Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/E6AF3E56058E11EF9FB32730017001B1.roa
File:                     E6AF3E56058E11EF9FB32730017001B1.roa (raw, json)
Hash identifier:          o4Y24z04JIZm0UtUj7w2CTOMSHxxeDgpEIpN7prq7SI=
Subject key identifier:   DE:6B:F2:E9:8B:AE:1E:E9:8E:8D:BA:A5:69:8C:A0:58:4A:4D:A0:A9
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       13
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/E6AF3E56058E11EF9FB32730017001B1.roa
Signing time:             Sun 28 Apr 2024 18:41:18 +0000
ROA not before:           Sun 28 Apr 2024 18:41:15 +0000
ROA not after:            Tue 31 Dec 2030 18:41:15 +0000
asID:                     328586
IP address blocks:        102.22.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 10 May 2024 14:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Apr 28 18:41:15 2024 GMT
            Not After : Dec 31 18:41:15 2030 GMT
        Subject: CN=662e984e-53c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:d5:7c:5c:14:00:b3:1c:f1:c9:3d:d2:de:
                    f3:57:ab:99:49:64:49:2e:bd:43:ae:db:cb:b6:9d:
                    cb:8d:78:9a:f6:f3:8f:80:b0:01:92:45:f4:ee:13:
                    fb:03:40:e8:c6:cb:af:68:fa:4a:09:63:d7:dd:28:
                    bd:b7:bf:e6:1f:a0:72:0f:3e:36:f3:a7:25:20:aa:
                    cc:fa:f7:dd:66:1b:b1:d2:13:a7:dc:31:19:5e:68:
                    87:26:f2:3c:c5:60:35:01:20:22:19:2a:0e:41:a4:
                    fa:51:6f:ac:9f:fc:f6:d9:65:f1:50:f7:84:60:5f:
                    d9:8a:a6:21:f2:ad:fa:56:f8:11:26:70:a9:da:dc:
                    b6:6b:d0:07:a7:c6:c4:f2:d2:e5:5c:f1:58:a7:48:
                    a8:7a:5a:22:59:b3:27:8d:70:53:2e:6f:0f:19:80:
                    4d:5e:d2:ea:53:ed:f1:31:7d:13:9d:aa:79:5f:fe:
                    26:33:03:6e:85:ca:53:8e:fb:9d:cd:87:4c:0e:9f:
                    39:c7:40:1f:c2:93:02:2e:8f:0e:60:bf:e2:2b:dc:
                    3d:c6:44:a5:ed:65:3c:54:17:bb:8f:65:12:91:b2:
                    b8:a8:5c:9f:0f:23:30:35:32:b3:b6:9e:b1:c3:8a:
                    e5:d4:e4:b8:b4:9b:2e:66:48:c0:ab:f0:5c:ee:1c:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6B:F2:E9:8B:AE:1E:E9:8E:8D:BA:A5:69:8C:A0:58:4A:4D:A0:A9
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/E6AF3E56058E11EF9FB32730017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.22.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:e1:e1:de:24:e4:7f:03:5f:31:1f:a1:f2:e2:c4:e4:90:bd:
         71:08:0d:e2:d7:06:62:a8:77:f0:33:f3:8e:82:05:d7:8e:87:
         c8:1d:10:ce:9e:c7:3b:22:6a:db:ff:61:a3:14:b3:bd:19:b7:
         e7:3a:08:d0:2e:5f:cb:0f:4c:d5:e8:72:b7:82:66:29:1c:73:
         4c:49:f9:13:0a:25:4d:77:6d:cf:83:5a:a7:8d:5a:17:be:cc:
         00:5e:18:ae:33:37:82:20:bd:a2:00:60:3e:ff:15:8d:b0:fc:
         28:34:e8:b9:1c:19:c9:93:a5:8f:51:f2:5d:7f:38:de:74:7c:
         9e:9c:75:f1:78:ab:4f:fc:72:07:fd:8d:5e:66:65:bb:77:20:
         3c:1c:07:01:14:67:b3:ec:b1:e8:d7:08:49:c5:be:1b:21:8f:
         9d:8c:08:81:f6:d4:b6:e0:95:63:3e:99:18:98:40:25:19:94:
         7d:e9:f4:3c:0b:eb:88:a4:e7:e9:6e:6b:89:95:81:ed:05:9a:
         e8:ed:fc:35:53:f7:d7:98:d6:12:1e:e1:52:67:e5:e5:a3:b0:
         3e:fb:4f:86:78:cd:2c:a9:56:9b:aa:fe:b3:e6:aa:38:51:aa:
         e7:0d:18:b9:37:d3:2d:0f:6c:56:ae:11:71:67:2d:df:cc:63:
         2c:cd:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org