Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/42EB7B286D3911EFBC35ECB4762E951A.roa
File:                     42EB7B286D3911EFBC35ECB4762E951A.roa (raw, json)
Hash identifier:          H3kWK7OLW3nsqj92PiqjTA4iQrd16r6P5/e0qVEE5Dc=
Subject key identifier:   E8:39:14:8C:50:07:28:ED:8A:8F:4B:3D:6D:0F:48:D9:72:3B:08:3A
Certificate issuer:       /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial:       0305
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/42EB7B286D3911EFBC35ECB4762E951A.roa
Signing time:             Sat 07 Sep 2024 16:50:18 +0000
ROA not before:           Sat 07 Sep 2024 16:50:14 +0000
ROA not after:            Mon 07 Sep 2026 16:50:14 +0000
asID:                     328334
IP address blocks:        102.134.88.0/22 maxlen: 22
                          102.134.88.0/24 maxlen: 24
                          102.134.89.0/24 maxlen: 24
                          102.134.90.0/24 maxlen: 24
                          102.134.91.0/24 maxlen: 24
                          2c0f:ef30::/32 maxlen: 44

Validation:               Failed, certificate revoked on Sun 08 Sep 2024 22:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
        Validity
            Not Before: Sep  7 16:50:14 2024 GMT
            Not After : Sep  7 16:50:14 2026 GMT
        Subject: CN=66dc8449-38ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:95:ba:f4:63:e8:85:01:d7:ff:b5:77:6f:2d:
                    15:31:ea:c7:b4:2c:39:a1:97:ba:0c:2d:3b:b9:da:
                    46:f8:47:c7:76:3a:6d:7a:f3:58:64:8f:ae:d1:5e:
                    3b:02:f7:9a:d3:34:91:4f:03:7d:d3:7a:23:1a:46:
                    1b:7b:f4:ed:96:ea:f6:a0:22:be:cb:27:88:f5:f0:
                    6f:36:9c:2e:6a:51:73:30:35:4a:58:0a:9f:fc:f3:
                    64:3f:46:19:d3:b0:1d:01:e9:05:f8:28:36:a4:a7:
                    1f:a4:8a:e8:84:8a:45:b8:b5:ce:9d:04:ac:09:ba:
                    b6:02:79:ea:5c:df:dd:db:7e:b3:d6:2e:14:2e:12:
                    4f:37:6b:9f:38:2a:65:ad:a8:fd:da:22:17:00:01:
                    7e:90:e3:f0:d0:96:45:82:44:81:ed:65:67:92:98:
                    85:e4:d1:0e:ab:79:75:09:59:33:56:b5:f8:09:9c:
                    b0:d4:5e:0f:5c:34:f3:7a:30:92:66:18:da:6f:a0:
                    c7:fb:b9:e3:df:b6:33:ae:9f:e9:10:e5:ee:e5:2a:
                    74:ab:24:52:e7:fa:7d:19:08:a1:66:31:8f:78:b9:
                    eb:ed:d1:d1:65:05:5c:1b:8e:07:89:26:ab:9d:ce:
                    79:22:d0:e1:53:54:9c:e3:2b:7a:1a:2b:f2:9f:fc:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:39:14:8C:50:07:28:ED:8A:8F:4B:3D:6D:0F:48:D9:72:3B:08:3A
            X509v3 Authority Key Identifier:
                keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/42EB7B286D3911EFBC35ECB4762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.88.0/22
                IPv6:
                  2c0f:ef30::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:ea:54:f1:7d:1f:0e:10:78:85:24:79:e8:c3:48:5b:76:
         8c:d5:a1:36:c4:59:fe:50:26:b3:94:26:3e:79:dc:43:19:dd:
         0c:a3:e1:9f:10:d7:7d:d8:82:65:3f:a4:39:7b:d1:6b:f6:21:
         9f:6f:73:1c:b8:09:a4:57:23:22:ef:db:e7:7c:5e:9d:8f:90:
         e9:21:5e:f1:cd:c4:ac:bc:83:2a:19:f9:11:84:2a:e9:b5:45:
         09:89:e4:55:38:2d:80:6c:53:31:9a:52:47:0e:e5:79:e9:2e:
         ed:5f:65:8e:86:62:f0:4a:d9:17:28:20:eb:6a:d3:87:6b:76:
         c3:0f:74:6c:df:39:ef:cf:58:6b:5e:29:a6:fd:7b:4a:27:d3:
         e7:ee:3e:03:d7:df:72:a7:a9:18:7e:31:c6:2d:ed:62:91:b4:
         49:49:2b:ac:a2:99:c9:f8:a5:7b:30:bc:6d:16:12:e0:8a:4d:
         ab:11:51:42:11:64:64:68:7c:eb:3b:fa:77:b2:cd:cc:22:74:
         1e:21:72:76:3b:3f:16:73:e7:b4:3f:e0:d5:91:6d:19:99:13:
         30:01:3d:19:26:fb:87:ac:eb:af:ca:27:ac:5c:93:90:eb:c2:
         be:2b:05:a7:74:5c:9a:76:14:84:7b:65:25:fb:ab:09:b4:52:
         03:f7:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----