Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FC6AF48E56711ED866DC90B4AD9E6FC.roa
File:                     0FC6AF48E56711ED866DC90B4AD9E6FC.roa (raw, json)
Hash identifier:          eFrv5fWbVOOlmZw1vBdemjbgqogBqtLKeoJaecUXYMk=
Subject key identifier:   80:CE:01:0D:19:19:8C:89:97:94:1C:D1:DE:9F:9A:BA:63:40:86:03
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0B3F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FC6AF48E56711ED866DC90B4AD9E6FC.roa
Signing time:             Fri 28 Apr 2023 01:50:33 +0000
ROA not before:           Fri 28 Apr 2023 01:50:27 +0000
ROA not after:            Mon 29 Apr 2024 01:50:27 +0000
asID:                     61138
IP address blocks:        102.129.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Apr 28 01:50:27 2023 GMT
            Not After : Apr 29 01:50:27 2024 GMT
        Subject: CN=644b2669-ae6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:8e:b9:44:b3:bb:b0:f7:03:3a:f5:ee:5f:
                    02:75:bb:7f:58:62:c2:33:a1:cb:61:ce:7b:23:23:
                    c3:b0:d4:4e:31:3d:1f:d1:4e:a6:7a:d2:f8:c2:8f:
                    c8:a3:97:8f:56:71:83:67:27:0b:1e:16:d5:d3:fd:
                    30:07:19:5f:9e:a6:86:2e:be:3e:97:94:e3:fd:f9:
                    6c:bd:10:2c:19:c3:b6:fb:d2:c7:d0:47:e6:5a:ba:
                    22:03:74:06:2c:f8:b1:45:38:25:f1:38:79:4f:e1:
                    46:74:e5:e4:f2:a4:02:c3:a8:18:35:c3:14:d9:e6:
                    f1:ae:ae:ad:41:1f:42:37:a5:fa:83:1c:e6:c2:0b:
                    77:3b:54:10:33:4c:4c:8b:82:a6:6e:af:f8:aa:fa:
                    d8:a9:64:e2:bb:ea:93:04:46:f1:37:b5:27:99:cc:
                    ec:61:a4:55:81:fd:6b:e2:1a:bf:f2:d7:9e:a2:16:
                    7a:ad:7a:49:2b:55:68:b3:0c:39:de:7b:b6:0e:3e:
                    cf:9d:72:df:ac:cd:06:12:f3:3d:4f:b0:cc:05:a6:
                    56:f1:78:43:2d:87:95:58:f8:95:35:1f:f3:28:41:
                    bb:70:93:d3:1e:87:5b:c8:41:a2:e0:f7:80:3f:52:
                    be:bc:ad:49:1f:d1:9e:8f:31:af:0f:99:0c:28:aa:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:01:0D:19:19:8C:89:97:94:1C:D1:DE:9F:9A:BA:63:40:86:03
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FC6AF48E56711ED866DC90B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:f5:77:78:5d:aa:de:7e:d5:bf:83:7e:0d:56:47:3f:1e:98:
         78:20:07:b7:4a:46:46:c9:06:b1:cb:6b:04:cf:e5:f6:73:c9:
         76:f0:8c:22:60:3a:66:5c:bd:15:9c:51:fb:54:f9:8f:b5:43:
         71:cf:e9:40:1c:15:20:e7:99:91:d1:fb:33:3e:8f:f0:54:83:
         01:15:59:6f:23:84:11:15:56:46:ec:59:01:04:70:77:aa:51:
         91:bd:3c:e4:70:78:7e:56:76:22:69:ce:55:5d:27:e2:dd:98:
         81:9d:2f:9e:9f:1d:ed:1f:d3:06:b8:64:1b:f9:3d:a7:e0:38:
         df:a7:4f:b4:a6:5f:17:a3:b1:69:62:81:26:de:dd:75:dd:ca:
         98:ec:6d:a9:9f:7b:4f:30:a2:ad:2f:fb:4f:c3:b5:5b:52:15:
         81:e3:a2:2f:59:06:f4:8b:53:04:11:ce:b2:47:6a:6a:51:0e:
         49:0f:3a:03:57:01:84:82:5f:ac:54:55:3f:a7:b6:6d:19:39:
         ac:47:a6:b0:e3:a1:a8:12:73:61:a7:59:20:19:f0:6a:b9:5b:
         17:30:22:ef:22:2e:15:60:d4:6c:33:db:85:71:59:d8:c3:d1:
         d7:04:0a:f6:75:12:ee:0b:0d:25:a4:cc:2e:f5:63:4d:04:8a:
         ad:92:43:60
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA0MjgwMTUwMjdaFw0yNDA0MjkwMTUwMjdaMBgxFjAU
BgNVBAMTDTY0NGIyNjY5LWFlNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuNI65RLO7sPcDOvXuXwJ1u39YYsIzocthznsjI8Ow1E4xPR/RTqZ60vjC
j8ijl49WcYNnJwseFtXT/TAHGV+epoYuvj6XlOP9+Wy9ECwZw7b70sfQR+ZauiID
dAYs+LFFOCXxOHlP4UZ05eTypALDqBg1wxTZ5vGurq1BH0I3pfqDHObCC3c7VBAz
TEyLgqZur/iq+tipZOK76pMERvE3tSeZzOxhpFWB/WviGr/y156iFnqtekkrVWiz
DDnee7YOPs+dct+szQYS8z1PsMwFplbxeEMth5VY+JU1H/MoQbtwk9Meh1vIQaLg
94A/Ur68rUkf0Z6PMa8PmQwoqlSNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgM4B
DRkZjImXlBzR3p+aumNAhgMwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzBGQzZBRjQ4RTU2NzExRUQ4NjZEQzkwQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbQwDQYJKoZIhvcNAQEL
BQADggEBAMj1d3hdqt5+1b+Dfg1WRz8emHggB7dKRkbJBrHLawTP5fZzyXbwjCJg
OmZcvRWcUftU+Y+1Q3HP6UAcFSDnmZHR+zM+j/BUgwEVWW8jhBEVVkbsWQEEcHeq
UZG9PORweH5WdiJpzlVdJ+LdmIGdL56fHe0f0wa4ZBv5PafgON+nT7SmXxejsWli
gSbe3XXdypjsbamfe08woq0v+0/DtVtSFYHjoi9ZBvSLUwQRzrJHampRDkkPOgNX
AYSCX6xUVT+ntm0ZOaxHprDjoagSc2GnWSAZ8Gq5WxcwIu8iLhVg1Gwz24VxWdjD
0dcECvZ1Eu4LDSWkzC71Y00Eiq2SQ2A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org