Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/193FCAC2FB9411ECB5F0969DF1222468.roa
File:                     193FCAC2FB9411ECB5F0969DF1222468.roa (raw, json)
Hash identifier:          bgelCpmtdZwE7RU5+qq/Pe/LIpAzKWN0QwM5y7ytcUs=
Subject key identifier:   C0:43:E0:A6:CA:9C:2B:7C:03:0E:F7:0A:6D:D9:4F:99:1E:C1:AE:DF
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0709
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/193FCAC2FB9411ECB5F0969DF1222468.roa
Signing time:             Mon 04 Jul 2022 12:23:24 +0000
ROA not before:           Mon 04 Jul 2022 12:23:20 +0000
ROA not after:            Thu 04 Jul 2024 12:23:20 +0000
asID:                     40676
IP address blocks:        102.129.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Nov 2022 10:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul  4 12:23:20 2022 GMT
            Not After : Jul  4 12:23:20 2024 GMT
        Subject: CN=62c2dbbc-dc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:52:41:35:c0:95:45:4d:99:da:a5:25:69:ad:
                    04:22:22:e8:b2:6f:f1:d5:b8:33:48:c2:1c:8b:41:
                    5e:69:81:96:b7:f9:e4:89:00:d7:a7:e3:ea:db:69:
                    2f:71:ee:52:35:3a:a8:09:78:8f:fb:df:f7:44:0f:
                    e7:21:f4:55:31:80:a4:23:e8:22:44:dc:cb:11:27:
                    be:54:31:9f:5d:5b:26:4c:81:67:16:6c:1d:71:8b:
                    cf:1a:76:82:29:2c:c8:5d:7a:da:a3:2b:ed:28:bb:
                    c6:a9:0c:04:df:a8:61:13:bf:44:c9:3c:27:5d:6c:
                    0f:e6:b8:88:d2:03:80:74:b1:e3:91:b9:36:1b:a9:
                    97:91:b4:ec:77:8f:ee:85:23:03:40:a5:f7:74:c7:
                    c1:96:d7:cd:c8:41:a9:93:e7:c6:35:9a:0f:38:55:
                    02:45:a5:ed:47:70:2d:6c:29:e0:4e:09:6f:7b:15:
                    02:81:c3:a7:d8:2b:f7:11:3a:d5:a8:47:07:d9:61:
                    78:4a:b4:4a:59:4e:78:ec:ab:19:87:89:77:37:a9:
                    e3:58:ef:f0:f7:36:57:3d:cd:ba:ce:d3:7a:b2:03:
                    eb:af:91:bd:63:1c:29:0e:ae:38:58:dd:7c:a4:ce:
                    78:d8:70:d2:6e:72:06:9a:f5:16:cd:aa:64:09:51:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:E0:A6:CA:9C:2B:7C:03:0E:F7:0A:6D:D9:4F:99:1E:C1:AE:DF
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/193FCAC2FB9411ECB5F0969DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:a8:be:31:5f:c4:4f:2b:1f:4e:9b:07:2b:50:d6:4e:e1:
         bc:7e:34:27:e8:a6:7f:21:c5:49:f2:9c:e0:71:e2:a0:32:03:
         8c:33:7c:ca:5b:80:b1:34:0f:6c:81:c3:dc:04:b0:23:b3:c3:
         fa:f3:f5:b2:a1:47:68:4d:34:70:08:8c:e9:1d:72:e6:0e:5e:
         db:0f:9e:24:cc:4c:b2:98:e1:fe:c1:cb:ab:d4:06:4e:75:81:
         b1:8d:f7:f2:39:69:6e:90:cd:83:f0:31:43:b6:44:cf:d4:d9:
         54:57:0b:2b:88:21:1d:65:76:0f:01:88:10:00:55:c2:4e:ab:
         d6:0e:3e:58:87:0e:fa:90:e4:8a:67:64:ef:35:9d:5b:dc:94:
         ef:88:f5:b0:d3:c3:db:67:a6:c9:74:f6:6a:d8:5b:7a:81:df:
         bb:9c:4b:5f:55:6f:e0:86:6f:7b:d2:48:7d:5a:45:47:ba:a4:
         57:75:c5:53:70:bf:7f:84:35:67:e3:41:36:ed:1e:89:47:91:
         35:2e:c5:c7:b2:79:c8:a3:7e:86:50:74:2b:3e:64:82:ba:d2:
         a1:bc:5c:f9:6c:40:c3:ff:b7:0b:ce:b8:fa:50:fb:35:99:ea:
         30:95:e7:e6:85:a5:b8:0b:e7:d6:ef:4b:22:77:d1:eb:82:06:
         0c:b4:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org