:4b:aa:eb:aa:7c:4c:d5:a0:8e:83:0a:4a:
                    55:38:de:fa:75:33:f7:d6:5a:0c:fe:9a:41:69:50:
                    81:5f:fd:bc:a1:7f:6e:33:6a:4a:b2:7c:ac:e7:a5:
                    d2:69:6f:9c:c6:ae:90:8a:e6:06:2c:77:6a:24:8b:
                    29:74:43:8e:61:f7:7f:93:67:d3:ed:28:cf:57:3a:
                    2e:a6:f5:e9:56:c3:7e:b7:6e:87:66:22:46:27:95:
                    73:4c:37:8d:07:69:9a:e8:c3:b5:2d:e9:ba:5c:85:
                    1f:15:45:05:0b:b0:ce:03:60:43:c9:40:59:c9:ee:
                    44:b4:cd:5b:80:24:ef:95:18:83:0c:e8:34:37:63:
                    ac:2b:89:d5:49:44:72:e9:a1:76:92:d6:ba:08:6b:
                    a2:dc:ff:a9:a4:e8:fc:74:bc:02:88:65:bd:4d:4f:
                    24:0e:cf:03:f4:0d:90:e5:af:e7:98:a3:54:47:71:
                    ce:87:37:fb:49:da:83:5d:3b:3a:48:69:de:1b:c8:
                    0f:34:52:76:3d:3e:92:c1:90:ed:32:6d:b9:87:d0:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:B7:30:6D:84:B5:D7:8D:E9:0F:5C:25:47:F9:A7:ED:EA:A3:24
            X509v3 Authority Key Identifier:
                keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/ED46C01ABEBF11EE983A9A65775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:05:fc:28:1f:21:48:67:cf:7a:34:20:c7:90:06:3e:ab:a8:
         2f:f3:f5:7e:47:92:b3:8f:0d:b3:1a:58:db:2c:3a:0e:7c:10:
         12:e0:30:02:70:19:9a:51:75:8d:34:aa:0b:ce:47:bc:9f:3c:
         0c:38:2b:a5:a7:b5:e4:d9:f9:61:f6:5d:5f:c0:22:01:ff:21:
         78:17:8f:89:07:72:1f:26:96:c5:7d:4d:f4:b4:54:29:1e:25:
         8b:9a:89:bf:af:62:d3:25:8b:25:ab:a3:6f:ba:36:75:e0:5e:
         39:0d:ce:d5:82:6b:d8:b2:75:06:1e:ba:bd:75:12:53:40:f9:
         64:c3:4d:05:04:a2:f9:3f:15:44:8a:e9:9b:89:16:b5:13:ec:
         17:ae:f6:e6:04:d5:17:18:a6:a3:f8:7c:2a:d9:8b:ac:3d:cd:
         d8:29:4c:f1:07:db:71:29:7b:9f:0b:98:15:e5:ef:e1:c1:e3:
         22:13:81:79:34:5d:35:cb:da:81:60:4d:1e:2d:1b:aa:7b:78:
         d4:35:be:5f:c3:46:db:2e:c8:e8:bf:b2:e9:98:7f:aa:ac:cd:
         ff:b4:c0:6f:8a:ee:f3:b5:38:4b:ef:68:61:2d:4f:90:51:10:
         16:c2:4a:12:36:8d:52:72:bd:20:03:1e:c4:2a:29:f8:85:b7:
         de:8b:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org