Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5050D3707D3611ED968E94C0F1222468.roa
File:                     5050D3707D3611ED968E94C0F1222468.roa (raw, json)
Hash identifier:          MYF9nH5i0Bw8o5PcgaoonSe5RAWc8UjKa0ZUUwwVbLM=
Subject key identifier:   2F:FA:50:D9:B3:3F:1C:38:F1:83:4C:49:AA:07:2C:D5:2B:D5:AE:5D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0966
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5050D3707D3611ED968E94C0F1222468.roa
Signing time:             Fri 16 Dec 2022 11:39:35 +0000
ROA not before:           Fri 16 Dec 2022 11:39:31 +0000
ROA not after:            Tue 17 Dec 2024 11:39:31 +0000
asID:                     207633
IP address blocks:        102.129.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Jan 2023 15:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 16 11:39:31 2022 GMT
            Not After : Dec 17 11:39:31 2024 GMT
        Subject: CN=639c58f7-551e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:47:da:9d:52:1b:b5:2a:83:21:c4:25:a0:1e:
                    00:c1:cc:33:fa:97:40:cb:43:96:1a:fc:79:a8:93:
                    cb:53:53:35:45:dc:dd:63:80:97:a1:d2:d8:83:28:
                    4d:26:c8:94:8a:d1:e2:1f:66:3a:57:2b:d9:c2:8a:
                    91:6b:11:94:31:03:f9:24:30:26:d4:5a:c2:50:74:
                    ab:ab:23:e8:25:be:68:a2:59:97:a0:b7:9d:b2:55:
                    55:69:25:65:ed:f7:9b:ec:d9:94:74:d5:aa:48:0b:
                    3a:d9:15:d7:fa:d5:69:12:43:3e:cf:1a:7a:f2:10:
                    d7:52:6f:32:10:94:6f:aa:e3:78:6f:cd:29:2e:34:
                    ee:20:ed:d3:80:e1:fe:d0:9d:ae:8a:d8:6f:61:e0:
                    93:fc:59:1a:0d:b4:61:a8:76:a4:58:34:8d:ba:66:
                    59:b0:10:05:8f:a1:55:ec:9f:81:b1:6e:93:7a:dd:
                    04:20:3c:c3:4b:9d:4f:7b:57:ff:c1:1a:2b:29:a4:
                    4f:d7:23:c2:d6:77:0d:88:b2:61:29:2e:a2:10:83:
                    42:2e:4b:84:7f:b7:c6:eb:e4:17:07:58:98:2d:bb:
                    7a:19:31:e5:11:f0:ec:6e:94:60:82:aa:77:e9:be:
                    c9:98:c0:04:d2:60:3d:ac:59:24:fb:a5:71:94:86:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FA:50:D9:B3:3F:1C:38:F1:83:4C:49:AA:07:2C:D5:2B:D5:AE:5D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5050D3707D3611ED968E94C0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:39:e7:6b:ba:29:1c:a0:e6:b2:1a:3c:a6:63:d0:95:cc:ec:
         ef:28:43:8f:58:38:fa:92:f8:a4:ad:75:f0:57:aa:35:dd:71:
         c2:cc:ac:26:d5:01:9b:e9:25:f7:a8:64:22:6c:8e:7e:02:ef:
         86:69:72:16:8d:25:25:bb:a6:8a:fe:3f:4b:df:7e:4d:9b:dd:
         e5:23:e0:3a:70:af:99:d1:7c:69:7d:9c:b7:bb:03:45:db:7f:
         8c:10:06:29:83:bf:de:8e:d4:fe:52:e1:8f:13:cd:73:cc:17:
         c6:0a:89:70:64:f9:2e:39:77:10:f0:dc:01:6a:8b:71:13:c3:
         c9:c7:ab:e6:a8:73:3e:73:e2:57:2d:d1:b4:81:3a:85:5b:79:
         5b:a4:28:ed:d1:46:c1:45:40:e4:73:a8:4b:5b:ed:28:69:9d:
         fc:d7:33:5c:7a:ca:72:6d:50:62:60:e2:7c:d6:6c:2d:10:ba:
         47:55:28:e3:87:0d:7b:ab:9f:60:69:2a:3b:c3:2c:a3:5a:e6:
         de:36:1f:80:04:08:b5:fb:95:bf:0f:64:c5:53:14:64:3b:d6:
         96:25:d0:a8:75:0e:5e:95:33:f4:bf:18:10:0c:db:58:6f:ac:
         d5:c6:3e:48:cb:c5:0d:7f:84:37:b6:41:6c:75:b5:c1:ec:24:
         b9:ec:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org