Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/196DF4381FF111EEA9E133764AD9E6FC.roa
File:                     196DF4381FF111EEA9E133764AD9E6FC.roa (raw, json)
Hash identifier:          XbuXj4yCst70VrgyiEWiVYi9zzBLXgrvraYxUmtqO3Y=
Subject key identifier:   F6:91:AB:23:C9:64:27:B7:37:00:EE:AD:25:91:32:31:4C:5F:F3:37
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0C69
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/196DF4381FF111EEA9E133764AD9E6FC.roa
Signing time:             Tue 11 Jul 2023 13:44:47 +0000
ROA not before:           Tue 11 Jul 2023 13:44:41 +0000
ROA not after:            Thu 11 Jul 2024 13:44:41 +0000
asID:                     834
IP address blocks:        102.165.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 19:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3177 (0xc69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul 11 13:44:41 2023 GMT
            Not After : Jul 11 13:44:41 2024 GMT
        Subject: CN=64ad5ccf-08b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ad:e9:0d:45:87:8f:ed:76:04:86:d3:e8:4e:
                    d1:3d:47:3d:3f:50:d8:82:93:4b:5f:10:28:1e:06:
                    2f:3f:d3:fb:a5:14:bf:d5:8a:cc:7c:e5:ca:30:80:
                    d4:d3:c4:a0:e0:40:d7:48:53:85:4e:3a:f3:01:66:
                    25:a6:87:df:07:fa:b1:43:ab:60:5e:60:08:2b:0d:
                    98:ca:b0:24:2a:ac:ef:1b:9c:7b:77:a6:a2:9c:9e:
                    ce:ae:3c:95:4e:dd:e3:09:99:c1:d4:58:f4:ab:dc:
                    9d:1e:18:56:a4:d6:69:3c:14:54:97:1f:dc:64:05:
                    09:28:be:0e:d0:5f:a1:0f:d4:37:04:7f:4c:fe:aa:
                    16:96:cb:a1:10:5f:ff:a4:34:d3:0a:f7:a7:d8:56:
                    a8:41:fa:23:b3:4c:1a:e6:b9:be:f1:e5:ad:c5:62:
                    50:c3:9f:aa:bd:ef:cf:ef:d4:e1:76:69:27:20:05:
                    3f:95:fd:c3:ef:50:e8:06:fb:0e:ed:eb:d5:9f:8f:
                    34:77:72:83:eb:ad:27:74:fe:8a:03:b9:93:ce:61:
                    41:87:cd:c1:c0:75:0d:23:65:98:af:51:74:e7:ea:
                    30:99:f0:5c:fc:60:dc:97:13:83:8b:fa:37:cc:da:
                    6b:ad:61:bf:f5:68:f8:c2:c4:8c:be:8b:34:8f:47:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:91:AB:23:C9:64:27:B7:37:00:EE:AD:25:91:32:31:4C:5F:F3:37
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/196DF4381FF111EEA9E133764AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:5d:58:90:7c:d8:99:91:de:2b:f0:e1:ae:a9:e1:28:b3:07:
         33:46:7f:9a:a1:e3:e9:86:d4:0a:7f:22:f8:fe:45:04:15:11:
         a0:d7:86:be:50:f0:fc:21:6f:48:36:8a:60:4f:f1:24:ef:d5:
         fc:be:e5:0c:86:ef:1b:18:cd:8b:bd:1a:12:be:e8:45:c8:c3:
         70:1d:f3:85:db:eb:9c:02:28:95:7a:b4:79:94:f4:33:ec:03:
         d8:6a:ec:3f:2b:ce:69:5b:6f:6a:d5:f2:78:62:f0:86:8c:40:
         36:1e:08:58:75:ae:ab:cd:29:0b:f2:b5:6e:d5:a7:c5:04:7c:
         ae:d5:e1:61:b2:fa:41:74:7d:65:f6:7a:9a:63:82:5a:0e:db:
         0e:bf:8b:e3:a5:4c:14:7c:85:dd:3a:9c:6d:f3:fb:78:6f:c6:
         1a:4c:fd:ba:de:12:52:a5:1f:28:44:e5:87:c1:99:53:90:d6:
         c7:97:93:f0:db:97:70:54:5d:bd:35:1d:41:f9:35:a7:7f:5d:
         46:9c:61:2e:19:5e:a1:d7:97:c2:8b:bd:6d:cb:25:7d:dc:8d:
         eb:dc:57:3b:9a:ab:5e:64:0b:4c:f5:2c:08:ac:7f:42:8b:ee:
         3e:6b:b2:69:0a:53:aa:39:c1:a5:f0:b7:bd:82:2e:de:15:78:
         83:b0:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org