Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF717C82ACF11EDB52A1CE6F1222468.roa
File:                     2BF717C82ACF11EDB52A1CE6F1222468.roa (raw, json)
Hash identifier:          qPAF84omjUs5eAOSmOJUJKC2WJaTAwhJimVY95YBbo0=
Subject key identifier:   84:13:35:35:A2:04:2C:89:76:20:8A:07:E5:A3:BE:64:9B:91:BB:3F
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       07D6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF717C82ACF11EDB52A1CE6F1222468.roa
Signing time:             Fri 02 Sep 2022 14:54:40 +0000
ROA not before:           Fri 02 Sep 2022 14:54:35 +0000
ROA not after:            Thu 05 Sep 2024 14:54:35 +0000
asID:                     140947
IP address blocks:        102.129.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Sep  2 14:54:35 2022 GMT
            Not After : Sep  5 14:54:35 2024 GMT
        Subject: CN=63121930-f4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:a0:ad:6f:09:70:ba:7b:ed:09:b5:bc:8c:
                    22:19:8f:74:4d:2d:11:2e:e9:23:8c:ef:d7:7d:54:
                    c0:74:5a:8a:89:4c:57:f2:74:a9:e2:a5:62:ce:ae:
                    ea:56:a9:26:b0:97:76:5a:12:ff:fc:85:3b:0b:00:
                    84:31:b0:5c:6b:55:7f:9a:10:c3:26:85:a6:02:06:
                    b4:eb:98:f0:0a:1d:a8:59:62:c5:86:7b:eb:b8:85:
                    0d:77:77:7d:c4:36:cf:d1:02:f3:2b:18:88:ea:8f:
                    6c:12:91:d4:1c:b7:2d:7e:05:62:ce:42:f6:9b:cd:
                    b7:e7:28:70:9b:87:2b:8b:50:05:97:c9:f9:86:4f:
                    73:12:d9:21:04:44:ef:c5:88:d8:a0:1b:3d:0b:e8:
                    d9:56:8b:55:5b:98:0c:3e:37:bc:fd:48:7b:0f:1c:
                    d6:8b:ab:02:5d:54:c6:37:7d:76:2c:23:45:74:d1:
                    52:24:bb:f2:18:da:13:ef:10:5f:36:4f:48:a4:02:
                    85:f9:41:c9:0b:5c:cd:9c:4d:29:bc:83:c8:bc:46:
                    5a:79:d1:97:a0:ac:4d:28:67:85:df:94:2a:f0:72:
                    1f:57:0c:bf:f4:34:2f:ea:c1:2b:44:4d:dc:96:4c:
                    31:24:99:32:d8:d5:0c:48:89:2e:71:b6:26:16:84:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:13:35:35:A2:04:2C:89:76:20:8A:07:E5:A3:BE:64:9B:91:BB:3F
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2BF717C82ACF11EDB52A1CE6F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:07:65:d3:a7:94:9b:88:38:95:f5:cb:72:35:be:79:b9:
         c7:6c:50:bd:ef:1e:8a:9e:3e:31:cc:22:08:7e:2b:5c:af:48:
         3c:39:97:96:fe:19:66:3a:b6:54:c3:81:fe:99:b1:ad:08:e9:
         4b:4d:c4:89:15:41:46:75:ac:89:0f:cd:c2:7d:f0:ab:45:c2:
         49:1d:e8:9e:77:37:05:8f:cb:0f:bb:75:42:35:1a:59:84:32:
         22:43:d1:47:92:66:bb:2f:ac:50:62:6d:0b:e8:02:40:4f:8f:
         7f:a5:59:44:0e:55:86:e0:07:f0:3b:a0:31:c3:ca:82:38:8d:
         e9:49:66:8e:3d:49:53:43:67:8d:f0:1a:10:25:1e:71:64:a5:
         ff:84:d7:e5:c0:69:63:27:9e:bf:c8:9a:65:4c:92:5c:37:01:
         09:7a:ad:38:5f:62:d4:7c:79:c4:0a:11:0a:99:71:4e:4b:11:
         86:70:d9:f3:ba:f6:98:63:4b:50:3b:60:53:78:d0:5b:f7:f9:
         c1:10:40:f8:28:59:f3:4e:15:d4:96:50:a4:66:28:b3:09:6d:
         e5:32:7d:2b:59:d2:00:42:e1:a6:53:45:14:bb:3c:56:0b:9f:
         dd:d6:21:6e:4f:65:73:31:55:ae:5b:35:b5:68:c5:b8:81:7d:
         57:71:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org