Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/DE7F6F7E1C2A11EEACF3C3694AD9E6FC.roa
File:                     DE7F6F7E1C2A11EEACF3C3694AD9E6FC.roa (raw, json)
Hash identifier:          LutynXrjcBYsAt19DYixCr3hTyhev3C1mx+7XEX4NHc=
Subject key identifier:   E7:9C:EB:CF:96:4A:68:64:E6:E1:D8:8A:50:77:9F:24:48:0E:EF:29
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       49
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/DE7F6F7E1C2A11EEACF3C3694AD9E6FC.roa
Signing time:             Thu 06 Jul 2023 18:28:14 +0000
ROA not before:           Thu 06 Jul 2023 18:28:10 +0000
ROA not after:            Wed 06 Jul 2033 18:28:10 +0000
asID:                     37105
IP address blocks:        197.185.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 30 Oct 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Jul  6 18:28:10 2023 GMT
            Not After : Jul  6 18:28:10 2033 GMT
        Subject: CN=64a707be-1173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:02:4b:1b:5f:e7:56:f3:84:ff:68:b5:ce:
                    50:ea:86:ae:30:5b:db:7d:33:11:b5:14:22:33:f6:
                    64:a1:24:92:1f:ca:ad:e7:65:0d:f7:99:29:1a:b7:
                    81:fb:b4:ed:21:ec:b9:5d:4e:1a:d2:d6:a3:db:f1:
                    15:f8:5e:f6:62:43:c9:ff:4b:43:cb:b1:ec:2c:91:
                    1b:05:8f:29:71:c6:60:79:1a:e1:38:d3:37:5a:18:
                    e4:ab:40:ac:19:6f:74:8b:69:12:e6:bf:f4:6a:7c:
                    21:51:5f:c9:49:28:e2:94:9e:53:77:35:51:21:04:
                    e8:1a:03:5c:ea:59:f3:0e:ec:dd:d0:27:25:ce:80:
                    a7:bf:2a:90:4e:69:75:28:6e:80:38:e8:5e:26:34:
                    e5:fd:ad:de:85:e2:cd:d2:7a:56:27:24:6f:06:be:
                    f4:c8:a6:56:01:37:3d:dd:39:4f:89:7c:d8:c2:26:
                    31:0c:dc:06:67:19:97:f7:af:ce:48:d2:7e:71:bb:
                    08:5e:f7:ce:ad:d3:b5:89:26:c8:cd:6e:11:da:36:
                    0c:ef:86:54:c1:17:86:ec:a3:f9:cc:77:8f:be:5e:
                    b8:04:b6:d1:10:43:c9:1c:dd:fe:2e:e0:b4:eb:78:
                    03:4d:dd:08:f4:43:d1:05:89:9b:f6:f3:b5:c6:49:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9C:EB:CF:96:4A:68:64:E6:E1:D8:8A:50:77:9F:24:48:0E:EF:29
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/DE7F6F7E1C2A11EEACF3C3694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.185.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:72:56:d4:44:2b:2c:f4:77:db:c2:89:5c:5f:e9:b7:d0:fb:
         ae:4d:cb:95:2a:3a:03:35:df:fe:80:a3:8e:f7:02:f7:b4:73:
         85:85:8c:c9:92:05:fb:a8:94:cd:d9:e9:a8:f4:17:c5:67:83:
         e9:7c:97:f7:8e:5d:47:0b:45:9f:23:52:58:b9:fc:18:38:51:
         86:fb:d5:75:24:af:d3:54:7f:28:47:1f:47:89:06:a3:5c:0d:
         72:97:e3:d2:a4:13:2a:ba:10:02:cd:14:75:51:5e:69:d9:48:
         09:83:c7:f2:72:c7:c8:5c:50:22:f7:e4:38:09:9a:b7:3f:64:
         9f:0c:86:97:0f:cd:c9:9f:b8:b1:b5:bd:e6:d4:6b:11:b4:4b:
         4a:08:77:08:a9:5b:1e:e2:00:85:3d:7a:1a:0f:42:cf:cc:b5:
         ea:0b:2b:9d:75:17:e4:4e:11:f0:2c:97:09:c3:f0:a2:c6:2b:
         f9:72:b4:87:6e:ee:26:a7:bd:fc:8f:de:c9:d9:8b:d3:dd:17:
         6e:36:8a:15:78:4c:93:06:26:06:ac:a8:a7:24:20:f9:be:02:
         40:6b:af:0d:16:11:74:26:5b:1b:7b:1f:ad:72:46:45:91:cf:
         b3:65:8a:c6:8d:8d:88:76:85:b9:b7:1c:08:28:f8:f5:12:ee:
         4e:72:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org