Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/ECCB030EFAFA11EEB9A7B5F7007001B1.roa
File:                     ECCB030EFAFA11EEB9A7B5F7007001B1.roa (raw, json)
Hash identifier:          ol/eJBwAEuI8Ki03C+kXlj3EoHK9mO7BMe6S1NFw28k=
Subject key identifier:   3B:09:2A:D8:C3:3F:48:44:1D:E6:B5:BE:1A:2D:06:30:E6:FB:5D:8D
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       0179
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/ECCB030EFAFA11EEB9A7B5F7007001B1.roa
Signing time:             Mon 15 Apr 2024 07:36:52 +0000
ROA not before:           Mon 15 Apr 2024 07:36:48 +0000
ROA not after:            Sat 15 Apr 2034 07:36:48 +0000
asID:                     37105
IP address blocks:        197.185.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 06 Oct 2024 06:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Apr 15 07:36:48 2024 GMT
            Not After : Apr 15 07:36:48 2034 GMT
        Subject: CN=661cd914-dd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:da:67:c9:c3:68:7d:79:76:66:cf:e9:31:
                    0f:da:dd:bb:1e:be:e6:9d:72:36:85:fd:42:6c:a1:
                    ae:f6:69:a6:5a:9f:80:23:76:45:88:7d:98:e6:92:
                    ae:b8:57:c3:5e:52:37:51:e3:84:a4:0d:66:56:e8:
                    47:65:15:54:3e:eb:c4:2c:05:0d:55:e5:f5:db:20:
                    74:61:af:e1:ef:64:9b:2a:40:e5:b2:8b:6a:b9:17:
                    56:90:3b:16:72:de:7f:54:00:16:0a:cb:c1:cb:42:
                    31:f5:42:50:6e:e4:d2:7a:2a:5b:79:e4:9a:08:f7:
                    78:d6:ef:94:28:60:71:15:5f:fa:8e:08:c5:ae:f9:
                    82:c6:26:b4:e8:1a:d5:04:00:eb:4a:d0:36:37:a3:
                    f0:86:62:b0:40:1b:24:73:d1:30:9a:a8:3e:2a:4d:
                    40:47:d9:f1:a3:9e:c4:02:dc:76:c9:fc:b9:a4:9f:
                    58:58:fd:06:e9:92:5c:c4:5c:e6:1d:61:d6:14:63:
                    d8:01:a1:59:d5:03:c8:f2:c3:87:fe:52:f2:99:55:
                    6c:be:64:71:cf:f6:70:e1:b9:95:e9:85:e1:46:09:
                    33:f4:15:d7:39:a6:fb:a9:b6:24:b9:df:4d:a2:5e:
                    03:c7:ec:f7:db:33:9a:b0:34:16:a3:c2:04:23:c9:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:09:2A:D8:C3:3F:48:44:1D:E6:B5:BE:1A:2D:06:30:E6:FB:5D:8D
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/ECCB030EFAFA11EEB9A7B5F7007001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.185.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:50:ee:f9:43:dd:a8:fd:16:60:23:b5:87:14:9c:53:14:f4:
         84:a9:e7:d9:2a:9a:6d:41:42:42:73:27:c4:c7:ce:00:84:86:
         bf:df:ce:c1:29:0a:a0:9f:6d:63:7e:e4:80:6f:c4:98:ad:0e:
         e6:ad:5a:76:6d:fb:ff:bd:1b:f7:80:21:35:c9:50:4b:8e:bd:
         ed:5d:61:13:6f:c0:8a:f1:1d:b2:28:e7:a0:9d:76:2c:8e:73:
         52:34:e2:e8:da:7d:9e:4f:f6:16:dc:cf:c7:e4:f6:61:53:13:
         a7:26:6b:02:43:37:36:db:2a:40:6f:8f:36:ca:7f:55:16:f1:
         39:f4:97:46:3e:37:da:8b:c4:ec:d3:5c:9f:b2:c1:ea:86:4f:
         2d:ee:fd:6a:76:b2:cc:51:d0:74:56:80:b7:9d:37:42:af:25:
         d1:1b:5a:8f:4e:c6:bf:be:5c:97:75:e0:2a:6a:78:7d:83:4c:
         26:65:20:4c:13:5c:53:23:93:10:9e:9a:95:84:da:12:2a:dd:
         bc:bf:f5:ba:af:64:40:2b:e7:12:e4:64:ae:c8:be:79:26:72:
         8b:bf:8f:c6:58:9b:06:8d:6b:52:eb:03:08:60:44:80:70:44:
         f4:d1:34:61:ea:62:0e:39:86:ea:ee:69:49:b6:d8:cc:fc:d2:
         8b:68:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 10:02:41 2024 by rpki-client on console-ams.rpki-client.org