Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/E95D667856DD11EF949ACF4B762E951A.roa
File:                     E95D667856DD11EF949ACF4B762E951A.roa (raw, json)
Hash identifier:          bhw6fo/0od7Qt6Bh/CKwnGXr3iFU0c258X2sf5pHzN0=
Subject key identifier:   83:8B:F7:39:0F:DE:FA:F2:18:5B:DE:14:83:F9:4A:B8:5D:49:29:DD
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       046F
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/E95D667856DD11EF949ACF4B762E951A.roa
Signing time:             Sat 10 Aug 2024 06:00:57 +0000
ROA not before:           Sat 10 Aug 2024 06:00:54 +0000
ROA not after:            Wed 09 Aug 2034 06:00:54 +0000
asID:                     37725
IP address blocks:        102.218.128.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 16:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Aug 10 06:00:54 2024 GMT
            Not After : Aug  9 06:00:54 2034 GMT
        Subject: CN=66b70219-7684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:c5:52:13:e7:d1:2b:e6:6b:9f:fe:34:5f:
                    10:2d:19:72:a7:6e:20:89:26:1c:9e:f6:87:f9:58:
                    c5:08:06:f3:be:2c:5b:98:7c:ff:09:55:2c:1c:a4:
                    e5:2e:2d:c0:8e:ec:f9:b9:96:07:76:b9:4d:d8:03:
                    21:07:ad:b9:c9:ed:93:e9:51:65:33:8d:c8:11:57:
                    79:1a:31:fd:86:c2:0b:2d:ea:28:60:e8:07:ef:dc:
                    0d:61:c1:aa:4b:23:83:f6:70:9f:d0:8c:cc:e0:c3:
                    1a:92:48:8e:79:ad:75:8b:d5:16:a6:1a:1e:0e:03:
                    85:7d:2d:26:fd:38:44:6b:14:79:a1:18:ea:bb:3f:
                    23:36:37:8a:63:48:b5:24:55:b3:cc:29:16:e5:a1:
                    fd:c1:57:e4:dc:04:9c:da:a4:a7:11:cc:3d:0b:bc:
                    5c:c3:5d:2e:ac:e2:98:9f:31:9a:66:d9:98:8c:67:
                    71:f3:0f:e8:44:50:3a:ef:f9:bd:e0:1e:cf:3d:37:
                    6b:e6:80:21:50:d8:ce:74:06:3a:30:ae:97:ad:3b:
                    29:dc:3a:80:12:6c:c6:ad:b7:ff:af:bc:2d:df:4f:
                    ce:1f:09:be:af:5c:31:23:e3:03:df:46:ba:3d:6f:
                    8b:b4:9f:70:e5:da:8b:d1:27:cb:a6:99:9b:a0:c4:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8B:F7:39:0F:DE:FA:F2:18:5B:DE:14:83:F9:4A:B8:5D:49:29:DD
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/E95D667856DD11EF949ACF4B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:36:af:51:12:d2:9d:47:87:97:5e:85:ac:df:8c:49:81:a7:
         09:39:26:57:b4:13:4d:b0:ac:48:5f:0b:b7:80:82:d5:f5:42:
         57:c2:9b:f2:cb:13:2a:a7:82:ef:77:6a:ab:d9:d1:e2:b0:12:
         a3:4e:9e:a0:2f:46:39:40:45:22:2e:69:cd:fb:18:21:5e:33:
         cc:7e:e0:b9:5c:59:d5:47:be:ef:40:d3:04:23:13:0d:0c:37:
         5f:cd:a0:6f:37:e8:49:e2:58:4e:dd:82:4d:d3:1b:09:8e:84:
         a8:ec:0a:f0:bb:a3:49:4f:1c:68:70:9e:db:af:fb:63:2a:e1:
         c8:2e:c3:e7:58:6b:06:35:1c:2c:2f:b3:24:f0:76:7c:3f:04:
         81:c5:77:c7:ca:c0:50:a7:bb:92:e7:f8:a9:26:33:a5:1e:d9:
         2a:aa:ed:fc:a1:bb:f2:9a:59:14:e2:67:f2:60:52:42:71:b2:
         e3:49:cb:8b:cb:e7:08:71:fc:a9:00:77:8c:0b:a8:82:48:b4:
         93:53:c2:40:07:fa:77:33:a7:48:a6:51:69:21:20:4d:3f:72:
         74:f8:84:f5:4e:36:da:44:11:2e:b7:b9:b5:00:89:4c:2a:16:
         7e:5d:29:ab:91:a4:b3:71:2a:29:56:48:c0:9a:77:4b:65:7a:
         7b:da:1f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 20:17:03 2024 by rpki-client on console-ams.rpki-client.org