Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/4E679056B2E911EDB0F797D4F1222468.roa
File:                     4E679056B2E911EDB0F797D4F1222468.roa (raw, json)
Hash identifier:          HFuaNqQDbBTNQYhFgHYjaWzPjomMA3iSLadqvdJryuQ=
Subject key identifier:   FF:D2:AA:11:81:06:76:2C:1F:6A:E6:3C:02:DF:CB:FF:43:0B:2B:7F
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       0381
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/4E679056B2E911EDB0F797D4F1222468.roa
Signing time:             Wed 22 Feb 2023 19:44:23 +0000
ROA not before:           Wed 22 Feb 2023 19:44:18 +0000
ROA not after:            Sat 22 Feb 2025 19:44:18 +0000
asID:                     135752
IP address blocks:        102.216.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 06 Aug 2023 07:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Feb 22 19:44:18 2023 GMT
            Not After : Feb 22 19:44:18 2025 GMT
        Subject: CN=63f67097-b63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:4a:a1:ff:24:98:13:31:76:16:16:38:57:
                    95:09:04:f0:33:91:78:3e:78:a0:ea:be:f3:fe:6d:
                    84:4b:4d:bc:1f:65:76:42:a1:86:6a:14:ec:78:52:
                    5c:72:6f:a5:2c:31:e9:3c:0c:48:d6:22:ff:3e:ca:
                    ee:2e:b4:d7:e7:a6:42:0d:30:53:6a:f2:f4:2c:ae:
                    d0:0b:a7:dd:1a:5c:49:32:bc:04:bd:2c:3b:01:de:
                    30:e8:8d:8c:aa:5f:0c:ef:84:da:fe:eb:3a:81:07:
                    61:1c:52:e8:a0:98:8f:56:f9:92:10:2e:6e:54:08:
                    90:57:ea:e8:3e:b6:14:5a:05:c5:f2:1c:ee:d3:43:
                    74:bf:9d:25:09:ac:35:5a:86:2d:73:0a:b9:e4:47:
                    ea:62:c4:15:be:92:df:ee:16:b1:17:f5:c8:d3:e6:
                    72:9c:70:81:11:3f:6a:de:1b:99:60:01:0f:0d:a9:
                    86:53:b4:51:d2:78:66:80:83:0e:ff:d4:0c:0a:55:
                    bc:51:44:44:23:93:b2:0b:d0:05:bd:31:6d:26:93:
                    da:87:4a:0a:e7:c9:9f:18:04:20:aa:79:b3:09:f7:
                    e6:85:9c:50:d3:27:52:ad:06:6f:80:38:4e:05:9d:
                    95:db:7c:c4:25:38:a3:e2:8b:b2:4c:76:a8:bb:ca:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D2:AA:11:81:06:76:2C:1F:6A:E6:3C:02:DF:CB:FF:43:0B:2B:7F
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/4E679056B2E911EDB0F797D4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:02:96:9e:ee:e8:29:53:43:35:33:bb:31:e8:33:36:4e:81:
         86:82:ce:1b:fc:c3:1a:ea:a5:85:85:37:26:68:9d:d3:ee:b1:
         6c:92:95:f8:93:04:05:13:bb:99:bc:cc:db:e0:c3:2d:75:fa:
         b7:c2:0a:7c:00:42:65:89:a5:ce:e2:a5:01:79:93:41:50:7f:
         93:b2:f8:71:24:f5:71:c1:3f:57:af:32:56:ec:2a:f5:d3:cb:
         dc:3d:08:0a:33:bf:c7:2e:07:5a:1b:de:78:d5:fe:26:bc:b0:
         0c:b0:33:4e:3a:bd:2e:eb:d6:15:92:ce:33:48:9f:9f:5f:3c:
         bf:c8:43:35:20:d7:bd:a4:9b:49:9a:85:7c:5f:6a:a9:e1:41:
         7b:fc:f2:0e:d9:27:c7:3e:a3:b6:24:82:aa:38:08:8f:02:ef:
         e5:15:34:c2:22:49:cd:f6:a9:d9:aa:35:94:c9:97:7c:86:f1:
         e5:85:30:39:5f:43:51:9d:f4:67:39:34:3c:ac:18:5d:2d:ba:
         70:9f:63:d2:15:c3:ce:d7:9a:ea:a9:2c:ae:ea:97:64:db:a3:
         35:ea:71:4a:46:fe:c3:dd:1e:7c:d4:5b:e3:84:3c:5d:e3:2d:
         98:8a:f9:cf:ce:75:60:9f:52:2c:72:3f:bf:5d:36:38:2d:53:
         aa:fa:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org