Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4346CF7E48AA11EDB48C9395F1222468.roa
File:                     4346CF7E48AA11EDB48C9395F1222468.roa (raw, json)
Hash identifier:          3V5VAjtUjssJpJ1LUEHfsiR0HRrxc9LT4jV1yp7PiNg=
Subject key identifier:   E8:BA:F7:06:EB:92:D5:7E:CB:9C:8C:B4:04:8E:7C:3E:FC:26:39:04
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       083D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4346CF7E48AA11EDB48C9395F1222468.roa
Signing time:             Mon 10 Oct 2022 14:46:03 +0000
ROA not before:           Mon 10 Oct 2022 14:45:59 +0000
ROA not after:            Fri 11 Oct 2024 14:45:59 +0000
asID:                     60721
IP address blocks:        102.129.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 Feb 2023 07:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 10 14:45:59 2022 GMT
            Not After : Oct 11 14:45:59 2024 GMT
        Subject: CN=6344302b-aae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:06:32:29:51:7b:99:1a:da:74:5d:fb:f1:
                    a7:a3:d3:a9:bf:a6:14:a7:21:10:e8:dd:71:ce:a6:
                    1a:5d:06:bc:a7:73:db:26:92:7d:8e:2e:cd:e3:c3:
                    eb:ec:6c:83:e5:91:dc:a4:e0:ee:22:c3:5a:5d:01:
                    9a:a8:b4:15:58:9f:07:de:ae:db:59:93:47:0f:e4:
                    df:58:50:ec:1b:7a:1f:86:88:02:43:05:91:d1:a3:
                    53:29:fc:b1:bc:14:54:25:45:c7:a6:af:28:97:d4:
                    6b:3b:56:a5:97:81:ba:2a:07:e0:ec:3d:87:f7:50:
                    e6:d8:40:b8:78:54:15:ad:14:72:69:24:25:2f:3b:
                    a5:8c:2b:3a:a3:8d:19:5e:18:46:32:51:72:91:90:
                    f6:f7:bd:a7:c7:4b:29:ba:43:78:22:f8:26:ec:3e:
                    9d:18:79:c3:35:31:0b:a4:e3:78:6a:cb:02:38:4a:
                    f4:ee:56:f7:29:48:89:6a:c3:1e:45:6a:49:a9:f4:
                    5a:2d:d6:ef:68:ba:00:66:5b:dd:f7:eb:01:2e:dd:
                    d3:1e:18:a4:53:eb:46:15:92:0b:8c:c6:7e:36:1f:
                    0a:83:b1:3b:9b:10:a2:e3:56:55:fa:12:dd:71:58:
                    e8:d6:26:a7:4d:c6:ac:d1:53:d0:c9:be:1e:d2:f9:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BA:F7:06:EB:92:D5:7E:CB:9C:8C:B4:04:8E:7C:3E:FC:26:39:04
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4346CF7E48AA11EDB48C9395F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:d5:77:e8:37:01:aa:c1:b6:a5:b1:cb:25:a3:2b:82:a8:75:
         c3:91:e3:75:82:42:d3:8a:5b:d0:56:eb:2a:71:8b:82:cd:6c:
         a1:20:16:19:ab:43:0c:d6:6a:84:a1:10:9d:a1:18:4f:63:ed:
         8a:b2:e8:c1:3f:8a:44:ab:77:e9:82:e2:48:77:b8:67:4f:a5:
         a3:2f:9d:1b:61:54:7b:6a:b7:d6:75:5f:aa:97:41:3a:87:54:
         13:d7:90:ef:32:97:ba:cc:cf:a0:5b:e5:2b:66:01:70:fa:45:
         5a:ab:65:3e:e3:86:df:68:0e:45:1a:1a:c6:7b:ff:1d:f0:ce:
         a2:ac:01:93:09:9a:cc:c2:96:bb:1d:cf:1e:e0:2a:1c:b5:b1:
         97:6d:0b:f5:fd:42:ca:71:16:ff:6e:2e:29:01:0b:b4:e3:0e:
         37:65:0b:14:a6:f0:1d:c0:1e:11:0d:6b:a7:a4:a6:c3:f2:08:
         3c:33:35:22:c9:87:78:ca:d8:16:3e:97:17:7c:c4:bf:74:02:
         39:de:d2:1e:1a:8b:c5:d3:91:af:24:b9:6c:fe:c5:75:cc:3c:
         86:d0:91:6a:65:b0:16:eb:83:ab:1c:9b:86:23:b8:66:69:71:
         29:63:80:1e:74:d7:ad:fb:a9:93:7b:c1:6a:78:10:f9:76:f9:
         1c:6c:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org