Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/20835620EDD111ED8283F6254AD9E6FC.roa
File:                     20835620EDD111ED8283F6254AD9E6FC.roa (raw, json)
Hash identifier:          +FshD/nFwuMgEzbM0ccPrSVvq9MjnrOoJO8TUvR8JqE=
Subject key identifier:   9C:A3:7E:B3:52:A3:5E:07:B6:28:B1:48:B3:B5:56:21:12:80:18:1A
Certificate issuer:       /CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Certificate serial:       04
Authority key identifier: 1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/20835620EDD111ED8283F6254AD9E6FC.roa
Signing time:             Mon 08 May 2023 18:49:57 +0000
ROA not before:           Mon 08 May 2023 18:49:53 +0000
ROA not after:            Sat 31 May 2025 18:49:53 +0000
asID:                     328275
IP address blocks:        102.165.120.0/24 maxlen: 24
                          102.165.121.0/24 maxlen: 24
                          102.165.122.0/24 maxlen: 24
                          102.165.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 May 2023 05:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
        Validity
            Not Before: May  8 18:49:53 2023 GMT
            Not After : May 31 18:49:53 2025 GMT
        Subject: CN=64594455-5e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:39:ad:7d:25:84:2c:ed:78:88:ff:0c:3a:
                    3a:a2:ba:f8:70:fa:e5:af:70:2e:f7:72:bc:f7:49:
                    35:d1:49:f1:27:c0:9a:97:be:c9:fe:9f:09:d5:94:
                    22:a9:fe:b7:44:b3:16:a2:66:43:ba:98:d8:0b:9d:
                    80:13:66:d9:61:ad:21:d0:ce:8f:4f:3b:c6:16:f3:
                    e4:32:75:30:ae:de:c6:1c:b6:23:19:60:9b:78:54:
                    68:18:a5:b7:d1:e6:b8:d1:2b:a0:1f:30:5f:f7:9b:
                    6a:61:0f:44:18:00:84:42:ab:ce:ef:dc:83:f8:eb:
                    50:29:ab:d8:c6:9d:63:cc:8a:60:ba:9c:6b:ed:a2:
                    37:f4:5e:e9:d7:67:ed:e0:b8:25:3f:b5:12:a0:a5:
                    39:17:ba:a9:01:f7:29:f8:fa:4c:05:7e:ca:32:5c:
                    6e:1a:dd:9e:56:71:0d:1f:cf:3b:75:c4:8c:89:02:
                    ac:1d:3e:f3:fe:47:71:d6:25:9b:6a:b8:cb:6b:f1:
                    4d:20:5e:9d:15:0f:da:fc:63:6b:ef:6f:c8:27:7f:
                    5b:e1:18:aa:51:93:56:c5:1a:a6:36:8e:03:d0:62:
                    5b:41:95:cd:85:a0:fb:08:d6:02:47:54:dc:d0:0b:
                    3a:6b:32:f4:9f:30:ff:72:05:bc:d9:2b:85:dc:41:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:7E:B3:52:A3:5E:07:B6:28:B1:48:B3:B5:56:21:12:80:18:1A
            X509v3 Authority Key Identifier:
                keyid:1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/20835620EDD111ED8283F6254AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:e2:9e:84:f0:41:f8:9b:a6:b7:83:03:76:02:5d:00:40:a9:
         83:01:8a:81:bc:39:75:6d:c6:b0:17:7d:14:ac:eb:8c:09:4a:
         f3:02:9c:f0:c8:78:0e:8e:93:e9:ee:b6:b9:ff:77:41:b1:e1:
         f1:e4:74:7a:21:d3:44:55:34:8a:63:03:5f:ab:bb:6b:0b:7a:
         60:63:d2:6e:3d:c5:e7:77:2c:80:e4:44:93:e0:b0:df:90:68:
         3f:96:c4:c4:eb:c0:f6:06:e4:24:43:1f:9d:03:2b:89:eb:50:
         7c:73:94:a5:fa:6c:f1:b9:d8:7b:c3:e2:2a:bf:6b:f2:d6:d5:
         18:4a:d7:95:cf:c3:c4:6b:9d:50:4f:df:78:6a:f3:c6:23:de:
         05:2c:c2:ac:fe:5e:95:bf:8a:fb:c9:a0:eb:61:36:ea:55:e5:
         d8:b7:70:2c:4c:1e:60:db:14:6d:02:21:bb:d0:2f:64:7c:51:
         a7:e6:0e:16:38:dc:61:ea:59:19:25:ce:c1:0d:c5:5c:00:27:
         4d:f7:93:a1:2f:fa:de:94:f2:8c:72:96:4b:17:cf:55:81:ca:
         c4:95:ed:df:a4:22:bc:47:5c:c1:a8:3c:50:6b:9e:d0:cf:94:
         49:b2:d7:01:ea:88:77:17:cd:ce:04:a2:e3:cf:e1:f3:2a:42:
         07:6c:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org