Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5074956A1E1011EDB24CB3B3F1222468.roa
File:                     5074956A1E1011EDB24CB3B3F1222468.roa (raw, json)
Hash identifier:          Gy6SUQKTTAaBB15K3hyJiNXDlab412mTuWouGd8SQI0=
Subject key identifier:   04:2E:42:DB:A3:15:DD:18:F0:DF:D9:0B:3E:63:37:9A:64:95:B2:04
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0785
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5074956A1E1011EDB24CB3B3F1222468.roa
Signing time:             Wed 17 Aug 2022 09:38:14 +0000
ROA not before:           Wed 24 Aug 2022 09:38:08 +0000
ROA not after:            Mon 19 Aug 2024 09:38:08 +0000
asID:                     25098
IP address blocks:        102.165.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Dec 2022 08:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Aug 24 09:38:08 2022 GMT
            Not After : Aug 19 09:38:08 2024 GMT
        Subject: CN=62fcb706-42f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:df:f5:eb:8e:c9:dd:87:2a:48:f6:e4:e8:17:
                    d7:20:fd:58:5d:0e:80:e5:d0:b7:8c:1f:41:d3:ad:
                    82:6c:16:c5:37:f0:89:a6:32:ad:a2:ec:63:08:ac:
                    62:3b:05:b9:d2:c7:14:6e:42:31:cb:72:15:07:cc:
                    ae:e6:01:54:85:82:a8:f7:5b:fc:af:18:b0:07:a6:
                    15:67:82:3f:95:84:3e:ab:3d:ed:ba:b9:5d:d8:ed:
                    f9:34:9a:e8:06:4b:7e:74:31:ef:cd:1c:e7:fc:06:
                    a1:43:9c:61:12:1c:8d:58:b7:3b:67:b3:0d:b8:0a:
                    28:84:ce:50:f9:3b:f8:d2:c6:0c:12:d7:36:f9:1a:
                    3d:68:0f:14:88:d4:e2:6d:db:65:24:2e:c0:05:8e:
                    61:86:6b:71:fa:5f:92:6d:4e:70:ea:b4:45:02:62:
                    e7:86:b7:ce:ec:c0:3e:74:0d:a4:ca:91:2a:ea:c7:
                    b4:88:4e:9e:3d:0d:5d:e2:76:36:2b:f6:08:9e:f4:
                    99:50:65:2e:61:6c:58:6c:52:79:49:1d:41:4b:19:
                    fc:60:ef:87:e3:6c:d3:19:19:c7:dd:d3:73:6e:62:
                    62:ae:46:d6:10:5b:51:37:9d:a4:a4:c7:76:b3:71:
                    f7:ad:68:32:58:5f:de:f0:80:a1:84:14:f8:98:17:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2E:42:DB:A3:15:DD:18:F0:DF:D9:0B:3E:63:37:9A:64:95:B2:04
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5074956A1E1011EDB24CB3B3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:f2:02:0d:e1:50:f8:09:ce:89:df:4d:67:ab:9d:07:36:
         f9:44:79:5e:fd:11:d7:f6:dd:47:d5:f8:f3:84:e5:61:43:2f:
         e3:4a:37:bb:fb:14:7c:2c:94:1b:44:87:e5:04:cb:85:bf:f0:
         9b:cc:2a:bb:d4:81:93:f2:df:71:26:f4:f1:8e:9b:86:c1:93:
         a9:36:2e:91:68:d1:05:17:1d:55:c5:fe:05:50:5a:04:78:1f:
         b2:f0:07:d6:4c:c0:c7:6d:c0:2e:cb:0f:c8:66:48:6e:2e:ee:
         0c:1c:4b:9e:ee:94:93:ee:45:29:b0:7b:26:15:14:16:aa:6d:
         be:c1:39:b3:87:9e:d0:ec:63:9c:a7:bc:12:bf:dd:14:79:d1:
         60:28:df:58:c1:a7:a7:b4:c4:fd:a2:8c:e9:15:12:30:9e:d7:
         a8:cc:c8:90:b4:fd:01:f9:10:95:09:33:00:f5:42:3d:dc:93:
         ae:cc:bd:c3:02:ba:ff:05:bb:ea:ab:4d:d3:47:27:e9:c4:7b:
         50:16:08:5b:d1:d5:d5:8c:5a:f7:84:fb:6a:ca:36:a3:22:7e:
         5f:d0:66:9f:2a:69:60:7f:58:11:17:74:7f:b2:ed:df:0f:98:
         70:f2:95:8b:2b:a2:a9:60:a5:2d:b1:d4:9f:b5:8d:3a:5e:0f:
         0b:1e:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org