Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/15865AEE856D11EFAF5B9164762E951A.roa
File:                     15865AEE856D11EFAF5B9164762E951A.roa (raw, json)
Hash identifier:          S6tHs1rNiFECRW3gPfpm1PZJ+8IfVXmTnpqmZ23qvjY=
Subject key identifier:   F1:73:78:B3:EA:96:8B:E6:36:48:C1:74:F8:F5:CF:F2:14:E6:FA:E1
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       05
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/15865AEE856D11EFAF5B9164762E951A.roa
Signing time:             Tue 08 Oct 2024 12:01:43 +0000
ROA not before:           Tue 08 Oct 2024 12:01:40 +0000
ROA not after:            Mon 08 Oct 2040 12:01:40 +0000
asID:                     37467
IP address blocks:        197.154.0.0/16 maxlen: 32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 11:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Oct  8 12:01:40 2024 GMT
            Not After : Oct  8 12:01:40 2040 GMT
        Subject: CN=67051f27-50ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:9b:d9:38:78:95:31:24:d3:02:e0:87:52:
                    b6:1c:00:84:72:7d:4c:03:5d:b5:f4:56:13:6e:87:
                    d1:9f:cd:c4:84:10:26:08:cf:9b:5c:df:bc:43:af:
                    66:f3:27:63:d2:78:0f:ea:fd:f4:22:9e:7f:91:53:
                    44:29:9d:86:df:ba:c3:b5:11:61:e8:b2:10:46:89:
                    fc:32:5e:84:c1:cd:25:7b:43:37:86:e7:f0:ca:3f:
                    2c:1b:8d:ff:a5:c8:d2:21:7e:7b:4a:e1:cb:91:b2:
                    0f:18:82:2a:2e:f4:d0:8c:7e:22:54:59:4b:1d:c9:
                    e4:ba:73:50:ef:25:b7:59:85:5e:1b:35:3d:bc:a3:
                    2d:73:b3:6d:09:3a:65:34:d0:dd:0e:63:45:0a:bc:
                    f6:6f:fe:07:ef:23:bb:de:21:dc:2b:94:5a:6f:ec:
                    f7:cf:d1:c9:de:00:fb:cd:50:9f:89:16:55:df:da:
                    28:6b:ac:d7:f0:13:68:35:32:d9:a3:13:44:81:77:
                    9a:c3:2e:99:98:f6:49:41:cf:33:f2:1d:75:59:02:
                    5e:0b:c6:11:e4:ba:3d:a4:f5:d8:b3:c5:d4:10:ae:
                    94:04:d5:22:f0:db:51:f8:ac:32:2e:54:17:4f:be:
                    4a:66:10:5f:e6:ce:64:87:4b:06:fc:a6:0f:2d:e7:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:78:B3:EA:96:8B:E6:36:48:C1:74:F8:F5:CF:F2:14:E6:FA:E1
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/15865AEE856D11EFAF5B9164762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:43:48:35:bd:a0:e3:61:8b:b3:6c:d5:60:5d:f9:43:6b:5c:
         8a:08:20:72:cd:56:5e:1e:37:70:03:72:26:85:ba:4a:a1:bc:
         fd:39:a6:f9:64:04:af:fb:b8:32:ff:14:b8:42:5b:7a:66:af:
         4c:37:06:14:09:98:45:37:3d:16:47:0b:f6:a3:c6:7d:6a:c3:
         d7:75:de:34:47:12:26:b9:26:3f:ac:a1:fc:e8:4d:3e:c2:4b:
         07:be:ec:28:36:a6:fd:95:ad:00:81:4d:42:9b:9c:1c:90:9f:
         dd:e7:f2:8e:41:ec:1b:f5:3c:b5:bc:d2:3a:14:66:22:fc:75:
         d1:b0:ea:18:66:43:3b:f0:86:bb:be:01:32:3d:71:20:2f:e7:
         1a:55:cc:b1:40:65:44:60:07:75:d6:84:7b:20:bf:70:43:b1:
         52:9e:94:3c:15:44:93:98:56:6e:bf:e7:85:91:1c:24:c1:c7:
         ec:7a:ad:db:51:8c:d5:c7:66:4f:46:e9:0e:af:0a:ff:9e:22:
         34:25:fb:02:2e:75:25:75:9e:b2:22:42:0b:3c:71:75:21:a5:
         bd:78:6d:e8:a2:10:71:0e:8c:49:36:41:30:dc:82:35:7b:da:
         46:c4:54:ad:7f:c8:b9:55:40:d1:18:b9:c4:fa:0a:c7:11:34:
         21:fe:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 13:08:42 2024 by rpki-client on console-fra.rpki-client.org