Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/081F64A02DEE11ED848A98BCF1222468.roa
File:                     081F64A02DEE11ED848A98BCF1222468.roa (raw, json)
Hash identifier:          Drecz0gyvhJlPFTPzS7F/E4S64zgxVn5WLoFsUeMKeQ=
Subject key identifier:   21:C9:D4:AB:DB:2C:69:DC:A0:EA:2D:1E:3A:6A:B0:17:26:08:AD:59
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       07E2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/081F64A02DEE11ED848A98BCF1222468.roa
Signing time:             Tue 06 Sep 2022 14:13:08 +0000
ROA not before:           Tue 06 Sep 2022 14:13:05 +0000
ROA not after:            Mon 09 Sep 2024 14:13:05 +0000
asID:                     8100
IP address blocks:        102.129.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  6 14:13:05 2022 GMT
            Not After : Sep  9 14:13:05 2024 GMT
        Subject: CN=63175574-25a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:da:c0:42:6c:e7:2a:fb:ea:87:f4:f2:6d:
                    56:ce:05:2c:ec:e2:ec:e1:1f:fe:38:b5:d6:d2:1b:
                    a6:94:0a:00:82:ed:2d:29:93:c8:e0:ca:5d:32:ba:
                    cc:c9:da:bd:9d:e3:f5:93:8d:0a:20:36:c7:cd:13:
                    10:f8:57:50:e7:b4:f6:3f:b6:5d:26:33:89:94:3a:
                    b6:6a:76:3d:6b:69:02:13:0c:11:ff:89:2d:f4:99:
                    d0:f9:82:d4:ca:30:68:c5:23:ec:e3:76:14:d1:04:
                    1c:a5:6a:16:1c:60:53:f5:ba:98:45:67:68:9d:a7:
                    91:2f:3a:59:75:64:a8:bb:e9:5c:6e:83:9d:42:8f:
                    89:ef:c5:07:85:ff:98:3a:a7:57:e4:be:3f:e8:b1:
                    11:70:24:64:d7:f2:98:19:dd:1f:07:c4:4a:e0:8e:
                    c1:21:8e:73:3d:33:e0:14:58:43:dd:bb:d9:ef:7c:
                    95:c3:f3:5c:fb:97:58:12:62:75:2f:38:d5:8f:b8:
                    50:28:00:0b:ef:02:9e:7f:06:52:e5:69:cd:9e:d5:
                    5d:ed:b6:3e:d2:33:fa:6b:65:8d:e1:40:cb:8c:60:
                    b8:dd:f6:b2:4f:11:35:64:d9:e8:9f:af:ce:e7:a9:
                    ac:e5:8a:ed:90:7b:1d:45:db:19:a5:7f:5d:0d:a9:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C9:D4:AB:DB:2C:69:DC:A0:EA:2D:1E:3A:6A:B0:17:26:08:AD:59
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/081F64A02DEE11ED848A98BCF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:96:70:8b:00:d6:da:45:25:12:10:6f:82:00:c9:b3:77:d6:
         e0:35:ec:55:37:f8:08:8c:5e:37:ee:8b:66:75:8f:d5:25:b6:
         ee:3a:b7:49:86:36:b2:80:43:8a:1a:3b:58:51:4c:49:58:7b:
         46:a6:9c:c7:9e:55:85:34:8a:cf:52:41:ad:6c:d4:3a:52:cb:
         91:17:11:61:c4:2f:8a:44:5d:d5:83:64:4a:06:40:21:9f:7b:
         0c:82:14:99:c4:6e:e5:56:a0:30:09:7f:58:53:26:a4:bd:b7:
         4b:fa:0c:55:0e:ec:39:31:96:2a:8b:81:30:11:10:a8:b8:ae:
         e6:4f:a3:59:0d:d5:c3:89:03:be:35:92:d1:32:2b:9b:dc:9f:
         8f:9a:e3:8a:f1:75:a1:9e:52:f9:8f:8e:7a:68:67:1b:d0:ef:
         f1:b0:75:2c:d4:b0:10:4d:b6:7a:cc:d5:ae:09:f7:6f:ce:71:
         c7:a1:5a:eb:d1:47:83:41:3b:7b:da:d7:77:f0:77:48:b8:99:
         0f:9d:84:ce:c7:bd:22:81:3b:26:4b:a5:e9:0c:80:23:4f:ff:
         00:c3:ef:12:91:1e:ca:3a:1d:27:06:ac:58:7e:f1:a0:c9:47:
         92:1a:1a:64:32:e5:9f:9a:c5:2a:9d:11:46:83:3c:22:21:7a:
         1d:0b:75:f1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA5MDYxNDEzMDVaFw0yNDA5MDkxNDEzMDVaMBgxFjAU
BgNVBAMMDTYzMTc1NTc0LTI1YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzF9rAQmznKvvqh/TybVbOBSzs4uzhH/44tdbSG6aUCgCC7S0pk8jgyl0y
uszJ2r2d4/WTjQogNsfNExD4V1DntPY/tl0mM4mUOrZqdj1raQITDBH/iS30mdD5
gtTKMGjFI+zjdhTRBBylahYcYFP1uphFZ2idp5EvOll1ZKi76Vxug51Cj4nvxQeF
/5g6p1fkvj/osRFwJGTX8pgZ3R8HxErgjsEhjnM9M+AUWEPdu9nvfJXD81z7l1gS
YnUvONWPuFAoAAvvAp5/BlLlac2e1V3ttj7SM/prZY3hQMuMYLjd9rJPETVk2eif
r87nqazliu2Qex1F2xmlf10NqcM3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIcnU
q9ssadyg6i0eOmqwFyYIrVkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzA4MUY2NEEwMkRFRTExRUQ4NDhBOThCQ0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcMwDQYJKoZIhvcNAQEL
BQADggEBAJaWcIsA1tpFJRIQb4IAybN31uA17FU3+AiMXjfui2Z1j9Ultu46t0mG
NrKAQ4oaO1hRTElYe0amnMeeVYU0is9SQa1s1DpSy5EXEWHEL4pEXdWDZEoGQCGf
ewyCFJnEbuVWoDAJf1hTJqS9t0v6DFUO7DkxliqLgTAREKi4ruZPo1kN1cOJA741
ktEyK5vcn4+a44rxdaGeUvmPjnpoZxvQ7/GwdSzUsBBNtnrM1a4J92/OccehWuvR
R4NBO3va13fwd0i4mQ+dhM7HvSKBOyZLpekMgCNP/wDD7xKRHso6HScGrFh+8aDJ
R5IaGmQy5Z+axSqdEUaDPCIheh0LdfE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org