Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C602EB4249111EE999524854AD9E6FC.roa
File:                     1C602EB4249111EE999524854AD9E6FC.roa (raw, json)
Hash identifier:          uQ1r+1ooO/yWw97yGWiDhOxhEsXMUjVtzGMSBArkILc=
Subject key identifier:   FE:F9:50:69:5D:47:9E:2D:14:2C:98:C8:DA:17:28:38:4C:2E:70:B6
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0C81
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C602EB4249111EE999524854AD9E6FC.roa
Signing time:             Mon 17 Jul 2023 11:00:16 +0000
ROA not before:           Mon 17 Jul 2023 11:00:11 +0000
ROA not after:            Wed 17 Jul 2024 11:00:11 +0000
asID:                     147186
IP address blocks:        102.129.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3201 (0xc81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jul 17 11:00:11 2023 GMT
            Not After : Jul 17 11:00:11 2024 GMT
        Subject: CN=64b51f40-91a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:38:ce:02:d4:72:01:77:6d:f1:7c:80:9e:
                    0e:5b:de:a9:84:f4:88:df:bc:d0:b2:ed:cb:31:6b:
                    26:23:db:b7:4c:2e:0c:08:1c:2f:f2:b1:8a:e1:2f:
                    df:9e:d1:f8:40:33:60:e1:30:e8:12:59:73:3d:3d:
                    6f:6b:d4:b4:e2:a7:d0:2e:a4:94:af:f9:bc:ee:0f:
                    2f:d2:69:78:0a:9a:99:2d:e8:e7:e3:5d:1b:d4:85:
                    3f:80:8d:4f:88:19:a7:7b:14:39:6a:e3:71:6f:50:
                    70:1c:29:f1:b3:25:05:25:19:27:54:16:c2:cd:b4:
                    0d:81:90:53:d5:bb:55:39:62:5d:57:31:b4:86:9c:
                    d4:06:45:03:b8:b9:bb:88:55:16:ec:4c:82:e4:9e:
                    81:62:8c:30:13:ff:59:5b:ac:6d:31:81:03:2f:73:
                    95:dc:e1:ec:42:53:f3:b4:92:f7:68:1f:66:b9:85:
                    c5:f7:fb:24:3f:59:e7:83:37:96:5b:3d:95:66:a4:
                    14:79:23:c4:b9:e2:f4:70:50:75:fa:4a:ea:3a:e1:
                    e0:f1:47:6b:12:19:e8:b8:a4:82:17:f2:b1:1d:aa:
                    96:6c:92:48:59:7b:51:f2:2f:fa:8a:5d:c4:72:6e:
                    df:07:70:8a:3e:3e:5c:30:e2:fe:b2:7e:fa:bc:ed:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:50:69:5D:47:9E:2D:14:2C:98:C8:DA:17:28:38:4C:2E:70:B6
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C602EB4249111EE999524854AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:d8:d2:c0:ca:29:cc:b3:03:ef:1c:38:7e:7a:76:3e:7b:e9:
         ef:55:ce:7d:c0:e6:c6:1b:55:d0:90:c0:ff:76:75:66:da:18:
         43:46:27:77:8f:e2:12:e1:6a:6f:90:46:6a:a8:1b:2f:70:01:
         33:1c:dd:1a:7a:d6:76:dc:a0:c9:e2:b1:f9:a7:24:ca:58:c3:
         8f:eb:ad:44:cf:e2:16:d7:7a:ba:8d:15:0d:1e:91:70:a2:7a:
         24:5a:10:51:9e:3e:50:c6:9b:7d:cb:ff:57:f9:50:88:72:ea:
         59:fe:aa:46:86:28:0c:d9:92:00:3c:a4:bf:8a:f4:4c:53:d3:
         59:1b:31:72:71:db:39:4d:7e:1e:a4:22:43:13:0b:67:b5:fa:
         a5:7b:46:21:2d:c5:19:ce:70:31:52:a3:30:7e:98:5c:01:e0:
         2c:33:7b:b7:d6:29:88:e6:09:73:0c:64:e6:39:23:07:dc:93:
         1b:4e:d3:ac:98:d3:09:5a:ad:cf:67:ce:c6:32:c3:13:27:ad:
         b3:a2:d5:fb:0d:0e:8d:63:4d:52:b2:2e:c5:be:20:a3:39:a8:
         79:10:48:e5:a8:22:fe:d2:9f:72:85:1c:a5:c7:cf:74:50:32:
         65:67:45:82:e8:c5:b2:51:55:b1:6d:43:1f:c4:fe:ca:e8:1f:
         3e:36:d7:9e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzA3MTcxMTAwMTFaFw0yNDA3MTcxMTAwMTFaMBgxFjAU
BgNVBAMTDTY0YjUxZjQwLTkxYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkYDjOAtRyAXdt8XyAng5b3qmE9IjfvNCy7csxayYj27dMLgwIHC/ysYrh
L9+e0fhAM2DhMOgSWXM9PW9r1LTip9AupJSv+bzuDy/SaXgKmpkt6OfjXRvUhT+A
jU+IGad7FDlq43FvUHAcKfGzJQUlGSdUFsLNtA2BkFPVu1U5Yl1XMbSGnNQGRQO4
ubuIVRbsTILknoFijDAT/1lbrG0xgQMvc5Xc4exCU/O0kvdoH2a5hcX3+yQ/WeeD
N5ZbPZVmpBR5I8S54vRwUHX6Suo64eDxR2sSGei4pIIX8rEdqpZskkhZe1HyL/qK
XcRybt8HcIo+Plww4v6yfvq87aCFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/vlQ
aV1Hni0ULJjI2hcoOEwucLYwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzFDNjAyRUI0MjQ5MTExRUU5OTk1MjQ4NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgacwDQYJKoZIhvcNAQEL
BQADggEBAJTY0sDKKcyzA+8cOH56dj576e9Vzn3A5sYbVdCQwP92dWbaGENGJ3eP
4hLham+QRmqoGy9wATMc3Rp61nbcoMnisfmnJMpYw4/rrUTP4hbXerqNFQ0ekXCi
eiRaEFGePlDGm33L/1f5UIhy6ln+qkaGKAzZkgA8pL+K9ExT01kbMXJx2zlNfh6k
IkMTC2e1+qV7RiEtxRnOcDFSozB+mFwB4Cwze7fWKYjmCXMMZOY5IwfckxtO06yY
0wlarc9nzsYywxMnrbOi1fsNDo1jTVKyLsW+IKM5qHkQSOWoIv7Sn3KFHKXHz3RQ
MmVnRYLoxbJRVbFtQx/E/sroHz42154=
-----END CERTIFICATE-----
Generated at Mon Aug 7 13:25:39 2023 by rpki-client on console-ams.rpki-client.org