Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/544478E4488C11EDAAE546C8F1222468.roa
File:                     544478E4488C11EDAAE546C8F1222468.roa (raw, json)
Hash identifier:          Bx4Ls9m0RuFghLqlx9zSW2P1FYvIPWw+H3togCFiALY=
Subject key identifier:   FA:DB:F2:A4:8C:93:E6:82:63:1E:60:47:16:0D:C9:EB:BB:5A:8D:77
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0838
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/544478E4488C11EDAAE546C8F1222468.roa
Signing time:             Mon 10 Oct 2022 11:11:47 +0000
ROA not before:           Mon 10 Oct 2022 11:11:42 +0000
ROA not after:            Thu 10 Oct 2024 11:11:42 +0000
asID:                     205431
IP address blocks:        102.129.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Dec 2022 09:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104 (0x838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 10 11:11:42 2022 GMT
            Not After : Oct 10 11:11:42 2024 GMT
        Subject: CN=6343fdf2-b6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:64:e2:7d:e3:78:07:6b:8d:2e:98:5f:85:
                    25:3e:46:34:7d:fe:e8:52:2e:c9:82:b2:fc:14:89:
                    14:93:d5:03:b1:4e:d1:0c:0d:27:75:f1:29:44:5d:
                    0e:7d:b3:7b:99:5b:20:81:a5:ba:62:de:87:6e:b0:
                    c6:8b:d7:0c:6d:81:6a:e1:8f:d2:fe:3a:40:68:64:
                    11:50:80:86:59:c3:c2:ec:6b:20:22:5e:08:c8:be:
                    eb:47:80:09:78:2c:3b:e0:97:46:2b:1c:02:87:f6:
                    32:32:05:5d:8f:45:0c:d4:7f:f8:83:3f:61:20:b4:
                    44:4f:33:85:cd:48:97:e9:68:9b:50:5f:0f:c5:18:
                    ca:ff:ec:e9:84:b9:8b:e7:cd:2c:84:f3:fa:21:c4:
                    66:d0:d4:b2:9a:0c:91:6e:c3:8d:69:2a:90:23:64:
                    42:6f:e6:c7:6b:d3:6e:25:6a:63:02:16:33:52:b4:
                    f5:64:67:dd:a1:e0:c0:fb:7b:fc:7a:15:de:74:2b:
                    22:c2:a2:36:ad:05:0a:15:e9:a9:f1:93:da:09:70:
                    f7:02:d6:00:d1:7d:0f:b3:cf:af:a3:29:1c:60:39:
                    a9:81:56:15:3c:ec:d8:e9:eb:7a:f7:e7:ed:e8:e0:
                    9d:56:81:36:6e:75:cd:6a:d5:bc:da:4c:1c:ec:67:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:F2:A4:8C:93:E6:82:63:1E:60:47:16:0D:C9:EB:BB:5A:8D:77
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/544478E4488C11EDAAE546C8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a3:18:12:fe:51:b2:4c:28:6c:67:6d:0f:5b:28:85:c2:28:
         d9:f8:47:7b:29:2e:4d:e1:87:c4:31:8f:a4:ec:24:f4:e0:d2:
         34:f2:5f:82:81:42:25:87:4b:74:f2:74:34:83:1c:6f:04:27:
         9b:dc:8e:4c:34:df:d6:09:9b:e8:c4:d7:83:87:12:30:46:ee:
         f3:fa:9b:e2:3d:04:56:b1:b0:b0:61:ba:24:4c:7b:57:ec:58:
         ec:8e:b7:b0:4a:a0:30:91:3a:77:08:f0:99:de:ff:f9:72:96:
         08:2c:e2:1b:d4:25:1c:16:2b:ec:3f:bb:9e:f8:7e:5e:7e:23:
         5b:4e:3c:59:ad:cd:df:24:0f:b9:d1:ee:ea:15:17:47:cb:46:
         83:3e:39:1e:a7:0c:54:1e:b6:cc:bd:8a:08:33:ed:c0:86:27:
         cd:0e:38:4f:28:37:97:5a:41:a1:01:74:3c:db:20:83:6e:50:
         e4:45:b6:7e:68:5b:37:c0:39:f5:61:cc:0d:ff:04:3c:ba:c7:
         f6:62:c0:a3:f6:8f:45:49:eb:26:ee:16:69:16:1b:8b:cd:38:
         50:2d:6b:57:1f:c6:d5:e7:c4:f4:88:47:d1:4d:70:c1:9c:a4:
         8b:23:a4:7c:84:1e:a7:b5:d3:02:ab:6a:5d:8e:e1:b0:ff:8a:
         1c:c9:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org