Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/4A972E34019711EFAF460355017001B1.roa
File:                     4A972E34019711EFAF460355017001B1.roa (raw, json)
Hash identifier:          txsvfJNL9LS5JEJupkUphMNVzGnP7Vpn24qNQta17e0=
Subject key identifier:   BC:61:B9:04:43:45:4B:43:5C:17:DD:23:31:0B:27:FB:89:9D:E8:65
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       04
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/4A972E34019711EFAF460355017001B1.roa
Signing time:             Tue 23 Apr 2024 17:31:17 +0000
ROA not before:           Tue 23 Apr 2024 17:31:14 +0000
ROA not after:            Sun 23 Apr 2028 17:31:14 +0000
asID:                     328586
IP address blocks:        102.22.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 18:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Apr 23 17:31:14 2024 GMT
            Not After : Apr 23 17:31:14 2028 GMT
        Subject: CN=6627f065-8835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:67:52:11:7d:e2:ca:44:2b:d1:ec:08:c8:
                    61:33:d0:88:d9:95:22:da:23:d4:10:f2:9f:fd:70:
                    cb:ff:ce:00:aa:fc:3c:0e:bc:22:3e:2d:49:e6:95:
                    5f:6d:ae:8b:28:cf:bf:3f:fe:e0:09:73:e2:36:07:
                    6d:6e:9c:22:91:09:4b:5c:24:37:cd:e4:a0:40:1f:
                    7f:f2:83:53:d9:ff:3d:cd:84:2c:e5:5b:3f:1d:cc:
                    66:ab:74:ad:7c:c1:ad:9c:ca:59:f1:b6:f9:f0:db:
                    22:60:34:69:6e:26:50:95:86:43:62:47:9c:4d:db:
                    77:80:a4:88:5e:06:7a:d8:41:87:a5:96:13:1a:87:
                    f8:37:2c:81:ee:35:17:66:9b:72:68:8f:50:4e:ea:
                    27:c1:fa:83:e6:70:ee:92:50:c7:14:d1:86:e4:81:
                    b8:bb:12:38:e4:b9:b6:6b:53:2a:d3:01:e4:44:ee:
                    96:20:ed:8b:97:99:f7:72:43:7b:dd:c1:e6:e2:bf:
                    6c:a1:ca:ef:e2:a7:81:9a:71:77:30:ce:b2:cc:7a:
                    a0:c1:ad:bd:92:b9:7f:93:ce:44:bb:7f:6e:19:30:
                    32:90:7a:a8:db:8e:48:4a:cf:1e:f9:ad:89:b3:a3:
                    51:e7:ac:ab:58:c0:8e:e0:b2:98:ca:47:f7:43:9e:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:B9:04:43:45:4B:43:5C:17:DD:23:31:0B:27:FB:89:9D:E8:65
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/4A972E34019711EFAF460355017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:36:24:1c:48:94:ce:fa:07:45:1d:69:13:34:2d:18:6a:c0:
         a7:b8:bb:45:1a:12:33:e4:81:47:c3:11:70:22:dd:aa:9c:5e:
         f1:2c:95:3f:da:67:e7:08:ec:64:9e:7a:73:41:3c:a4:9c:53:
         37:61:93:50:b6:41:d1:1b:63:5a:a1:5e:05:fb:8b:23:81:7c:
         62:d5:46:5e:12:eb:0f:c4:ad:fb:79:a5:9b:37:1b:12:d5:1d:
         35:31:3a:75:5e:d7:17:8b:34:e6:d9:2a:8f:6c:08:3c:9d:42:
         6f:49:28:05:c3:82:28:87:ed:6d:b9:ed:11:28:73:23:0a:4d:
         73:88:e1:a8:d3:79:6b:8b:c4:a8:d4:24:94:f4:e7:99:85:aa:
         e7:c4:f4:8f:e3:1b:72:ec:ae:53:dc:20:1e:e8:ab:08:62:7f:
         c7:23:64:e7:11:89:67:9d:e1:9d:82:8a:fd:81:3e:7c:13:a5:
         61:c8:65:11:93:b7:d0:05:8e:b9:68:25:64:de:94:41:7a:f7:
         1f:28:b7:a4:f7:54:3d:7b:c8:b6:72:bb:96:20:d1:f6:f9:9b:
         9e:2b:a6:42:42:6e:e4:5e:0e:de:8c:62:85:a3:02:dc:b8:67:
         b7:ba:2d:3e:48:2e:6f:32:8f:13:5f:41:85:34:b7:9a:5a:66:
         ff:de:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org