Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/A8B1A44457E211EF84146861762E951A.roa
File:                     A8B1A44457E211EF84146861762E951A.roa (raw, json)
Hash identifier:          3qbx6rHhYRyVLwNsYzSFESkrkeVG5Sn5212gzcY2j8w=
Subject key identifier:   9F:CE:1E:3E:E1:0B:1C:B3:7F:63:8D:FB:B0:14:2E:8A:C4:C8:F0:C8
Certificate issuer:       /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial:       027A
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/A8B1A44457E211EF84146861762E951A.roa
Signing time:             Sun 11 Aug 2024 13:07:28 +0000
ROA not before:           Sun 11 Aug 2024 13:07:24 +0000
ROA not after:            Mon 31 Mar 2025 13:07:24 +0000
asID:                     328615
IP address blocks:        197.215.134.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 06:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
        Validity
            Not Before: Aug 11 13:07:24 2024 GMT
            Not After : Mar 31 13:07:24 2025 GMT
        Subject: CN=66b8b78f-64ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:ac:9d:55:67:f1:4d:76:17:fb:7b:85:6c:
                    35:06:ca:f0:06:3f:f2:3a:0d:0b:bf:a7:a5:94:3e:
                    4f:c6:6b:bb:23:f9:84:a9:35:f5:00:0f:9b:e0:f8:
                    34:52:11:dd:49:d4:71:1c:47:b1:e2:95:ca:c6:71:
                    dd:9e:73:2b:cc:2f:d8:e1:52:31:b0:0d:c7:77:11:
                    36:c5:3b:0d:cd:41:c0:4f:bb:a5:94:54:5d:73:a9:
                    2f:d2:6a:88:9b:d3:b3:ea:f2:5f:71:9a:af:13:85:
                    25:d2:4a:41:72:55:57:e9:fe:08:f2:5c:60:65:dc:
                    57:cc:ad:d5:21:a0:56:a7:87:69:2f:5f:a3:6a:fa:
                    77:5b:55:50:df:9a:e8:a1:d0:44:5a:26:45:63:0f:
                    d4:82:22:12:04:54:a8:8b:26:07:cd:c6:4f:3c:76:
                    52:30:d6:9d:48:6f:8c:e7:a1:a9:82:23:42:04:fb:
                    d6:8d:4c:d8:d0:fc:98:73:fb:de:b2:26:24:21:0b:
                    ac:66:49:8f:9c:60:c5:7f:5e:1e:6b:51:03:37:05:
                    1b:7e:b6:2b:eb:5b:cb:86:6e:be:10:2b:4d:38:42:
                    6c:b5:89:b4:ae:87:3b:7d:86:95:50:ba:34:87:85:
                    eb:50:42:fc:4b:05:e6:ae:0c:fa:18:cb:7a:d9:9a:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CE:1E:3E:E1:0B:1C:B3:7F:63:8D:FB:B0:14:2E:8A:C4:C8:F0:C8
            X509v3 Authority Key Identifier:
                keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/A8B1A44457E211EF84146861762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.215.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:5d:cc:61:c3:88:43:da:af:c1:60:f1:c2:b1:0f:7f:c1:
         18:0a:83:4a:f7:3b:55:24:78:cc:8a:c4:2b:a0:8f:11:78:31:
         39:65:01:8e:c6:c8:99:ec:d4:57:bd:62:12:fd:41:d4:bd:f7:
         df:88:49:44:11:b3:4f:a3:9c:d6:63:75:59:92:82:0d:eb:38:
         9e:59:3b:ef:24:a1:25:44:46:e3:f6:68:57:a7:5f:6b:d5:d0:
         54:e3:99:10:ff:5e:98:41:df:af:c1:40:c1:d6:6f:05:aa:2d:
         89:f2:d8:78:1f:81:ad:e0:fd:e3:94:be:d2:4c:4e:c3:2d:72:
         e6:27:22:5f:01:cb:db:06:2f:79:44:1e:3f:fe:8d:36:b0:8c:
         72:ac:e1:67:fe:63:62:62:42:f2:34:8c:a3:c6:5f:05:38:9c:
         94:0c:ca:16:5c:56:ad:40:f5:9c:26:6b:fb:7d:2a:a8:37:b1:
         49:3c:fa:10:b4:d2:03:ac:19:24:3b:60:b8:80:30:84:1a:70:
         0b:8a:fe:bf:76:61:9a:4f:df:72:ba:e7:9e:5f:dc:d0:9c:e8:
         70:2d:9a:55:97:89:05:67:ef:04:a9:e1:42:f6:07:94:c7:c8:
         a7:a3:ab:59:4e:54:6f:09:0f:d4:3d:a9:8d:85:4b:70:3d:2e:
         21:f4:a6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 08:21:54 2024 by rpki-client on console-fra.rpki-client.org