Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13F91BCC547111EEB1C3607E4AD9E6FC.roa
File:                     13F91BCC547111EEB1C3607E4AD9E6FC.roa (raw, json)
Hash identifier:          WzRQPo2GoOvNShljtsNZOEfKixi4obaRx38VHox/lGk=
Subject key identifier:   D7:CD:88:7F:24:95:B0:78:E9:B6:9E:2E:D8:B8:17:11:12:76:EA:7E
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0D61
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13F91BCC547111EEB1C3607E4AD9E6FC.roa
Signing time:             Sat 16 Sep 2023 09:11:54 +0000
ROA not before:           Sat 16 Sep 2023 09:11:50 +0000
ROA not after:            Mon 16 Sep 2024 09:11:50 +0000
asID:                     7018
IP address blocks:        196.251.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 06:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep 16 09:11:50 2023 GMT
            Not After : Sep 16 09:11:50 2024 GMT
        Subject: CN=6505715a-8838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:ef:4c:79:c1:bc:b7:51:2f:de:4b:81:0d:
                    ef:1e:f7:a4:4a:82:d3:6e:aa:3b:22:d0:ab:c2:a0:
                    05:54:ac:49:78:af:b6:cc:0b:ef:3c:75:71:3e:1e:
                    60:40:8f:ed:95:46:da:23:a2:dc:21:69:46:60:b0:
                    85:8c:b3:8d:58:4d:7a:e5:46:f8:67:d0:b0:4f:e5:
                    25:5c:c8:6b:52:29:21:f1:d8:9b:41:da:c1:20:7c:
                    5a:0c:82:61:a2:6f:75:36:10:67:f1:78:7c:d2:98:
                    7f:34:6e:45:b6:dd:5d:f3:ed:00:71:0e:87:f8:c0:
                    d6:11:bd:23:e1:26:43:27:27:62:5e:f3:40:ac:e1:
                    78:79:36:5c:34:21:96:b4:11:13:8d:3f:6e:a2:b0:
                    57:07:16:9a:61:ab:79:2e:f8:e4:65:1e:f1:0c:3b:
                    09:4b:ad:3e:b3:27:f9:1c:64:83:d4:94:39:51:da:
                    c2:ea:d2:97:e1:00:0b:f5:da:2f:83:ec:cd:4b:90:
                    2b:0f:df:ca:f4:62:94:77:19:26:17:25:ed:1d:32:
                    48:47:32:57:21:69:50:63:bd:70:57:f5:28:63:68:
                    6f:49:11:03:93:39:bd:45:3f:92:57:90:12:e8:48:
                    f2:0d:a4:4a:47:7b:86:0d:4d:a0:c7:7d:5e:e4:32:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CD:88:7F:24:95:B0:78:E9:B6:9E:2E:D8:B8:17:11:12:76:EA:7E
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/13F91BCC547111EEB1C3607E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:76:60:c0:ff:8f:58:85:9a:8e:df:bd:c3:e8:3f:18:6b:f5:
         f3:e6:83:f1:66:4d:72:61:3c:bd:2b:c8:7e:fa:84:11:c5:ad:
         41:d7:66:cd:f1:50:b3:dd:a5:d6:84:ca:34:31:26:c5:36:58:
         e2:f5:f9:d3:1a:7e:c4:0d:47:5e:05:3f:7a:48:2f:5b:43:c1:
         d7:a0:a5:19:ab:63:59:89:a7:6d:e6:54:98:dd:a4:87:02:01:
         17:87:2e:a2:e7:df:b7:57:8d:6c:fe:0d:0c:cf:08:e9:e2:ec:
         37:ee:41:80:0b:f5:9a:13:2f:30:88:d0:4d:e0:50:60:7e:0b:
         bd:ee:b0:ad:97:74:cc:cf:49:fc:d7:8c:11:30:ae:be:3e:ad:
         60:d9:03:c9:61:f8:48:8f:6e:20:ec:12:3a:51:06:9f:ca:a1:
         f9:9a:95:0a:c0:e7:33:97:c4:af:9c:b0:22:3b:d1:ed:e1:0b:
         46:ee:50:3d:0e:41:d5:c4:f7:aa:ac:55:fd:8e:ee:ee:27:31:
         0d:6d:00:6f:1d:e6:75:c2:d8:16:13:2f:cb:6a:99:b0:a5:ad:
         88:bd:8b:af:6a:73:aa:ff:b4:38:0a:fe:87:e6:6e:30:15:0e:
         00:32:33:0d:a4:cb:62:14:06:55:17:07:c2:37:73:48:e5:18:
         ab:d0:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org