Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/71B63744730411ED9A5F8AB5F1222468.roa
File:                     71B63744730411ED9A5F8AB5F1222468.roa (raw, json)
Hash identifier:          JE6rXF8QZw+hw/crQ/YYpET21v3+NpyC9S6KiUSD0nQ=
Subject key identifier:   2F:E8:A1:87:55:F5:7B:06:B0:FF:B2:35:B1:98:E6:9F:81:1A:86:9A
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       092B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/71B63744730411ED9A5F8AB5F1222468.roa
Signing time:             Sat 03 Dec 2022 12:17:24 +0000
ROA not before:           Sat 03 Dec 2022 12:17:20 +0000
ROA not after:            Tue 03 Dec 2024 12:17:20 +0000
asID:                     207459
IP address blocks:        102.165.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 28 Jan 2023 07:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347 (0x92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec  3 12:17:20 2022 GMT
            Not After : Dec  3 12:17:20 2024 GMT
        Subject: CN=638b3e54-21c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:d5:3e:b0:51:83:42:33:e1:53:5c:ae:18:
                    74:d9:bc:3b:5f:1c:3d:26:4c:03:a1:ba:b1:9a:5f:
                    4d:6b:e0:3f:42:a8:55:bd:21:33:91:ca:c2:03:72:
                    5c:03:da:34:ac:43:88:7b:e2:ff:2c:5f:08:c3:b2:
                    bf:6e:cd:9f:cb:5b:64:ac:88:1a:66:65:f0:5c:45:
                    13:56:4e:65:62:7a:ed:38:e7:5a:ee:cd:dc:be:d8:
                    d6:98:ca:ec:e6:20:ce:7b:e2:9a:e4:24:b8:e2:7a:
                    8c:bc:4c:5f:40:b9:af:aa:95:d4:07:37:4f:09:91:
                    cf:2e:e9:23:8b:94:c0:cb:59:a0:b6:14:71:95:a0:
                    6c:c6:cc:95:06:44:d4:72:f0:ba:8d:8a:ae:8f:23:
                    d5:76:59:6e:ad:d6:7a:f9:21:47:4b:41:92:54:85:
                    8d:87:e4:43:ec:bd:28:d6:00:52:c4:a8:f3:08:2a:
                    ca:ed:ee:97:70:8e:63:72:dd:38:66:88:26:95:f6:
                    8e:4a:91:86:32:ba:6e:aa:04:1c:de:5d:44:cb:6c:
                    03:a5:68:cf:92:20:f3:da:8b:76:c8:52:94:84:ea:
                    9c:7a:c0:7d:2b:07:2d:a3:3d:d2:e9:aa:f4:91:e5:
                    09:d6:a0:8f:e4:a3:9d:5d:fa:b8:ae:af:7d:b0:6d:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:A1:87:55:F5:7B:06:B0:FF:B2:35:B1:98:E6:9F:81:1A:86:9A
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/71B63744730411ED9A5F8AB5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:73:e9:6c:b1:7e:2c:10:5e:34:4e:66:43:a9:20:6b:14:
         83:e1:88:89:5f:a0:b4:cf:af:ab:fe:52:1a:97:b8:60:da:1d:
         42:5e:97:27:98:7c:1c:6e:f6:a7:96:e5:34:c6:b8:17:38:7f:
         a6:ef:ff:3b:80:61:9d:ce:29:2d:a4:4e:4a:77:2e:15:34:e5:
         c7:5f:7a:6e:85:fa:5f:fc:3b:85:de:01:f0:94:89:d2:24:19:
         7d:be:5f:da:26:c6:83:c5:51:b1:38:de:c7:c2:a5:38:71:b1:
         92:9b:e0:b7:c5:99:90:df:3c:1b:6d:2f:c4:53:86:f5:a5:5b:
         e2:b6:3b:45:72:37:0d:ac:54:6f:5f:31:86:32:32:21:4a:63:
         9c:72:d2:87:a3:66:f3:e7:83:ee:f1:9b:a2:76:58:27:06:0e:
         a5:99:37:2f:97:22:73:1d:3f:09:5b:e6:11:b3:9f:88:d4:67:
         72:be:1c:14:22:c7:3f:f0:f1:a4:13:4d:de:94:03:6d:54:08:
         59:40:2f:3d:1c:eb:8f:92:f7:d9:42:1f:7b:68:db:b2:37:79:
         ae:63:d1:b7:17:b8:9d:aa:b0:bd:94:8c:14:bd:1f:61:c3:f0:
         68:6b:69:d9:e6:08:ba:bf:a5:dd:ae:dc:0e:f8:6f:b8:bc:49:
         3f:6d:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org