Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6E716F947FBC11EDAA079DAEF1222468.roa
File:                     6E716F947FBC11EDAA079DAEF1222468.roa (raw, json)
Hash identifier:          HATtEDfTsx3t08xYizmOehwFtfbmb1w6nUgVnb6dQRI=
Subject key identifier:   2A:7A:4D:7D:7B:2F:B7:41:5F:CE:5E:22:A5:C8:E6:1E:3A:D4:B0:13
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0974
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6E716F947FBC11EDAA079DAEF1222468.roa
Signing time:             Mon 19 Dec 2022 16:44:40 +0000
ROA not before:           Mon 19 Dec 2022 16:44:36 +0000
ROA not after:            Tue 19 Dec 2023 16:44:36 +0000
asID:                     7018
IP address blocks:        102.129.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 19 16:44:36 2022 GMT
            Not After : Dec 19 16:44:36 2023 GMT
        Subject: CN=63a094f8-234a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:d8:e7:f0:b7:76:29:fb:4c:64:2f:bb:b4:
                    ca:17:cb:74:9e:35:26:c5:b9:8c:45:e2:fa:55:61:
                    16:da:4a:ea:9b:b2:81:f9:7f:b9:75:a8:94:c1:b8:
                    80:32:eb:32:8a:df:65:90:bb:33:fc:6c:03:73:03:
                    76:bc:52:65:0c:8c:6c:92:94:de:4e:5a:1f:fa:db:
                    1e:ce:87:b2:0f:cf:39:f1:18:c4:d8:22:28:ed:d2:
                    db:79:15:98:63:c4:8a:0d:a2:9c:4a:92:48:90:a3:
                    6e:67:2a:63:af:1d:4a:b2:16:93:85:3b:3d:08:f3:
                    e4:1a:b4:2e:06:86:71:03:c8:db:43:43:45:74:49:
                    f7:a1:cc:eb:5c:96:ad:6e:30:46:4a:f6:f5:34:a0:
                    1d:d5:54:0b:6e:85:75:0d:68:6c:f0:70:1e:a9:02:
                    18:05:c1:17:2b:cf:62:a2:57:83:e9:1c:b0:7a:42:
                    02:a2:6f:75:b1:03:b7:27:77:92:eb:56:1d:43:04:
                    5c:0a:e5:78:25:75:4a:23:ad:cf:c5:c5:da:3c:bc:
                    7b:52:ef:02:7e:d7:d6:e4:f6:c3:2b:fb:9c:49:60:
                    bc:3e:e6:af:cf:98:d2:88:3c:04:b3:e7:ec:aa:a8:
                    44:f8:c4:ff:95:91:72:9e:04:e2:4d:ae:8a:4f:77:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7A:4D:7D:7B:2F:B7:41:5F:CE:5E:22:A5:C8:E6:1E:3A:D4:B0:13
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6E716F947FBC11EDAA079DAEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:4f:aa:ec:92:b1:6f:aa:83:00:d3:1b:5b:15:b5:d7:73:64:
         72:3d:f4:57:0d:b0:df:fb:42:71:59:80:cf:5a:17:6c:0e:94:
         87:79:ea:2a:da:c5:d4:6f:c8:85:12:96:ea:9a:98:d4:cf:27:
         fb:ce:19:71:d0:3d:e1:b7:8a:32:c3:82:68:76:98:92:5e:3a:
         22:32:80:e6:05:76:ee:20:c0:f4:55:b2:9f:f4:30:53:d8:3b:
         12:22:e4:e4:66:e3:81:5d:aa:8c:e9:3b:45:a2:18:6d:24:9c:
         9a:62:25:5d:eb:72:a7:c4:bd:58:f0:28:bb:a0:30:9b:a9:15:
         d1:de:ce:35:56:27:94:91:fb:ac:90:72:45:d3:d6:10:8f:68:
         cd:a4:1b:34:2c:fe:fc:61:29:63:d3:98:b3:94:73:15:e4:f2:
         e8:7f:71:f7:d7:40:be:ee:67:a9:de:76:49:41:d0:aa:6c:74:
         83:04:ad:c9:6b:8d:24:a9:9c:e1:0b:a6:7e:a5:7b:8f:4d:15:
         04:82:bf:73:f4:36:bb:30:cd:c5:de:e4:36:64:78:e6:66:b6:
         fd:ad:10:79:67:71:17:bf:0a:c3:15:17:8c:ec:c2:78:9e:ce:
         bc:e7:92:f9:0a:07:08:7b:c4:d4:df:40:9d:98:81:81:05:c2:
         a4:28:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org