Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1A1D0406E73E11ECA78A29FAF1222468.roa
File:                     1A1D0406E73E11ECA78A29FAF1222468.roa (raw, json)
Hash identifier:          3GvCtG97G0XVAcDSeVdQY7R9hOQyrSnI9W3C9Xw3Lu8=
Subject key identifier:   D0:B9:32:DB:42:83:88:64:5E:B9:3F:16:95:0E:83:71:9C:D7:50:79
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0685
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1A1D0406E73E11ECA78A29FAF1222468.roa
Signing time:             Wed 08 Jun 2022 15:17:26 +0000
ROA not before:           Wed 08 Jun 2022 15:17:20 +0000
ROA not after:            Sat 08 Jun 2024 15:17:20 +0000
asID:                     40676
IP address blocks:        102.129.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jun  8 15:17:20 2022 GMT
            Not After : Jun  8 15:17:20 2024 GMT
        Subject: CN=62a0bd85-9636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:a2:db:7f:55:ca:f7:2a:42:cd:fc:b6:fe:
                    53:0e:59:d0:e8:f3:fe:9e:9d:15:6a:1f:4c:c3:67:
                    d3:8f:74:b1:de:a1:e4:f7:9d:9b:ba:de:2f:00:80:
                    07:a2:fe:4d:d8:71:74:d6:f3:f7:bb:77:76:40:d7:
                    8f:49:18:31:42:c0:62:19:23:0e:dd:a0:fb:1f:95:
                    9c:be:ae:0a:63:06:d1:b6:6a:08:07:51:0f:d3:bf:
                    f9:70:2a:c2:28:68:30:98:ab:85:5d:0a:1c:45:c4:
                    f1:8c:b6:c3:3d:8c:87:e9:e8:eb:99:bf:fe:10:6f:
                    14:08:47:87:04:f4:9b:ab:a3:af:76:da:a4:4a:60:
                    09:ac:10:2c:25:0e:df:90:60:49:7f:f8:13:30:1a:
                    ad:44:ce:e1:b8:1b:63:02:2e:e4:96:d5:ac:ca:92:
                    66:d3:80:4d:8f:f1:7d:35:51:d2:3a:27:f6:76:41:
                    be:a6:7b:45:71:d8:94:40:14:c8:44:d4:af:ea:8a:
                    76:84:46:73:86:d6:d5:6b:64:4d:4e:8f:af:37:5f:
                    75:10:0c:30:74:01:f0:8d:0d:fa:58:5e:c7:ab:17:
                    b7:3d:ff:e1:21:39:ab:32:2e:fc:38:d8:b0:f5:3a:
                    90:b1:2f:4a:de:00:ea:b3:56:29:28:a0:a0:60:d6:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B9:32:DB:42:83:88:64:5E:B9:3F:16:95:0E:83:71:9C:D7:50:79
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1A1D0406E73E11ECA78A29FAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:27:09:9b:92:f2:1b:a0:1a:6c:ec:bf:88:af:62:49:aa:
         73:4a:e0:68:91:8e:c3:a8:15:1b:e0:ca:5b:11:d2:b3:76:50:
         29:03:9a:fa:3f:8e:2a:58:a9:40:ca:35:9c:8a:9b:6b:f2:c6:
         a1:a5:37:10:db:05:95:0a:26:63:0e:a1:48:cc:53:32:f3:bd:
         3e:f8:ef:05:15:4b:82:92:92:72:1f:d4:80:62:87:9e:26:72:
         cf:01:7d:db:7b:82:59:f6:af:05:d2:c2:93:9d:59:18:bf:40:
         b2:70:53:f1:d9:41:5f:aa:6e:2c:73:58:87:bb:4a:4c:aa:1e:
         bf:af:68:af:61:3d:1f:5b:05:72:5c:ad:84:0c:10:85:0a:a7:
         28:5e:64:c2:f5:6e:5e:99:07:ee:e0:ed:d3:8a:97:16:b9:7d:
         1f:d5:32:4c:df:20:63:0a:f9:25:1b:5b:fd:96:1c:63:ea:01:
         91:c0:dd:68:fa:9b:37:59:e7:4f:87:f9:08:ad:9c:98:22:62:
         90:35:2a:ed:51:59:25:73:04:b4:11:8c:c7:41:e3:5e:d6:c3:
         ae:1e:0f:22:ef:0b:5e:69:0f:14:3e:ca:44:00:27:f8:9f:26:
         6c:56:b6:77:72:db:02:7b:4d:b3:5d:b9:90:ee:af:fe:e1:ea:
         60:7e:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org