Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/A7372C22B48111EBAD968D68F8AEA228.roa
File:                     A7372C22B48111EBAD968D68F8AEA228.roa (raw, json)
Hash identifier:          o8MbVu53diyJtPcUQ+CdCc1mJxR+pKcl5mM0mSPGCgU=
Subject key identifier:   43:A3:7F:E1:70:05:66:D6:26:0B:07:D8:D1:A1:8A:87:D3:F4:9B:02
Certificate issuer:       /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial:       05
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/A7372C22B48111EBAD968D68F8AEA228.roa
Signing time:             Fri 14 May 2021 06:57:32 +0000
ROA not before:           Fri 14 May 2021 06:57:27 +0000
ROA not after:            Wed 14 May 2031 06:57:27 +0000
asID:                     328576
IP address blocks:        102.221.200.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
        Validity
            Not Before: May 14 06:57:27 2021 GMT
            Not After : May 14 06:57:27 2031 GMT
        Subject: CN=609e1f5b-0730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:b9:48:d4:ca:af:aa:b2:d3:44:63:03:6e:
                    79:5e:a0:1d:e1:b8:30:75:d7:f9:0d:18:6c:a8:b9:
                    ef:72:88:79:b9:6a:81:44:a3:a0:35:08:22:71:27:
                    fb:f3:30:99:75:b5:d1:25:95:a2:46:3d:5e:12:35:
                    e5:6a:11:cd:d0:75:77:5a:ec:46:54:49:5c:f1:c6:
                    aa:ae:d3:33:62:e2:86:80:5e:09:ef:ac:6c:dc:cc:
                    4b:4a:89:d2:3e:c2:eb:b6:d6:84:40:ff:46:6c:d2:
                    4d:99:19:e9:d4:28:33:7b:5b:58:e1:ff:89:76:fc:
                    57:58:e5:84:57:e1:6d:92:4e:66:6d:29:f7:09:4d:
                    7d:e1:81:37:3d:c4:b7:cb:29:01:14:15:a0:a6:12:
                    9b:f9:c3:67:71:65:6b:44:50:d4:8c:11:c8:35:20:
                    85:a2:6c:33:b5:9d:d4:ee:80:89:b2:0c:2e:d7:21:
                    53:6a:ff:45:d0:f2:7d:04:92:51:c4:ec:bd:d5:d9:
                    4b:b8:a4:75:7b:fa:f3:c7:32:0d:99:aa:ce:d0:ea:
                    ca:0f:fd:25:ef:26:62:6c:0b:0d:f2:c8:f1:1b:53:
                    3e:78:49:00:5d:fa:93:78:30:18:71:61:77:24:25:
                    02:31:83:f2:34:f9:65:c1:e4:ea:dd:75:c2:17:ca:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A3:7F:E1:70:05:66:D6:26:0B:07:D8:D1:A1:8A:87:D3:F4:9B:02
            X509v3 Authority Key Identifier:
                keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/A7372C22B48111EBAD968D68F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.221.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:41:ec:71:88:6f:72:c7:86:b4:7d:ff:c9:ce:b1:2b:c8:9e:
         06:4b:ed:a9:9b:f7:00:eb:cf:c1:53:bc:54:f5:ab:2d:5d:b7:
         db:62:0e:b5:e5:53:ab:ed:16:0e:05:88:e0:19:ca:00:70:79:
         d2:e5:2d:90:c9:78:a2:b7:50:34:64:5d:db:92:08:c7:19:19:
         50:1c:30:85:1c:7e:3e:08:2f:c0:31:15:ab:56:31:4c:8b:45:
         eb:d2:84:74:80:35:e7:92:8a:b2:c1:15:d2:75:2d:59:61:7d:
         2f:bb:a8:eb:33:1c:21:45:d0:83:66:a0:da:e9:df:99:bb:d3:
         56:a4:27:1a:33:c4:cb:d1:b4:b3:2a:95:7a:c7:5a:92:5d:5b:
         02:3a:fd:89:b4:d8:32:a0:11:9a:68:f0:8b:7b:3b:51:44:03:
         df:8e:f1:81:dd:09:6b:b1:36:d3:66:8d:42:db:73:13:16:e3:
         4f:d0:34:b0:41:b6:64:10:ff:1c:43:88:2d:49:ca:c9:79:f8:
         48:f8:9f:cd:f6:bd:1a:77:e0:5e:80:4c:1d:f2:d2:3a:2c:ad:
         07:72:5a:8e:d3:31:12:86:a5:07:a7:2d:21:de:f6:94:60:f4:
         c4:75:46:49:b9:9f:04:6f:49:98:62:c3:bf:c6:02:fc:11:70:
         29:56:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org