Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/09006A74347E11F0A60464AEDAE4EC9C.roa
File:                     09006A74347E11F0A60464AEDAE4EC9C.roa (raw, json)
Hash identifier:          s03JbGNBk8kXd8qSxHO6MVGUGZrIrikComxIiUYEH2E=
Subject key identifier:   95:00:F3:11:3E:E1:3A:3E:7E:BA:42:35:2B:15:BF:F0:8C:59:C2:AE
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       05BE
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/09006A74347E11F0A60464AEDAE4EC9C.roa
Signing time:             Mon 19 May 2025 06:53:57 +0000
ROA not before:           Mon 19 May 2025 06:53:52 +0000
ROA not after:            Fri 18 May 2035 06:53:52 +0000
asID:                     5536
IP address blocks:        102.218.128.0/24 maxlen: 32
                          102.218.130.0/24 maxlen: 32
                          102.219.22.0/24 maxlen: 32
                          102.220.125.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Thu 22 May 2025 12:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: May 19 06:53:52 2025 GMT
            Not After : May 18 06:53:52 2035 GMT
        Subject: CN=682ad585-c452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:5c:a7:ba:6e:ef:89:6a:ce:88:5e:c9:72:
                    bb:71:8b:31:f8:d1:07:c0:cb:df:37:aa:51:04:59:
                    25:2d:67:9d:08:59:c1:0d:2e:fe:0d:c7:dc:cd:78:
                    a6:90:73:1f:b8:6c:d0:7e:e1:6a:ae:54:d1:ce:e5:
                    7f:f6:77:9a:d3:dc:1e:1b:a0:43:cc:d8:96:bd:50:
                    39:97:4a:e0:27:20:93:90:c9:1c:a5:85:77:88:be:
                    65:c7:14:8c:ef:9d:16:ce:08:78:25:d1:4c:15:0d:
                    95:3a:d7:fe:ee:11:b9:ec:7a:f4:a3:dd:fa:18:58:
                    b9:53:25:d3:98:1a:98:4e:d8:7d:41:1c:cd:18:c4:
                    14:55:b3:b0:8a:f4:7a:27:96:a8:ca:a7:33:9c:d3:
                    a6:71:ac:67:61:5a:8b:a9:84:f1:ae:32:84:48:25:
                    d5:3c:02:38:45:8d:50:de:ef:67:9d:ef:73:80:06:
                    74:32:fc:60:5e:be:13:0c:e4:cd:1c:91:e1:01:75:
                    41:bd:19:0a:9a:85:b7:cf:55:a1:e7:a0:c8:8e:f3:
                    3b:56:08:80:bf:19:fa:c8:ce:dd:0e:1f:3f:89:8a:
                    1e:f6:e2:15:3f:65:e3:6c:8a:3e:2a:f3:00:ed:f8:
                    a6:3f:de:59:7c:ef:cd:b2:12:5b:d4:0c:09:01:ef:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:00:F3:11:3E:E1:3A:3E:7E:BA:42:35:2B:15:BF:F0:8C:59:C2:AE
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/09006A74347E11F0A60464AEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.128.0/24
                  102.218.130.0/24
                  102.219.22.0/24
                  102.220.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:da:f9:dc:04:06:fe:58:ab:c8:3a:70:4d:6d:d1:f5:ec:
         e3:5b:8b:48:7a:cc:4a:11:41:87:2d:26:f9:76:3b:a9:96:80:
         cd:04:0b:2b:f1:32:85:87:f9:4b:ee:bd:2d:8a:bc:1a:b7:f6:
         e6:8c:77:91:5c:d7:8f:f7:8d:1a:f1:b5:be:5b:a8:a6:30:de:
         8b:46:24:e2:59:04:a2:1b:0c:96:62:94:f7:2c:94:17:90:ec:
         a4:9c:48:77:2c:be:8b:59:e0:a7:ca:9c:9f:ac:13:ee:6d:5b:
         84:54:10:cf:ab:49:1f:24:b6:42:e9:de:b5:57:08:09:9f:02:
         a1:69:16:6d:1c:2e:cd:b9:12:99:71:d8:dc:40:83:74:40:ca:
         2c:6d:56:39:0c:36:60:ae:5d:7d:37:52:42:3d:49:3e:5a:10:
         ae:46:f2:05:bf:8f:9d:c8:e1:1c:2f:0a:4f:99:27:ec:cc:d2:
         00:8b:97:a2:83:93:fd:9a:23:d3:0e:1b:f6:2c:6f:7b:10:a9:
         07:2f:1c:33:90:6b:b5:0a:44:b8:5a:0a:49:76:6b:25:ef:0d:
         1d:52:e9:d0:43:db:b8:72:6d:1a:4b:44:71:62:82:ba:f7:85:
         14:80:81:b1:bf:b2:ed:fc:95:8b:48:fb:7b:51:0f:98:9a:b5:
         9b:82:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:07:49 2025 by rpki-client