Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/231C637067F911EEB208E0374AD9E6FC.roa
File:                     231C637067F911EEB208E0374AD9E6FC.roa (raw, json)
Hash identifier:          MtswNq5SxbadZL9+Hns9+CHOD3c0cQ3yQo9oDBjUqcc=
Subject key identifier:   F5:55:24:A3:CC:E0:0E:56:E6:11:F9:44:20:B9:DE:76:49:4C:12:05
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0DC4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/231C637067F911EEB208E0374AD9E6FC.roa
Signing time:             Wed 11 Oct 2023 05:43:43 +0000
ROA not before:           Wed 11 Oct 2023 05:43:40 +0000
ROA not after:            Wed 23 Oct 2024 05:43:40 +0000
asID:                     834
IP address blocks:        102.129.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3524 (0xdc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 11 05:43:40 2023 GMT
            Not After : Oct 23 05:43:40 2024 GMT
        Subject: CN=6526360f-35ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:23:fb:15:a9:aa:61:fd:5b:d8:18:c0:ac:
                    e8:a0:3c:2e:59:6d:3d:03:a5:03:57:3e:8a:89:98:
                    ec:bc:af:89:0f:ff:0e:66:eb:5d:17:d4:1c:4f:9f:
                    e8:54:11:3e:cb:cb:75:db:89:31:8a:80:73:fe:58:
                    b4:23:5c:48:8c:b0:58:4b:f2:3d:80:b9:8f:3d:41:
                    cb:f4:b1:5a:09:97:68:ad:2a:7a:27:2e:8f:a6:c9:
                    26:a0:4c:80:f6:68:be:8b:3d:3e:9e:ed:e5:8b:9a:
                    e0:fe:4b:3b:99:72:23:9d:c8:77:3a:69:7f:f8:4a:
                    17:2a:83:77:9a:5b:5a:bd:b1:62:52:af:4b:91:20:
                    85:69:81:91:c1:c2:0d:ad:59:44:f9:e4:53:5e:44:
                    06:fa:d7:df:49:15:8e:03:3d:5b:cc:dd:ae:2b:c9:
                    4d:19:e4:35:c8:9d:37:dc:a8:fe:9a:5c:43:e5:b5:
                    eb:cf:26:21:2a:de:7e:9b:25:f1:4d:72:f2:24:92:
                    52:f1:81:9b:44:6a:b7:ed:9a:24:91:a8:ee:d4:b2:
                    a5:8d:9a:c4:1b:75:44:85:9e:64:f3:98:3b:4f:85:
                    51:ba:6b:10:3e:d9:5e:b5:14:ef:fe:0d:0f:12:90:
                    49:90:4b:f0:45:00:cb:e7:ff:fe:2b:35:01:34:4f:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:24:A3:CC:E0:0E:56:E6:11:F9:44:20:B9:DE:76:49:4C:12:05
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/231C637067F911EEB208E0374AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:56:69:8e:ef:51:5b:47:ca:1c:73:66:55:61:45:50:ac:
         b9:8d:b7:3a:bb:7b:8a:01:74:7d:fb:95:bb:de:8b:76:47:03:
         f4:6b:f3:dc:a1:fd:93:c4:dd:5d:95:53:4f:a0:96:db:85:9c:
         9e:08:c6:f4:f9:a7:f2:36:53:55:2a:d5:66:4a:1e:13:f9:25:
         51:92:7c:b5:20:44:00:d5:ba:5b:27:b0:eb:4d:99:73:dd:36:
         c9:95:42:57:63:ec:95:d6:a5:c9:a4:39:13:6f:5b:a0:c5:95:
         d8:09:30:1d:68:fa:d2:ca:c6:92:c9:f1:7b:29:d3:f5:32:d1:
         47:d9:50:40:cd:64:3b:6b:22:9f:5c:61:7a:2f:3d:34:4a:6b:
         93:6b:45:f5:18:9e:b2:ab:9d:91:5b:5b:b2:25:3a:3c:96:cd:
         13:52:3b:13:ee:b6:a7:a4:6b:f7:ce:08:0f:1b:f0:ed:ea:f4:
         53:bc:d4:37:0d:41:80:ba:f1:a2:1c:3b:1d:b0:87:99:8b:19:
         9c:bd:33:71:e3:5a:41:2f:ac:97:ad:ab:da:5e:02:39:c9:2d:
         5b:e4:7d:dc:aa:62:0f:59:71:61:0b:e1:86:46:f4:bb:da:d8:
         b1:ae:73:19:49:87:36:9c:2a:98:90:8e:e7:d8:56:55:cb:98:
         9e:53:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 07:00:02 2023 by rpki-client on console-fra.rpki-client.org