Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C362532C5E811EC86DD7686F1222468.roa
File:                     1C362532C5E811EC86DD7686F1222468.roa (raw, json)
Hash identifier:          51WECoGhkDDBvZAjums46vN3AyxT7cy6mwPUhZf8I1E=
Subject key identifier:   15:52:3E:87:02:53:1F:E6:27:F3:43:71:2D:AA:68:C3:DB:68:53:16
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       063B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C362532C5E811EC86DD7686F1222468.roa
Signing time:             Wed 27 Apr 2022 05:08:44 +0000
ROA not before:           Wed 27 Apr 2022 05:08:39 +0000
ROA not after:            Sat 27 Apr 2024 05:08:39 +0000
asID:                     64249
IP address blocks:        102.129.140.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Apr 27 05:08:39 2022 GMT
            Not After : Apr 27 05:08:39 2024 GMT
        Subject: CN=6268cfdc-253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:99:90:c3:44:29:19:ae:4a:81:21:57:79:25:
                    e7:7c:07:7d:19:ec:1f:5a:cf:64:09:3b:05:12:6d:
                    a0:f8:c7:e7:97:95:79:c6:0d:67:dc:0a:8e:9f:8a:
                    78:76:13:40:5f:aa:d7:b7:10:00:41:a9:bd:58:2d:
                    fb:ce:9b:7e:10:c5:6b:8a:17:6f:e1:59:e7:b5:9a:
                    45:fb:f1:f3:c7:40:71:76:d5:ff:5d:e2:79:be:2c:
                    bd:f0:15:a2:40:b1:c7:8c:7d:95:c6:7b:6c:c1:ca:
                    6d:0c:86:64:88:b7:a7:eb:3a:ed:fc:6b:09:fb:fe:
                    a6:0f:d3:04:17:ce:a7:7b:ef:6d:bd:0d:07:a6:07:
                    d1:56:66:98:db:7e:cd:b0:85:2f:45:22:38:6f:ab:
                    05:80:27:b3:d5:fd:ba:16:09:40:ce:98:62:f0:60:
                    4e:ca:3c:63:23:c9:e1:ef:ba:cf:f8:6d:07:be:92:
                    8e:99:3a:ad:f6:d3:4f:ee:44:96:ab:de:83:14:30:
                    c2:49:92:32:76:61:16:93:59:7a:f1:df:70:d1:49:
                    7e:7b:e9:de:c4:e3:aa:a5:73:fd:68:04:b0:5c:a1:
                    0d:d0:67:50:7e:fc:9d:d6:24:ae:9f:03:24:af:b8:
                    07:79:0b:6f:81:68:6b:cb:3e:eb:be:1b:42:fd:52:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:52:3E:87:02:53:1F:E6:27:F3:43:71:2D:AA:68:C3:DB:68:53:16
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C362532C5E811EC86DD7686F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:98:fa:3a:b6:98:f6:f9:df:eb:95:b0:b6:2f:6a:7e:ef:af:
         d4:60:5d:e8:da:43:8e:1f:49:18:c4:cd:63:b8:e4:24:2a:4d:
         f6:d9:de:1b:f0:49:0e:89:43:24:49:a1:d7:40:e6:74:f2:55:
         1d:97:87:c4:a8:de:26:a1:9f:55:2e:04:bf:3f:ea:5d:ac:84:
         09:37:fd:69:b1:25:b5:ec:92:e2:94:be:5d:3e:ae:80:ca:3a:
         20:25:b5:1c:50:04:97:ca:22:b0:dc:2e:e1:57:5c:f4:01:73:
         41:e2:e9:7e:64:64:9f:7b:33:a5:db:da:aa:4b:dd:91:bb:16:
         aa:c8:43:30:19:1f:78:af:97:4b:56:c3:78:bc:e5:20:73:c3:
         ee:8a:1b:7a:c0:ad:35:38:f7:16:69:68:b2:84:6a:d0:5c:28:
         ae:a3:c9:d1:1f:3d:70:b0:16:3f:b0:1a:18:6f:98:16:8e:0f:
         57:e0:15:1a:fb:fb:44:09:41:1c:bf:1e:a9:1a:42:d1:fb:38:
         7a:74:01:74:d2:9e:3e:f1:47:f5:f9:23:b5:c3:7a:46:eb:7c:
         b6:26:e9:15:7c:76:e7:32:6d:04:a9:55:62:83:19:45:c0:4c:
         1d:1b:be:db:94:06:ac:85:cb:44:f2:55:d8:4e:87:64:d5:cd:
         96:e9:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org